Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/kEHFi0kqkGeCJpV0l7HdlsR3Me4.roa
File: kEHFi0kqkGeCJpV0l7HdlsR3Me4.roa (raw, json)
Hash identifier: SDaIMWSvDnhyTqv+onP1AZ2B+lnCXxF0hXOcLYBqaNk=
Subject key identifier: 90:41:C5:8B:49:2A:90:67:82:26:95:74:97:B1:DD:96:C4:77:31:EE
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01983305AA06FB3F7DF938E1E00072C8DA1E
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/kEHFi0kqkGeCJpV0l7HdlsR3Me4.roa
Signing time: Tue 22 Jul 2025 16:44:25 +0000
ROA not before: Tue 22 Jul 2025 16:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215127
IP address blocks: 2a14:c380:240::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:05:aa:06:fb:3f:7d:f9:38:e1:e0:00:72:c8:da:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 22 16:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9041c58b492a90678226957497b1dd96c47731ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:56:06:c2:d1:4f:32:bd:f1:ed:15:21:0b:
55:a7:55:4f:ff:72:b7:8c:2c:1c:4e:98:c7:16:25:
8c:fd:37:79:85:d2:02:2c:f9:d3:78:5a:52:ac:ce:
66:75:69:59:b1:d1:e9:36:b3:ab:0e:d4:de:3a:2c:
c6:8b:fa:5c:f2:65:fc:ef:02:14:19:01:7e:e6:ff:
24:8f:57:65:24:56:4b:62:7a:63:ad:7d:e4:a5:31:
24:c6:05:04:a3:d1:f8:dd:3c:f5:e5:57:c9:a4:89:
32:bb:1e:f8:5f:71:e9:28:1a:a2:e5:0e:2a:d1:52:
14:51:aa:24:4d:cd:03:ee:3d:4a:1d:ec:2d:9f:f1:
6c:58:3e:1f:79:b4:a3:46:d5:88:bc:ab:77:b8:15:
78:b2:36:9a:b4:5d:d9:a2:1c:8d:80:93:75:b2:60:
33:a7:cd:52:3e:09:1d:85:b7:f1:a8:9d:57:14:07:
de:8a:bf:7c:42:1c:1c:f9:41:cc:a0:3b:1d:ad:da:
ec:93:da:89:1a:ca:e1:6f:5c:b5:99:75:96:c0:4f:
e4:60:a0:49:8f:8e:d4:35:9a:63:9d:b3:61:3c:91:
47:11:5e:80:e8:72:0b:0c:a7:a1:1d:82:e1:14:51:
10:fd:a8:f9:c7:cc:a2:26:73:c0:f4:b3:8d:5d:a6:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:C5:8B:49:2A:90:67:82:26:95:74:97:B1:DD:96:C4:77:31:EE
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/kEHFi0kqkGeCJpV0l7HdlsR3Me4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:240::/44
Signature Algorithm: sha256WithRSAEncryption
32:07:f4:10:0e:43:8a:d8:ca:7a:0e:30:8f:48:39:b3:9b:4c:
6b:6d:aa:2f:c9:c8:a0:f6:64:20:c6:37:82:c8:41:56:d5:e9:
0e:d8:d5:63:cb:3f:e4:52:5d:d2:8a:c9:c2:e3:d5:56:79:62:
27:92:ea:94:1a:21:c5:a8:a9:79:cc:c7:f0:c3:ad:78:c2:24:
cb:af:f2:87:bd:8a:54:b5:f8:bf:eb:b4:53:ca:35:22:d5:dc:
26:88:e0:48:59:f2:d0:f8:a9:4a:18:bc:91:29:4a:91:27:d9:
74:f3:3d:0a:fd:91:3b:cd:3f:72:b8:ac:f7:13:c2:c8:6e:86:
27:5e:3e:b2:a7:69:25:29:49:42:0c:26:b9:af:ac:b7:2c:c7:
fa:6b:1e:1c:74:d5:0c:34:72:b5:6e:35:43:d9:e4:d8:59:e8:
a9:6f:90:a3:94:11:18:f6:f7:c1:65:e9:41:30:0c:7e:f0:b1:
85:96:d3:4d:b0:8c:3c:a4:29:4b:83:a6:2e:fc:6b:f0:e2:f9:
39:4d:93:d6:c4:77:05:c7:89:e7:fa:39:c5:be:a0:a3:d5:52:
c1:5c:d4:df:c7:ca:65:0a:bc:6e:43:bf:9c:4f:4a:85:1f:36:
9d:54:45:42:64:3b:d3:57:bf:6b:4e:9b:a8:a8:93:af:ca:3b:
0d:c0:a0:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZgzBaoG+z99+Tjh4AByyNoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjUwNzIyMTY0NDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDQxYzU4YjQ5MmE5MDY3ODIyNjk1NzQ5N2IxZGQ5NmM0NzczMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJdWBsLRTzK98e0VIQtVp1VP/3K3
jCwcTpjHFiWM/Td5hdICLPnTeFpSrM5mdWlZsdHpNrOrDtTeOizGi/pc8mX87wIU
GQF+5v8kj1dlJFZLYnpjrX3kpTEkxgUEo9H43Tz15VfJpIkyux74X3HpKBqi5Q4q
0VIUUaokTc0D7j1KHewtn/FsWD4febSjRtWIvKt3uBV4sjaatF3ZohyNgJN1smAz
p81SPgkdhbfxqJ1XFAfeir98Qhwc+UHMoDsdrdrsk9qJGsrhb1y1mXWWwE/kYKBJ
j47UNZpjnbNhPJFHEV6A6HILDKehHYLhFFEQ/aj5x8yiJnPA9LONXaZ6MwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJBBxYtJKpBngiaVdJex3ZbEdzHuMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEva0VIRmkwa3FrR2VDSnBWMGw3SGRsc1IzTWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAJA
MA0GCSqGSIb3DQEBCwUAA4IBAQAyB/QQDkOK2Mp6DjCPSDmzm0xrbaovycig9mQg
xjeCyEFW1ekO2NVjyz/kUl3SisnC49VWeWInkuqUGiHFqKl5zMfww614wiTLr/KH
vYpUtfi/67RTyjUi1dwmiOBIWfLQ+KlKGLyRKUqRJ9l08z0K/ZE7zT9yuKz3E8LI
boYnXj6yp2klKUlCDCa5r6y3LMf6ax4cdNUMNHK1bjVD2eTYWeipb5CjlBEY9vfB
ZelBMAx+8LGFltNNsIw8pClLg6Yu/Gvw4vk5TZPWxHcFx4nn+jnFvqCj1VLBXNTf
x8plCrxuQ7+cT0qFHzadVEVCZDvTV79rTpuoqJOvyjsNwKA1
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:48:01 2025 by rpki-client