Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/vUggmPdiwDSiPD2AXqk8Z3s64o4.roa
File: vUggmPdiwDSiPD2AXqk8Z3s64o4.roa (raw, json)
Hash identifier: R9qC/oUAE6/liRvDNSWp0mSMoeZu1Ap7oHf3H0KACU4=
Subject key identifier: BD:48:20:98:F7:62:C0:34:A2:3C:3D:80:5E:A9:3C:67:7B:3A:E2:8E
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A1ABE7838C3FB686D60622DBA64B89855A
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/vUggmPdiwDSiPD2AXqk8Z3s64o4.roa
Signing time: Thu 05 Nov 2026 13:30:38 +0000
ROA not before: Thu 05 Nov 2026 13:30:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 2a14:c380:2c::/48 maxlen: 48
2a14:c380:2d::/48 maxlen: 48
2a14:c380:2e::/48 maxlen: 48
2a14:c380:31::/48 maxlen: 48
2a14:c380:32::/48 maxlen: 48
2a14:c380:33::/48 maxlen: 48
2a14:c380:36::/48 maxlen: 48
2a14:c380:3000::/40 maxlen: 40
2a14:c380:4000::/40 maxlen: 40
2a14:c380:5000::/40 maxlen: 40
2a14:c380:6000::/40 maxlen: 40
2a14:c381::/32 maxlen: 32
2a14:c382::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:e7:83:8c:3f:b6:86:d6:06:22:db:a6:4b:89:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Nov 5 13:30:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd482098f762c034a23c3d805ea93c677b3ae28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:e4:57:ee:ca:73:f0:73:f7:69:69:93:5d:
96:b1:2e:19:e8:2b:85:6e:17:fb:58:1c:7c:dc:56:
5f:26:6b:2d:1f:4b:b1:48:cd:a6:ef:4b:19:e8:9f:
7b:ea:f1:6d:8b:99:b0:61:13:d6:d5:3d:6c:31:ee:
ce:c1:ac:00:0b:45:c6:28:16:37:9c:30:20:e7:1d:
0d:69:d1:cc:44:cd:69:b3:d4:54:08:60:5a:55:9d:
38:aa:95:c6:ac:c7:2c:57:a1:ba:bb:4d:12:13:60:
b1:d2:05:1d:9d:ea:ac:43:8a:f1:f8:3d:d0:6c:d2:
98:35:43:e8:bd:17:fc:76:1d:b7:f2:58:bb:ef:7f:
ea:74:4e:0f:ac:fb:31:d7:94:89:a1:77:0f:9b:95:
c3:40:9e:71:79:9b:da:e5:c0:36:e4:a3:59:0c:54:
1d:c6:9a:e3:dd:39:5e:a8:c4:c7:2f:f0:be:21:a2:
ed:15:49:b8:5f:b7:3b:a0:ea:b1:14:62:06:4b:7f:
cf:5b:31:1a:aa:b7:88:94:6b:28:ca:0c:9b:7c:4c:
da:5d:5f:30:32:20:d0:c2:3b:e3:aa:7f:7b:ae:46:
8d:d0:5f:54:b6:fe:29:66:01:bd:23:e4:39:6f:89:
9c:9c:d8:d8:73:af:f7:66:08:23:71:58:f5:0c:60:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:20:98:F7:62:C0:34:A2:3C:3D:80:5E:A9:3C:67:7B:3A:E2:8E
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/vUggmPdiwDSiPD2AXqk8Z3s64o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:2c::-2a14:c380:2e:ffff:ffff:ffff:ffff:ffff
2a14:c380:31::-2a14:c380:33:ffff:ffff:ffff:ffff:ffff
2a14:c380:36::/48
