Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/nVyyZwMa4UcMmXLtcVlvePO4YUA.roa
File: nVyyZwMa4UcMmXLtcVlvePO4YUA.roa (raw, json)
Hash identifier: rd4QnkOETLeVOAHdQnBo5NGAzyVmhjaI8beEAWrUN7U=
Subject key identifier: 9D:5C:B2:67:03:1A:E1:47:0C:99:72:ED:71:59:6F:78:F3:B8:61:40
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A17F05C0285B7F98418B9C35313A8E695A
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/nVyyZwMa4UcMmXLtcVlvePO4YUA.roa
Signing time: Tue 27 Oct 2026 20:20:45 +0000
ROA not before: Tue 27 Oct 2026 20:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 2a14:c380:1100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:05:c0:28:5b:7f:98:41:8b:9c:35:31:3a:8e:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Oct 27 20:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d5cb267031ae1470c9972ed71596f78f3b86140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:83:d5:7f:5b:af:ce:49:6e:26:5a:a1:b8:
1f:08:79:d6:c0:22:2e:8d:07:ee:e3:01:01:72:d5:
d1:4b:f0:12:d2:81:dc:95:c0:25:a1:68:17:91:42:
6b:17:fc:ad:70:71:db:b3:56:94:02:d5:b1:62:0f:
5d:8a:96:85:91:8f:26:d8:07:68:52:9e:50:69:02:
3d:b8:17:28:b1:08:20:e0:8e:a6:4c:ab:79:81:be:
a2:5b:0f:31:43:e4:04:aa:82:69:50:b6:a2:a5:04:
24:e0:b3:ad:f5:16:3d:61:73:c8:9b:7c:3b:10:ec:
e0:58:0d:de:1c:0c:a2:ba:84:c5:41:18:da:f3:31:
68:a5:4a:47:3a:70:77:14:66:91:8e:f3:20:7e:57:
54:13:03:3c:b5:a5:bb:59:66:ec:8d:bf:aa:5c:bb:
c4:f8:6a:03:4e:c4:d2:60:f0:7a:17:76:6c:f9:90:
d5:0e:c4:b9:90:a0:11:c2:f4:e4:4a:09:15:a8:cf:
b9:86:e6:3c:75:cd:12:dc:66:2d:8d:1d:08:18:50:
dd:5e:69:b7:66:27:8f:ef:be:69:e4:21:ed:c1:be:
a5:d4:38:66:6e:b4:9d:54:40:5b:df:39:1c:6a:9f:
00:79:cc:92:0f:1b:71:0a:14:e5:0b:3a:5f:bd:b4:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5C:B2:67:03:1A:E1:47:0C:99:72:ED:71:59:6F:78:F3:B8:61:40
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/nVyyZwMa4UcMmXLtcVlvePO4YUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1100::/40
Signature Algorithm: sha256WithRSAEncryption
85:a4:38:35:5d:79:56:8e:39:01:f4:40:83:f8:ba:96:73:b0:
2b:1b:3b:c4:d3:73:58:a4:60:a5:58:65:30:78:de:00:71:f0:
8b:11:b8:e3:bd:1b:e1:cb:b6:c0:5c:ac:29:ca:46:f7:9b:64:
72:c0:f7:9d:9f:87:8d:3d:a1:1a:96:57:a8:1b:e1:c2:6c:b3:
7f:c8:60:2e:1b:f8:d4:05:cb:fa:40:bd:9f:e9:cf:7e:9f:f0:
5d:5a:b5:74:a6:e9:0d:d8:27:dd:bd:19:36:0b:e6:3a:41:31:
66:6f:b5:f9:a3:e8:67:11:12:78:44:6f:46:03:84:4c:b9:d3:
bb:a5:91:27:73:c4:d1:b8:d9:22:d7:16:6a:a6:b3:ea:62:7d:
21:93:b0:85:9b:da:78:a2:1b:71:e5:f5:c1:86:9d:4d:68:25:
f2:1f:c6:b3:a2:e3:f6:35:cf:2f:bc:4d:c8:ee:06:fb:15:be:
59:56:71:11:3e:0e:79:37:e0:ad:b4:b8:8e:d8:75:8d:57:e5:
fc:2c:81:25:c6:e1:90:7f:c1:aa:0a:11:8b:22:27:9a:69:24:
f6:e8:d6:55:d1:b1:15:4f:61:14:7d:2a:fe:0b:f3:13:e8:d9:
4f:05:26:87:33:aa:e0:e3:a2:c9:09:ee:d2:c0:3f:5a:8c:2b:
a8:5a:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:59:23 2026 by rpki-client