Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/a62EDz19DcSpvjg1ea0btlvVXoA.roa
File: a62EDz19DcSpvjg1ea0btlvVXoA.roa (raw, json)
Hash identifier: wg85xe/OTifVXNuTMXsEArZBGPpglgR3qDaWKb997Oo=
Subject key identifier: 6B:AD:84:0F:3D:7D:0D:C4:A9:BE:38:35:79:AD:1B:B6:5B:D5:5E:80
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A19D78DF879F77A2E66171DA5CEF45C175
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/a62EDz19DcSpvjg1ea0btlvVXoA.roa
Signing time: Mon 02 Nov 2026 18:15:06 +0000
ROA not before: Mon 02 Nov 2026 18:15:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198189
IP address blocks: 2a14:c380:1200::/40 maxlen: 40
2a14:c380:1500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:78:df:87:9f:77:a2:e6:61:71:da:5c:ef:45:c1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Nov 2 18:15:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bad840f3d7d0dc4a9be383579ad1bb65bd55e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:c8:20:60:40:49:ca:b5:32:bf:b0:1a:6c:
a3:de:31:af:be:98:0a:c4:89:0d:9c:23:18:42:c3:
40:25:82:5c:40:2d:cc:52:4e:81:97:3a:08:99:cc:
f9:9f:cd:b0:f7:e1:02:65:f7:ee:96:c0:2d:71:eb:
c6:46:5b:c5:13:79:a2:45:89:78:1e:84:42:bc:ed:
a7:15:04:e1:0b:4e:bd:40:c4:29:ee:03:03:4a:9a:
e9:6f:15:54:ae:af:af:6e:7d:73:ce:16:b7:b3:8c:
da:57:6e:83:0f:28:7b:5c:3a:67:9e:8b:88:70:5b:
9e:4c:13:2a:a0:79:0f:74:d3:3b:c4:5f:e1:10:c2:
72:ab:0e:09:0b:d0:eb:61:ef:51:6c:d3:c3:c9:4a:
fe:0e:2e:28:3f:a7:2b:4a:f1:49:28:63:67:fc:79:
cf:4d:08:8c:d2:fa:e7:a3:56:8e:8a:d1:0f:77:c7:
48:82:a5:af:9e:59:24:d0:31:cc:7f:a0:ff:f7:81:
3a:53:e3:80:9d:fc:b2:10:ba:66:ff:83:3e:4c:ea:
00:d1:0f:6f:19:62:e4:3a:1b:b1:d2:0a:2e:0c:5d:
5b:0f:3b:16:6a:bd:54:c7:57:a7:70:0b:ff:df:49:
b3:b0:c0:72:f9:dd:da:35:b2:4c:77:3c:02:09:74:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:84:0F:3D:7D:0D:C4:A9:BE:38:35:79:AD:1B:B6:5B:D5:5E:80
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/a62EDz19DcSpvjg1ea0btlvVXoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1200::/40
2a14:c380:1500::/40
Signature Algorithm: sha256WithRSAEncryption
23:b3:cc:5f:1b:ab:b0:04:26:39:c5:7a:08:0a:bd:35:b9:d9:
db:d8:37:78:81:37:3b:57:60:f3:7c:5a:23:4f:1e:ab:9a:93:
6e:33:c6:f6:66:fd:36:76:c2:a4:03:07:d4:02:5d:db:19:45:
db:23:63:01:bb:fc:e4:57:38:a5:46:2c:e2:9f:18:5c:3c:d2:
a8:e8:99:4f:66:45:81:3e:f7:b4:c7:f8:fc:b2:b2:2f:c9:27:
4f:40:80:9b:14:00:6d:e4:ef:88:7d:5b:ca:95:a9:78:4f:7f:
e8:70:3a:52:ff:cb:83:32:5d:c9:7d:b5:cd:39:e0:9e:9e:90:
b2:27:8e:76:c8:6d:fc:43:d8:68:66:cb:7e:1f:8c:e2:2d:e9:
03:6f:ae:2b:38:b1:1d:4e:d6:a7:65:03:48:2e:80:8a:e7:06:
41:98:c8:6c:45:29:af:a6:6f:b5:cf:19:3d:20:e3:af:15:5e:
8d:9b:d6:6e:2a:7f:fe:8f:42:f1:bd:e0:2c:55:87:f5:c4:99:
8b:f1:9f:6e:12:96:d9:b3:9b:e4:37:73:f7:12:68:5c:fa:03:
d7:c0:a5:2a:9b:45:e8:4d:4b:d4:91:65:e2:9f:7b:7a:aa:99:
a3:3c:8b:87:a5:3f:75:db:a7:82:e3:07:c4:97:2a:9b:1e:b2:
21:f2:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:09:04 2026 by rpki-client