2a14:c380:3000::/40
2a14:c380:4000::/40
2a14:c380:5000::/40
2a14:c380:6000::/40
2a14:c381::-2a14:c382:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:62:aa:8c:79:32:a6:5f:ce:88:15:1f:bb:68:f3:69:0c:98:
85:ab:72:96:88:90:18:71:d7:25:dd:4e:4f:33:59:db:5e:57:
de:72:58:b8:4a:50:0c:ac:6f:61:07:47:d8:eb:31:45:a3:9f:
fa:dc:2b:4a:b6:27:6d:a1:4c:21:99:6c:a2:07:f7:18:47:21:
a8:04:e4:8e:df:7a:92:c1:57:6f:a3:6d:5e:ae:a4:9a:a5:5a:
78:3c:6f:2c:a1:93:2b:0b:58:4a:d6:a7:aa:33:b9:6f:0a:30:
2c:a7:27:d3:88:87:99:44:f8:fd:54:12:57:7b:b6:a8:d9:27:
d9:80:d4:c0:60:14:88:74:a3:5a:5d:c0:45:21:61:a9:d9:ba:
1c:e0:d3:95:83:b5:bb:b2:22:0c:70:0c:e9:41:ab:70:86:bb:
de:1f:16:9b:f4:3b:9e:d1:11:8a:c9:89:45:08:6d:a3:40:40:
8f:67:c8:c9:cb:1e:c2:b4:ec:29:6a:da:7a:38:77:8b:33:14:
71:66:8b:a8:b4:64:4c:6b:a4:42:31:c0:2d:d4:bb:45:14:58:
74:3d:5a:2c:69:c5:e3:95:6f:11:9b:7d:ac:d2:d0:7c:06:de:
e7:35:77:e4:f4:47:46:15:dc:5b:27:a5:06:39:c7:9c:e1:aa:
a6:cb:09:97
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAaGr54OMP7aG1gYi26ZLiYVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYxMTA1MTMzMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDQ4MjA5OGY3NjJjMDM0YTIzYzNkODA1ZWE5M2M2NzdiM2FlMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza/kV+7Kc/Bz92lpk12WsS4Z6CuF
bhf7WBx83FZfJmstH0uxSM2m70sZ6J976vFti5mwYRPW1T1sMe7OwawAC0XGKBY3
nDAg5x0NadHMRM1ps9RUCGBaVZ04qpXGrMcsV6G6u00SE2Cx0gUdneqsQ4rx+D3Q
bNKYNUPovRf8dh238li773/qdE4PrPsx15SJoXcPm5XDQJ5xeZva5cA25KNZDFQd
xprj3TleqMTHL/C+IaLtFUm4X7c7oOqxFGIGS3/PWzEaqreIlGsoygybfEzaXV8w
MiDQwjvjqn97rkaN0F9Utv4pZgG9I+Q5b4mcnNjYc6/3ZggjcVj1DGAVOwIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFL1IIJj3YsA0ojw9gF6pPGd7OuKOMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvdlVnZ21QZGl3RFNpUEQyQVhxazhaM3M2NG80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBnBAIAAjBhMBIDBwIqFMOA
ACwDBwAqFMOAAC4wEgMHACoUw4AAMQMHAioUw4AAMAMHACoUw4AANgMGACoUw4Aw
AwYAKhTDgEADBgAqFMOAUAMGACoUw4BgMA4DBQAqFMOBAwUAKhTDgjANBgkqhkiG
9w0BAQsFAAOCAQEAPWKqjHkypl/OiBUfu2jzaQyYhatyloiQGHHXJd1OTzNZ215X
3nJYuEpQDKxvYQdH2OsxRaOf+twrSrYnbaFMIZlsogf3GEchqATkjt96ksFXb6Nt
Xq6kmqVaeDxvLKGTKwtYStanqjO5bwowLKcn04iHmUT4/VQSV3u2qNkn2YDUwGAU
iHSjWl3ARSFhqdm6HODTlYO1u7IiDHAM6UGrcIa73h8Wm/Q7ntERismJRQhto0BA
j2fIycsewrTsKWraejh3izMUcWaLqLRkTGukQjHALdS7RRRYdD1aLGnF45VvEZt9
rNLQfAbe5zV35PRHRhXcWyelBjnHnOGqpssJlw==
-----END CERTIFICATE-----
Generated at Sun Nov 8 23:45:59 2026 by rpki-client