Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/YAxtpxk6btXoS692hrjnQiHR_i4.roa
File: YAxtpxk6btXoS692hrjnQiHR_i4.roa (raw, json)
Hash identifier: jiBSMZ9jL8+Q/Zvcc3wPPUes5B6btcTRF2GBik+Zbvg=
Subject key identifier: 60:0C:6D:A7:19:3A:6E:D5:E8:4B:AF:76:86:B8:E7:42:21:D1:FE:2E
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 0198527A53C55BAAD6A816CC2B1A73FD4806
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/YAxtpxk6btXoS692hrjnQiHR_i4.roa
Signing time: Mon 28 Jul 2025 19:20:05 +0000
ROA not before: Mon 28 Jul 2025 19:20:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208824
IP address blocks: 2a14:c380:340::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:7a:53:c5:5b:aa:d6:a8:16:cc:2b:1a:73:fd:48:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 28 19:20:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=600c6da7193a6ed5e84baf7686b8e74221d1fe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:4f:aa:e9:97:cf:19:4b:3d:1f:f5:03:6b:
30:d8:61:f1:7d:fd:c4:d4:eb:3a:7b:12:d7:21:9d:
4d:bb:19:62:08:09:bc:0e:8e:f9:7f:5b:b1:16:f2:
6c:82:fe:bb:a0:79:af:ed:fc:54:53:99:4b:5e:62:
a1:fd:e2:2a:43:d4:a1:3b:04:d3:bb:38:30:c6:96:
63:7f:78:26:19:ef:4a:1e:27:46:c2:e1:01:a7:d3:
d6:5b:d2:fc:3c:5c:4a:11:37:d5:9e:8c:77:5d:89:
7c:37:a0:4f:58:f6:ad:a6:84:8b:2b:b7:b0:be:a6:
b6:a9:56:7b:8d:c3:6c:9d:dc:7b:6c:fb:c0:ee:d9:
fb:59:c6:69:01:9e:5a:a9:25:51:2c:9e:23:70:3f:
d9:62:b4:51:5d:96:69:66:74:a5:e0:6b:9c:57:58:
b2:3f:d4:c4:94:2c:1d:5b:bd:bd:4b:87:ce:ed:7c:
e6:fc:41:be:9d:96:5d:a3:5f:10:33:eb:b1:d2:b7:
ee:80:57:2e:40:ff:38:10:2e:55:58:29:93:c9:70:
5e:b9:51:46:ca:d6:15:c8:52:3d:ae:a9:98:2e:de:
a8:f9:e6:1b:39:cf:ea:e0:8d:e9:57:4a:3c:d1:b9:
de:84:a5:d1:0a:01:b7:3b:d8:5d:ba:0a:8b:71:9a:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:6D:A7:19:3A:6E:D5:E8:4B:AF:76:86:B8:E7:42:21:D1:FE:2E
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/YAxtpxk6btXoS692hrjnQiHR_i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:340::/44
Signature Algorithm: sha256WithRSAEncryption
5e:06:64:2a:a1:56:e6:71:21:6c:cc:f2:bc:a4:c2:be:69:b8:
97:20:3d:1e:a5:2f:12:c2:bb:fe:a5:d5:8a:b7:01:24:f7:60:
b7:b8:b1:29:9d:8b:5c:b2:ae:0c:53:d5:43:a4:d2:6f:43:91:
52:f2:1c:94:a7:df:31:24:30:a8:5f:f1:69:99:b8:d5:be:cd:
b8:aa:45:e9:7e:17:30:d5:6c:fb:ee:1e:b6:76:85:1e:d2:80:
eb:f1:7a:e2:1c:24:9b:2f:0f:06:39:6f:c4:c7:c2:cf:6f:e5:
88:43:a5:9e:dc:8e:6c:64:e5:22:85:60:23:85:ac:95:84:c5:
d4:32:a0:06:c2:03:ca:a0:e5:69:03:d7:cb:e3:4a:df:f1:fe:
d5:4c:d8:7a:46:41:c9:88:67:8f:f7:48:97:6c:f4:1b:34:5a:
d1:40:ac:14:da:15:5e:ce:d0:e6:de:23:b2:4f:26:b9:9b:68:
bb:56:7d:be:da:fd:eb:af:af:ca:cc:55:52:1e:0e:04:a4:e2:
93:fc:65:46:48:37:d6:2c:99:fa:e4:1d:6a:14:db:ed:03:43:
1b:40:5d:60:b1:34:46:bb:b5:bf:94:ac:1e:cf:65:35:69:1d:
de:e5:2d:f1:1a:4a:71:b4:70:a5:7c:c8:12:1c:18:de:ad:d5:
fe:03:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:48 2025 by rpki-client