Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/M0GZ8gntOz-DP6zxEZOhs2n40Lc.roa
File: M0GZ8gntOz-DP6zxEZOhs2n40Lc.roa (raw, json)
Hash identifier: KdAPQCnt0dP7uBT6Qxvz5UaKVUu1svSxGQhMeUtU0qM=
Subject key identifier: 33:41:99:F2:09:ED:3B:3F:83:3F:AC:F1:11:93:A1:B3:69:F8:D0:B7
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01983306937A697F5B974DDE83B27022CC20
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/M0GZ8gntOz-DP6zxEZOhs2n40Lc.roa
Signing time: Tue 22 Jul 2025 16:45:25 +0000
ROA not before: Tue 22 Jul 2025 16:45:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215685
IP address blocks: 2a14:c380:330::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:06:93:7a:69:7f:5b:97:4d:de:83:b2:70:22:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 22 16:45:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=334199f209ed3b3f833facf11193a1b369f8d0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:e1:e9:29:a4:44:25:24:2b:fa:e0:99:7c:
91:d8:a8:21:04:de:1d:ef:0d:1b:ea:93:3d:4b:ae:
ca:06:df:6c:fa:c2:5b:c1:e5:5e:d0:b5:2f:bb:10:
41:cb:2e:49:60:b5:86:54:04:32:fd:f5:6d:fe:62:
ae:bc:99:09:5c:a6:72:99:cb:ae:55:96:3e:e9:7d:
b1:19:f7:c6:ef:3e:16:d7:c2:c7:44:c3:56:5b:1d:
ae:51:22:b0:2e:2b:74:32:17:68:f4:c4:18:3c:ec:
a4:fa:3a:6f:ea:e5:4d:73:50:b1:23:e2:03:33:08:
bc:06:cc:f0:9f:10:dc:de:6f:a4:f4:79:05:49:21:
02:c6:31:df:1d:7a:1d:48:32:93:e5:f5:2a:66:00:
15:32:c7:57:f4:ad:f0:5d:46:50:0d:47:20:68:2e:
c4:8b:9d:19:2e:b3:e9:5f:e2:31:68:fa:b4:59:16:
ba:ab:f8:65:80:09:b1:82:65:aa:b2:ae:ad:37:41:
eb:85:9c:98:ab:6f:b6:f0:73:b8:8e:68:22:6e:c3:
62:66:11:a8:5f:b0:40:21:67:9f:d4:10:41:75:22:
03:15:d8:d3:14:05:56:2a:32:61:4a:a4:c4:fb:9c:
37:3b:cf:db:63:19:55:2f:a5:dd:08:91:10:2d:68:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:99:F2:09:ED:3B:3F:83:3F:AC:F1:11:93:A1:B3:69:F8:D0:B7
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/M0GZ8gntOz-DP6zxEZOhs2n40Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:330::/44
Signature Algorithm: sha256WithRSAEncryption
5c:3c:71:75:be:26:44:d0:ff:35:f3:81:88:85:9c:c1:b5:38:
4e:02:66:6c:53:5a:c9:18:20:64:fd:a1:68:77:c5:e9:72:4f:
19:25:aa:ee:f5:4d:b9:3c:d6:76:3f:fb:32:d5:c8:f4:01:d8:
14:78:53:35:ea:ce:35:b7:97:fd:e6:66:31:e3:f4:37:d2:95:
d4:bb:27:4a:0b:d9:78:15:59:59:12:b3:65:45:a0:d9:eb:4b:
72:a9:c9:8d:30:65:40:2b:02:06:99:5a:49:8b:77:7e:0e:ef:
98:dc:6a:d7:fa:ff:e8:81:41:64:81:ef:53:63:b7:6d:78:6e:
0f:4e:21:90:77:71:8e:41:b9:98:32:0e:ed:d7:f6:cf:d7:97:
ab:52:4a:61:c0:2d:35:10:78:a2:e4:9d:d3:72:e6:fb:ae:87:
fa:1a:56:dc:ff:8e:23:09:1b:cd:3c:29:fb:41:de:56:b3:38:
ab:4c:ba:9f:5a:ae:cd:70:4c:8d:8e:82:9b:ba:be:6a:f0:c0:
30:cc:c1:31:fd:e6:a3:6b:07:10:80:13:dd:93:ac:5f:b1:c9:
3f:a8:c2:30:a9:80:4f:77:f5:70:59:3c:e5:63:31:7f:06:18:
1b:b6:5d:62:e5:9d:6f:95:b8:6d:44:4f:f9:46:42:28:7c:34:
8e:41:61:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:48:19 2025 by rpki-client