Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pHZizA9keRYv1qiSroGLhiaLU98.roa
File: pHZizA9keRYv1qiSroGLhiaLU98.roa (raw, json)
Hash identifier: Y/+xI9QcC5Y1x4+7Tb35fM5oHm0oMnw56UrAcRv17fY=
Subject key identifier: A4:76:62:CC:0F:64:79:16:2F:D6:A8:92:AE:81:8B:86:26:8B:53:DF
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019E7B2733CDA45217B35DEBE741E948F6C8
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pHZizA9keRYv1qiSroGLhiaLU98.roa
Signing time: Sat 30 May 2026 23:10:27 +0000
ROA not before: Sat 30 May 2026 23:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197569
IP address blocks: 2a14:c380:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:27:33:cd:a4:52:17:b3:5d:eb:e7:41:e9:48:f6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: May 30 23:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a47662cc0f6479162fd6a892ae818b86268b53df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:e5:5b:7a:46:cb:b1:6f:d5:d8:93:ef:b7:
ce:32:fb:4f:a4:2a:6f:eb:50:50:0f:13:0b:1c:ff:
19:e3:b0:2b:2f:aa:0d:81:3e:f8:3d:0b:56:94:f6:
71:a2:d3:58:02:ec:b2:7a:64:b9:b6:79:32:a6:7c:
33:0a:c4:ee:6b:b9:f7:40:d3:bd:b4:92:9b:44:4e:
16:4b:f1:ec:3f:fb:41:e5:68:c9:98:7c:bf:d9:46:
85:23:c2:8d:a9:c2:14:53:a7:20:30:7e:76:23:54:
76:24:fb:99:18:b5:8d:66:9a:37:a8:91:62:a5:f5:
a6:26:4c:4d:da:59:0f:aa:d9:d8:66:c7:a4:12:35:
75:39:0a:8e:34:d6:91:4a:ab:e4:a3:19:b9:96:3d:
d6:20:b1:59:0f:2f:77:58:fb:b0:35:66:9d:11:ce:
41:63:15:d1:9a:23:41:23:21:21:73:33:9a:8a:70:
19:32:23:60:dd:1a:74:fe:90:09:13:e7:99:37:84:
47:a9:b1:0a:2d:0e:53:71:ae:81:44:70:ab:10:4d:
53:f9:42:cb:06:09:b1:f5:51:06:93:47:43:cc:d3:
03:df:6b:48:10:13:c9:3a:f0:b4:61:8a:51:b0:a7:
19:99:a8:49:ff:64:ba:f6:56:1f:7b:7e:64:f5:e7:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:62:CC:0F:64:79:16:2F:D6:A8:92:AE:81:8B:86:26:8B:53:DF
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pHZizA9keRYv1qiSroGLhiaLU98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1000::/40
Signature Algorithm: sha256WithRSAEncryption
24:cf:bf:ad:6a:83:9d:bf:3c:bd:b9:63:84:58:66:e9:08:a0:
39:36:c4:21:0a:74:53:98:b7:6c:cd:f2:1b:96:34:97:fc:8b:
ae:c8:31:c2:16:19:e3:42:4f:8c:6f:f8:33:5b:49:64:4a:59:
97:23:72:16:88:4d:a1:70:b6:f1:1e:bb:c9:3c:dc:36:fb:33:
c2:d7:5b:0b:05:e4:09:59:5b:b0:47:7c:7e:e2:ce:3b:67:53:
71:18:61:81:f4:3d:52:7f:1f:e1:cb:09:be:da:54:b0:29:4d:
fb:e9:31:10:7f:ca:ad:66:6a:e1:7a:66:d4:d3:33:66:c2:83:
c6:06:e9:4e:cf:51:26:2c:a6:98:7c:62:cb:82:c4:f1:d3:02:
e1:7e:2d:5a:4d:52:f5:38:29:48:bd:0b:d3:12:50:be:14:fb:
ea:4f:4f:82:4d:5c:ed:c8:49:e0:e5:92:df:5e:ff:c3:b1:d1:
29:8d:5a:6c:87:1a:ee:17:57:16:c1:7c:50:92:46:ac:4e:a9:
5c:06:f5:9b:de:f1:51:b8:7c:29:ed:93:92:aa:40:b0:22:a2:
cb:b6:73:5f:02:84:35:49:c2:80:ee:17:46:08:b9:bb:ca:00:
44:9e:79:5f:77:e4:04:14:14:b0:9a:44:ef:67:5e:56:31:b2:
4f:61:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:05 2026 by rpki-client