Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/rRig5bHLDUNTQkjg9nhb4mg9C2A.roa
File: rRig5bHLDUNTQkjg9nhb4mg9C2A.roa (raw, json)
Hash identifier: EI+gjhcG3ILlNNdObgHWkrBVNki3epV7nfy9swit6k8=
Subject key identifier: AD:18:A0:E5:B1:CB:0D:43:53:42:48:E0:F6:78:5B:E2:68:3D:0B:60
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A0A7C78BF23C7F29BD787AA49A3CB1E805
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/rRig5bHLDUNTQkjg9nhb4mg9C2A.roa
Signing time: Wed 16 Sep 2026 01:14:27 +0000
ROA not before: Wed 16 Sep 2026 01:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 2a14:c380:31::/48 maxlen: 48
2a14:c380:32::/48 maxlen: 48
2a14:c380:33::/48 maxlen: 48
2a14:c380:36::/48 maxlen: 48
2a14:c380:3000::/40 maxlen: 40
2a14:c380:4000::/40 maxlen: 40
2a14:c380:5000::/40 maxlen: 40
2a14:c380:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:c7:8b:f2:3c:7f:29:bd:78:7a:a4:9a:3c:b1:e8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 16 01:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad18a0e5b1cb0d43534248e0f6785be2683d0b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:93:6b:61:a7:96:46:08:b4:4d:d5:17:82:
40:a4:f8:f8:6c:9b:0d:77:79:02:4b:02:ba:0e:3e:
9f:8c:1c:11:f5:5f:a2:32:7b:31:36:7e:86:2e:c4:
85:09:06:cd:ab:e7:53:49:86:5e:cd:66:46:72:91:
a2:23:1f:28:43:d6:78:3e:a3:aa:d5:16:80:a4:28:
e3:b7:c6:4c:db:31:83:00:4c:46:34:01:e8:1e:03:
45:3d:39:8a:00:83:37:3c:ed:2d:8a:69:07:56:ce:
46:fd:48:ee:6e:93:ae:81:2a:9f:71:c3:f3:46:1b:
35:5b:48:75:7e:05:57:81:4f:e4:16:49:a7:9d:5b:
dc:e6:37:3a:47:39:fe:85:be:6b:43:0b:18:d6:32:
4c:56:fc:55:c9:df:c4:1c:b4:22:2f:66:b2:a6:84:
39:72:d8:09:bf:d2:ae:6c:8c:d2:fe:c7:11:c5:83:
df:ea:63:a2:fb:45:91:1b:76:4c:a9:5a:f6:fa:f8:
e7:4d:5a:57:ff:7f:d8:04:ef:8d:01:88:9f:3e:63:
50:76:59:a6:15:b4:1d:53:bd:96:f4:f6:e7:13:29:
24:1a:65:d0:bb:b3:e2:6d:bb:f0:fd:85:ba:ee:ae:
ef:44:a6:87:78:c6:2d:92:2a:ef:f4:60:68:77:2d:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:18:A0:E5:B1:CB:0D:43:53:42:48:E0:F6:78:5B:E2:68:3D:0B:60
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/rRig5bHLDUNTQkjg9nhb4mg9C2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:31::-2a14:c380:33:ffff:ffff:ffff:ffff:ffff
2a14:c380:36::/48
2a14:c380:3000::/40
2a14:c380:4000::/40
2a14:c380:5000::/40
2a14:c380:6000::/40
Signature Algorithm: sha256WithRSAEncryption
43:61:10:44:6e:da:9b:e3:1d:a6:e4:09:87:c5:11:3a:f3:d4:
92:cd:f8:cb:6f:b1:7d:7f:d6:0f:a8:8d:53:dc:6c:8b:5b:2a:
4f:50:6a:9d:09:c3:10:29:e7:cc:bf:8f:7f:fc:d9:9f:70:c4:
4b:e2:97:e4:e4:64:2d:f0:c7:29:3f:43:10:cf:51:7f:fc:6b:
26:7f:83:44:b1:1d:c6:66:ea:62:bb:44:96:af:fb:c6:ef:07:
b2:58:f3:6c:02:6d:ee:b6:ae:50:9f:6e:00:3e:d0:90:d4:7a:
19:d3:b6:3f:26:be:20:f5:f3:09:7e:be:3b:4a:ed:8c:4a:40:
1d:e6:f3:7c:2d:8b:44:17:90:b8:da:30:23:c7:c2:a5:72:b5:
65:7a:cc:f2:ff:e9:b9:af:4c:5f:81:9c:ee:e4:01:ba:e5:31:
38:ef:1f:1f:0c:9c:05:eb:f1:31:2c:47:12:22:f7:5d:13:fa:
65:4f:99:35:ef:d3:50:81:f2:7c:a6:5d:b2:4c:f2:9b:bb:3b:
ea:65:30:34:ed:88:86:13:47:62:38:15:d8:14:70:9f:ca:aa:
ff:6d:3d:31:e4:3f:29:1a:43:4e:99:af:cb:44:fd:22:57:e8:
15:fe:34:e1:23:59:81:1c:f8:a2:15:7a:2a:5e:73:03:20:7f:
ba:7b:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:36 2026 by rpki-client