Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pvHTT2M7fprgBHxbbY0AywR78m4.roa
File: pvHTT2M7fprgBHxbbY0AywR78m4.roa (raw, json)
Hash identifier: +N0H2ZIioeI4x4jGedbP4Ja1P36CDMgs4lbH2l5eSWU=
Subject key identifier: A6:F1:D3:4F:63:3B:7E:9A:E0:04:7C:5B:6D:8D:00:CB:04:7B:F2:6E
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A06C0AC5B293753753718D4D5DF10CC1D3
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pvHTT2M7fprgBHxbbY0AywR78m4.roa
Signing time: Fri 04 Sep 2026 10:50:40 +0000
ROA not before: Fri 04 Sep 2026 10:50:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202986
IP address blocks: 2a14:c380:d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:0a:c5:b2:93:75:37:53:71:8d:4d:5d:f1:0c:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 4 10:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6f1d34f633b7e9ae0047c5b6d8d00cb047bf26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:43:38:f7:da:e6:18:7a:87:a0:b2:dd:71:
da:96:83:8d:e0:a3:5a:29:57:bb:77:4e:12:6b:7b:
d5:4a:63:74:03:0a:41:65:e3:fe:be:e8:97:c5:a8:
97:e5:02:7b:75:64:a3:42:59:73:92:58:13:2a:02:
aa:b2:85:1d:e6:30:4d:21:22:2e:72:bf:fa:01:29:
b2:49:de:f3:31:46:d1:49:f8:82:13:40:01:40:c6:
5e:98:b4:51:c3:26:74:0b:47:3d:9d:ab:5c:a4:5e:
c7:16:cc:3c:46:fb:2e:2e:ee:e8:df:eb:13:3d:8f:
04:b0:31:11:2a:9e:d2:9a:5d:d3:96:3e:40:85:ec:
ab:da:d8:5e:d6:94:cb:a9:1b:2a:e1:75:9a:cb:09:
eb:7e:fd:ff:29:a8:bf:58:92:60:3c:f9:46:b3:c9:
2e:cb:0d:d0:96:79:c6:bc:93:49:77:9e:9d:7e:42:
e1:f3:7a:00:bd:f1:59:82:1c:3f:3f:b9:4e:e3:0e:
9a:20:24:10:a9:ff:40:40:e5:d2:3b:09:a4:c1:c0:
ed:01:29:f5:12:ea:2c:9b:eb:6c:3d:39:d5:ec:7e:
16:53:10:33:2d:16:c1:30:b5:fb:2e:a4:41:46:26:
44:56:f7:18:19:10:c8:6c:ed:15:2a:70:1b:f2:6b:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:D3:4F:63:3B:7E:9A:E0:04:7C:5B:6D:8D:00:CB:04:7B:F2:6E
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pvHTT2M7fprgBHxbbY0AywR78m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:d10::/44
Signature Algorithm: sha256WithRSAEncryption
6b:d4:28:71:ee:ec:2e:65:7e:34:ec:a9:ec:86:db:0d:0f:99:
a2:b6:f3:eb:9b:e9:59:03:5c:b7:4c:93:c4:14:02:3f:d2:fa:
96:1d:4a:33:b7:b5:8b:d4:7c:76:d7:83:49:f3:b4:9b:23:90:
ce:3f:62:08:62:cb:07:22:83:9d:26:10:0c:8f:64:a0:d7:61:
6d:0c:71:f4:f3:35:e5:b5:52:bf:94:1e:e0:14:c5:0a:ef:9e:
1c:fc:1a:09:67:a4:dc:30:21:4d:a2:98:00:35:7c:ce:a1:a2:
dd:3c:1b:59:7a:ba:11:f0:93:21:e5:40:39:ac:7b:c7:08:d0:
9f:0b:5a:40:86:04:c0:ca:76:c7:c1:0b:fc:73:4b:57:b9:46:
10:cc:13:00:0e:74:7b:7a:cb:4a:86:35:93:1b:e9:5c:42:2b:
3e:2a:19:9c:24:88:6c:12:e9:1b:b3:df:a1:ac:dd:8b:cd:ea:
ce:44:92:4c:17:35:13:2e:1a:b2:fc:02:45:fd:af:f3:f4:b0:
53:77:1a:5f:a1:16:f1:b3:59:0a:38:bf:2c:91:e8:5d:01:d9:
27:ad:d1:c6:ac:cd:6b:2d:5a:da:a7:4a:f6:f9:5f:55:37:04:
50:5d:83:2c:64:f9:49:bd:2d:b1:30:22:71:38:63:9d:24:c6:
30:5b:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:22 2026 by rpki-client