Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-vJBrRpI6mquLOzc6vSIYhBjvh0.roa
File: 1-vJBrRpI6mquLOzc6vSIYhBjvh0.roa (raw, json)
Hash identifier: mi7xOU4fdl/Ui0iLn1/5X4GBTXpme7NY+nqOrF+jFZk=
Subject key identifier: FA:F2:41:AD:1A:48:EA:6A:AE:2C:EC:DC:EA:F4:88:62:10:63:BE:1D
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EDC4FA7B3C37CCB7A0BE5D0C83DC50361
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-vJBrRpI6mquLOzc6vSIYhBjvh0.roa
Signing time: Thu 18 Jun 2026 19:57:48 +0000
ROA not before: Thu 18 Jun 2026 19:57:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197569
IP address blocks: 2a14:c380:1000::/40 maxlen: 48
2a14:c380:1002::/48 maxlen: 48
2a14:c380:1003::/48 maxlen: 48
2a14:c380:1004::/48 maxlen: 48
2a14:c380:1005::/48 maxlen: 48
2a14:c380:1006::/48 maxlen: 48
2a14:c380:1007::/48 maxlen: 48
2a14:c380:1008::/48 maxlen: 48
2a14:c380:1009::/48 maxlen: 48
2a14:c380:100a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:4f:a7:b3:c3:7c:cb:7a:0b:e5:d0:c8:3d:c5:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 18 19:57:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faf241ad1a48ea6aae2cecdceaf488621063be1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:d8:2c:0a:c4:2f:81:4f:41:78:bc:04:be:
11:4b:6e:a9:c7:ca:31:94:cd:65:94:60:d6:91:a7:
75:33:df:a8:9c:db:4c:3c:bb:97:4b:93:7c:ef:7f:
69:7a:a3:ec:46:2c:e9:6b:bd:51:34:5f:a2:3e:ae:
d9:2d:b6:1c:5d:bd:46:e3:3f:61:2d:bf:c3:47:7a:
d9:03:f4:5c:90:e7:3b:54:e9:9d:50:c3:d5:c4:91:
ee:7d:48:4e:04:3e:45:8c:61:c7:b3:44:b7:c3:85:
3c:8d:31:05:01:f5:91:fb:2f:46:68:5f:22:ff:35:
3d:50:c1:fd:ee:55:86:bb:cc:ae:8a:84:b1:c3:a4:
a7:8d:23:fc:b4:26:a3:05:7a:1c:a9:a4:76:d7:dd:
a8:b0:0f:c6:25:ee:30:fd:44:db:26:b9:38:a4:1d:
52:75:07:8e:02:2d:fa:18:d7:5e:2e:fb:d7:9c:76:
58:6f:ff:40:8b:3c:84:da:4a:e4:e3:25:90:58:98:
de:40:d6:40:d8:c0:5d:6c:3b:95:2b:88:4a:9f:9a:
54:4b:13:a0:a9:35:42:51:de:db:68:15:46:3a:d5:
f1:de:be:22:01:6b:54:98:8c:1b:b9:a0:b8:1c:05:
cc:3b:90:16:13:b2:bb:af:6a:4c:b7:0c:5f:6e:66:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:41:AD:1A:48:EA:6A:AE:2C:EC:DC:EA:F4:88:62:10:63:BE:1D
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-vJBrRpI6mquLOzc6vSIYhBjvh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1000::/40
Signature Algorithm: sha256WithRSAEncryption
29:13:18:76:57:a3:e1:ab:58:71:45:82:ee:57:9e:f6:75:8b:
b0:24:3c:fd:76:35:05:2c:ee:75:4c:72:f8:f5:1e:df:f7:07:
a8:9e:bb:01:e8:50:b3:03:da:61:c2:3c:f9:25:7d:2f:88:ab:
48:3e:9b:ad:c7:c5:02:98:45:74:52:83:ed:99:ac:14:7d:4c:
b9:f6:71:3b:50:d4:65:c1:89:ab:3a:39:b9:fb:59:78:a0:42:
78:53:f1:6a:e0:c0:57:d7:78:93:45:78:cf:9f:25:0d:1e:45:
bd:b4:ea:5b:3f:42:dd:42:fe:db:4a:ca:7b:d3:93:e7:0a:e2:
e3:b6:32:75:b6:8d:a7:39:c8:bf:85:7e:32:b7:6f:e0:04:d1:
23:d0:56:fa:9b:2f:3c:92:c0:36:a8:a0:2d:9e:21:63:13:6d:
75:31:ff:ed:fc:2d:11:f9:6c:4b:5c:a4:ab:cf:1b:38:55:62:
29:c7:4c:e3:a2:e5:f5:26:a7:bf:a2:e8:c7:18:8b:de:a9:e2:
00:f6:84:67:a4:a4:0a:c3:d6:9d:96:7b:b4:31:28:c8:d2:29:
51:c3:73:66:e1:5b:9a:f2:1e:0c:b7:87:b3:cd:52:d8:fa:0f:
20:6d:b3:ee:f5:b2:36:b4:3b:95:15:58:51:22:23:c4:24:ae:
46:0f:a2:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ7cT6ezw3zLegvl0Mg9xQNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwNjE4MTk1NzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWYyNDFhZDFhNDhlYTZhYWUyY2VjZGNlYWY0ODg2MjEwNjNiZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/7YLArEL4FPQXi8BL4RS26px8ox
lM1llGDWkad1M9+onNtMPLuXS5N8739peqPsRizpa71RNF+iPq7ZLbYcXb1G4z9h
Lb/DR3rZA/RckOc7VOmdUMPVxJHufUhOBD5FjGHHs0S3w4U8jTEFAfWR+y9GaF8i
/zU9UMH97lWGu8yuioSxw6SnjSP8tCajBXocqaR2192osA/GJe4w/UTbJrk4pB1S
dQeOAi36GNdeLvvXnHZYb/9AizyE2krk4yWQWJjeQNZA2MBdbDuVK4hKn5pUSxOg
qTVCUd7baBVGOtXx3r4iAWtUmIwbuaC4HAXMO5AWE7K7r2pMtwxfbmbltwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPryQa0aSOpqrizs3Or0iGIQY74dMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvMS12SkJyUnBJNm1xdUxPemM2dlNJWWhCanZoMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGQvNmI3NDkwLWUxMGEtNDJlMC05ZTJlLTUzMjFkNjlkOTc5
ZC8xL1dMUGVYNXJiVVA1Qjl0eDRfOUNpeVFodEpSSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUw4AQ
MA0GCSqGSIb3DQEBCwUAA4IBAQApExh2V6Phq1hxRYLuV572dYuwJDz9djUFLO51
THL49R7f9weonrsB6FCzA9phwjz5JX0viKtIPputx8UCmEV0UoPtmawUfUy59nE7
UNRlwYmrOjm5+1l4oEJ4U/Fq4MBX13iTRXjPnyUNHkW9tOpbP0LdQv7bSsp705Pn
CuLjtjJ1to2nOci/hX4yt2/gBNEj0Fb6my88ksA2qKAtniFjE211Mf/t/C0R+WxL
XKSrzxs4VWIpx0zjouX1Jqe/oujHGIveqeIA9oRnpKQKw9adlnu0MSjI0ilRw3Nm
4Vua8h4Mt4ezzVLY+g8gbbPu9bI2tDuVFVhRIiPEJK5GD6Ix
-----END CERTIFICATE-----
Generated at Sun Jun 28 06:27:19 2026 by rpki-client