Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa
File: WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa (raw, json)
Hash identifier: wB9N0PcZkOcrh3O/SmhX92RwWwOtgRdO/TEPN7XWM+M=
Subject key identifier: 5A:84:09:DA:8B:18:A0:5B:98:A1:62:32:1E:F8:28:F4:27:9C:FE:DE
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 019B7AC938D76E8662119FBE5C4A23CBA1E0
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa
Signing time: Thu 01 Jan 2026 18:19:26 +0000
ROA not before: Thu 01 Jan 2026 18:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34318
IP address blocks: 2.58.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:38:d7:6e:86:62:11:9f:be:5c:4a:23:cb:a1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Jan 1 18:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a8409da8b18a05b98a162321ef828f4279cfede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:9b:4d:f3:31:08:f0:78:5f:22:62:ab:9b:
f7:b2:ed:4a:95:df:f1:d2:eb:dd:3e:d7:77:12:69:
17:27:c0:b1:05:0b:dc:24:1c:30:bc:c9:ac:50:b5:
33:52:4a:af:55:ea:d3:42:46:e4:dc:44:dd:f5:47:
2e:48:cb:24:03:2a:5e:6f:f7:33:92:78:cc:24:8d:
4e:f6:f3:ea:1b:d5:15:d4:4b:cf:20:a1:b8:00:e4:
f1:02:8b:d5:0d:3c:b5:af:32:4c:a4:8c:ef:c3:09:
b6:e1:f7:20:3f:95:71:4c:05:04:96:76:2a:86:46:
6d:36:08:6a:0a:58:a0:bd:f2:99:94:f8:a7:09:85:
0e:a3:c4:3c:08:be:c3:b5:60:9f:9f:81:77:a7:bb:
6d:c4:6a:1c:62:9b:68:1a:e7:f0:9d:4a:dc:85:5d:
ff:31:51:03:2e:ad:31:ed:7b:00:8c:ca:87:f8:13:
85:53:b4:65:82:a0:1b:15:06:3f:4b:2e:0b:41:24:
c6:a4:a5:f7:4d:b5:ed:f0:a6:5d:31:ff:7e:07:99:
c3:08:5b:d7:62:67:0c:1d:72:4e:26:13:a0:9d:7d:
5b:69:b8:68:5a:53:18:31:fa:99:c6:e3:68:ad:90:
7f:5e:9f:d2:92:9b:d2:66:e4:4e:59:ac:ea:d5:01:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:09:DA:8B:18:A0:5B:98:A1:62:32:1E:F8:28:F4:27:9C:FE:DE
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/WoQJ2osYoFuYoWIyHvgo9Cec_t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.114.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bb:e5:e7:57:f2:6d:39:6d:29:40:35:fb:41:1b:0f:cd:21:
fa:43:db:a4:1b:78:6b:b9:2d:4d:9e:72:11:b2:c9:80:11:ee:
6e:78:1e:dc:e0:4d:3c:86:30:2d:48:71:42:6f:e1:04:77:42:
9e:ff:14:f1:c3:08:63:e3:bc:bf:1b:aa:0b:da:c8:59:eb:1c:
f0:28:29:37:34:b1:17:7a:45:c2:19:01:03:87:ae:5e:57:5e:
90:6d:78:ee:c4:23:a1:2c:41:20:82:1b:41:d7:59:3d:2a:6c:
a4:bf:44:97:c2:b9:56:27:27:a1:70:a2:64:6a:a7:f1:f5:91:
47:54:2c:2a:8c:41:8e:da:c3:e6:bf:fc:81:b7:2b:d5:c0:5b:
ac:90:01:56:88:be:7c:80:7e:3a:18:ff:ad:ff:d9:f8:88:1a:
d9:3b:b9:9d:58:79:1e:98:db:25:2e:22:46:18:8b:95:e7:1d:
14:e9:67:25:e3:de:c1:4d:c3:26:93:3d:6e:6a:0e:c9:95:bb:
8e:fd:5f:f3:41:5a:b6:33:66:5b:c4:ab:fd:a7:99:9b:75:ce:
fc:3e:2a:d7:df:3d:aa:e5:c2:9b:d4:59:eb:34:00:51:b7:0b:
51:8b:3d:6e:fa:8e:02:86:67:89:5e:e4:c7:f6:71:ca:5d:a3:
1d:ca:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:46 2026 by rpki-client