Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/rhMqM0ezLJA73ft2Fdo0vKMfEKM.roa
File: rhMqM0ezLJA73ft2Fdo0vKMfEKM.roa (raw, json)
Hash identifier: tmJYIHdd5bc2BjSOI4bzVYw/pXHqpi0/XttojUMEpXM=
Subject key identifier: AE:13:2A:33:47:B3:2C:90:3B:DD:FB:76:15:DA:34:BC:A3:1F:10:A3
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01983305A9AFD2F494BF99824B64D4800DF1
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/rhMqM0ezLJA73ft2Fdo0vKMfEKM.roa
Signing time: Tue 22 Jul 2025 16:44:25 +0000
ROA not before: Tue 22 Jul 2025 16:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213725
IP address blocks: 2a14:c380:280::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:05:a9:af:d2:f4:94:bf:99:82:4b:64:d4:80:0d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 22 16:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae132a3347b32c903bddfb7615da34bca31f10a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:24:89:ee:8b:0a:a8:25:17:c3:45:f2:84:
41:5d:f1:6d:b1:09:64:29:e6:b0:ff:74:bc:34:44:
ff:6a:1e:45:5a:98:91:94:67:0c:a9:17:b3:53:c6:
7d:fd:a9:33:4b:c9:88:60:84:6c:09:a4:b2:ca:e2:
30:bc:26:02:07:18:a6:d8:ca:f2:5c:e4:b2:58:c5:
6c:fa:b0:1f:fd:f8:cf:22:a9:d9:cd:06:a2:3a:cd:
c1:8b:80:51:d2:dd:e2:23:ad:bf:39:e1:9a:5b:b4:
24:3f:14:2b:f2:de:47:78:60:d6:c4:3c:5d:4a:33:
f4:6d:c4:cb:0b:61:b0:f1:cc:8b:15:a6:c5:40:f4:
26:c8:a4:72:dd:47:82:af:db:dc:9c:b1:0a:cc:f3:
95:d0:80:62:3c:46:f5:22:4b:90:30:0f:fb:be:d3:
4e:0c:90:9d:e8:47:ec:ae:7f:e2:47:68:0d:e9:15:
a3:9e:ea:d9:1a:06:02:ec:ba:42:26:61:eb:41:c8:
d9:5b:6f:11:80:c9:9b:47:7a:dc:d4:d2:55:52:2c:
8f:74:12:6d:55:de:1b:78:e9:c3:41:18:a9:76:0d:
c5:f1:a6:ab:6f:d1:6b:e8:15:80:d6:56:ac:95:92:
07:a7:0d:db:f5:3d:d5:b1:c2:d0:b9:4e:19:7a:48:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:13:2A:33:47:B3:2C:90:3B:DD:FB:76:15:DA:34:BC:A3:1F:10:A3
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/rhMqM0ezLJA73ft2Fdo0vKMfEKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:280::/44
Signature Algorithm: sha256WithRSAEncryption
0e:c3:ee:8a:e8:ff:68:ce:b0:15:05:31:2c:0b:94:75:02:f0:
44:6d:fb:83:2a:0d:0a:c1:15:2c:76:ea:63:08:33:9d:a1:e7:
f7:d7:e5:b4:38:fc:ac:fe:01:59:90:ed:9f:d5:5f:19:6a:fb:
b7:4a:d4:9e:d5:db:b4:7c:4f:fd:b5:da:02:91:3a:ed:64:71:
7c:b8:65:13:f3:6a:3a:bb:8d:08:49:dd:38:0e:46:42:86:c8:
00:9d:bd:65:a1:e0:2f:52:3e:07:ec:fb:74:0b:9d:6f:c3:e2:
1b:0c:56:ef:fa:05:b5:04:e7:eb:57:c9:dd:39:ce:f8:5d:72:
1e:02:9a:ba:b6:b8:6b:0f:28:6a:f4:81:4d:69:8d:4f:bb:b2:
17:7c:6b:54:57:07:5a:6f:3e:37:cd:86:bc:09:d9:86:2d:7b:
eb:18:0a:7c:e0:98:b5:c0:f8:50:01:36:73:03:35:43:36:71:
fc:1e:95:c0:3d:0e:e0:b0:c6:cc:d8:7e:5b:10:40:35:f7:97:
dd:fd:37:3f:bb:79:8b:68:b3:f7:21:e4:2e:1a:33:fc:d9:23:
88:4e:ab:59:07:9d:eb:5e:fc:bc:18:66:86:b3:c7:62:3c:6f:
3a:01:82:a1:8b:ab:4e:91:78:a0:f3:9c:79:3c:65:ed:99:a7:
37:42:c3:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZgzBamv0vSUv5mCS2TUgA3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjUwNzIyMTY0NDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTEzMmEzMzQ3YjMyYzkwM2JkZGZiNzYxNWRhMzRiY2EzMWYxMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xEkie6LCqglF8NF8oRBXfFtsQlk
Keaw/3S8NET/ah5FWpiRlGcMqRezU8Z9/akzS8mIYIRsCaSyyuIwvCYCBxim2Mry
XOSyWMVs+rAf/fjPIqnZzQaiOs3Bi4BR0t3iI62/OeGaW7QkPxQr8t5HeGDWxDxd
SjP0bcTLC2Gw8cyLFabFQPQmyKRy3UeCr9vcnLEKzPOV0IBiPEb1IkuQMA/7vtNO
DJCd6Efsrn/iR2gN6RWjnurZGgYC7LpCJmHrQcjZW28RgMmbR3rc1NJVUiyPdBJt
Vd4beOnDQRipdg3F8aarb9Fr6BWA1laslZIHpw3b9T3VscLQuU4ZekiIFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK4TKjNHsyyQO937dhXaNLyjHxCjMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvcmhNcU0wZXpMSkE3M2Z0MkZkbzB2S01mRUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAKA
MA0GCSqGSIb3DQEBCwUAA4IBAQAOw+6K6P9ozrAVBTEsC5R1AvBEbfuDKg0KwRUs
dupjCDOdoef31+W0OPys/gFZkO2f1V8Zavu3StSe1du0fE/9tdoCkTrtZHF8uGUT
82o6u40ISd04DkZChsgAnb1loeAvUj4H7Pt0C51vw+IbDFbv+gW1BOfrV8ndOc74
XXIeApq6trhrDyhq9IFNaY1Pu7IXfGtUVwdabz43zYa8CdmGLXvrGAp84Ji1wPhQ
ATZzAzVDNnH8HpXAPQ7gsMbM2H5bEEA195fd/Tc/u3mLaLP3IeQuGjP82SOITqtZ
B53rXvy8GGaGs8diPG86AYKhi6tOkXig85x5PGXtmac3QsMj
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:44:59 2025 by rpki-client