Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Yv4V4LjT25YGl8JsDiKDRO2jyp0.roa
File: Yv4V4LjT25YGl8JsDiKDRO2jyp0.roa (raw, json)
Hash identifier: q1TE1TUAMIhLl0CqTxtCvNB4x5p4kFanrqymH29sXOc=
Subject key identifier: 62:FE:15:E0:B8:D3:DB:96:06:97:C2:6C:0E:22:83:44:ED:A3:CA:9D
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01983305A9166EA8BAAD9E138B5321F58950
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Yv4V4LjT25YGl8JsDiKDRO2jyp0.roa
Signing time: Tue 22 Jul 2025 16:44:25 +0000
ROA not before: Tue 22 Jul 2025 16:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212470
IP address blocks: 2a14:c380:260::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:05:a9:16:6e:a8:ba:ad:9e:13:8b:53:21:f5:89:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 22 16:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62fe15e0b8d3db960697c26c0e228344eda3ca9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:3d:f4:76:dd:c2:43:9f:67:ab:de:82:f9:
22:52:18:43:8c:67:43:be:89:26:91:9d:06:d4:ef:
88:bc:72:0c:6b:2d:ea:f0:95:06:44:54:82:aa:85:
5f:bc:2c:4d:a2:32:38:0b:9c:95:ae:44:8b:38:49:
cc:25:30:39:e0:e1:6c:44:f5:b6:74:57:a7:c6:fa:
e3:47:15:3c:2d:3f:b7:92:1c:ef:fc:5c:34:d7:ab:
6d:3c:03:6b:20:d1:9a:83:9f:48:00:0d:d8:a3:68:
f3:3a:be:70:37:d0:62:5c:91:bc:f1:fc:c8:a9:26:
15:a3:5b:18:86:14:74:d3:bb:48:dd:1f:b0:62:dc:
c8:89:97:b5:f7:b6:c7:5c:44:f7:b2:6e:67:b7:fc:
dc:2b:a8:76:26:f3:e9:34:6a:82:e0:91:c9:e0:aa:
67:34:97:bc:da:15:f3:aa:f4:6c:0a:37:7b:71:91:
8e:70:43:b5:31:df:1d:8f:26:78:51:cf:3a:58:5d:
c0:00:f0:cb:bd:93:a6:4d:ab:d6:7d:4f:30:a2:22:
54:ed:12:fd:2a:19:2b:b3:0a:2c:db:73:47:2b:35:
8e:f6:9b:fe:36:13:b5:5f:a2:d6:6d:87:a1:1e:e4:
e1:66:41:9f:00:f2:43:50:8f:d2:3c:b5:6e:0d:0f:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:15:E0:B8:D3:DB:96:06:97:C2:6C:0E:22:83:44:ED:A3:CA:9D
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Yv4V4LjT25YGl8JsDiKDRO2jyp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:260::/44
Signature Algorithm: sha256WithRSAEncryption
6b:ac:d3:85:1c:7c:1e:a9:af:ac:8d:2f:e2:64:38:c0:4a:77:
bc:61:f6:c4:c7:68:6d:bd:0b:30:56:78:15:c0:cb:ce:22:3d:
c5:6d:42:da:6b:b0:65:7e:88:1e:34:a1:4f:ab:cf:5f:d3:c6:
85:5c:a4:7a:ad:f7:42:59:04:0d:aa:3a:f0:d0:d9:ca:88:ed:
1e:cd:e1:eb:af:6b:6c:15:9e:c6:58:2f:cf:fc:7a:5d:e8:5e:
6f:06:7c:e1:53:ec:9b:1d:0a:d6:eb:c3:a7:ba:04:0d:f0:33:
43:94:bf:62:fb:39:8c:b6:81:a6:d8:af:69:c8:58:c5:41:ee:
9d:59:2a:3b:00:0c:93:4f:3f:6b:ad:17:bc:52:22:58:09:93:
36:83:70:99:fb:85:df:2d:ef:a9:57:32:10:2a:dd:31:18:12:
8a:2f:cc:7c:cb:89:49:df:57:de:34:c7:19:76:88:8a:26:7d:
71:7e:d0:24:6c:18:6f:b3:b5:88:ba:2f:f7:a3:fb:a2:18:a5:
23:dd:ac:6c:2f:5f:bf:a9:20:6a:ab:a6:df:30:14:b3:41:6f:
a2:4b:cb:17:d1:98:e0:ff:95:67:ff:32:21:4a:98:b0:1e:e7:
7c:49:04:2c:1b:ae:56:1b:a9:5e:66:0d:2b:3d:f8:de:5c:81:
b3:66:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:51:42 2025 by rpki-client