Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1bJ_WbQv8dls5TawKA9KHjOTTtM.roa
File: 1bJ_WbQv8dls5TawKA9KHjOTTtM.roa (raw, json)
Hash identifier: zoYLvsn4oQhhLRdxa0Z11o716NVIwZfB7pvOf/r/hCs=
Subject key identifier: D5:B2:7F:59:B4:2F:F1:D9:6C:E5:36:B0:28:0F:4A:1E:33:93:4E:D3
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EDC4DD5D24A0F5C17096C92C875888E11
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1bJ_WbQv8dls5TawKA9KHjOTTtM.roa
Signing time: Thu 18 Jun 2026 19:55:48 +0000
ROA not before: Thu 18 Jun 2026 19:55:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 2a14:c380:390::/44 maxlen: 44
2a14:c380:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:4d:d5:d2:4a:0f:5c:17:09:6c:92:c8:75:88:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 18 19:55:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5b27f59b42ff1d96ce536b0280f4a1e33934ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:36:fe:c3:5c:67:17:f7:8b:2b:d3:c0:ae:
23:30:64:53:5b:71:de:7c:54:cf:aa:31:7e:7d:3f:
b6:e7:ef:8b:41:c1:1c:31:72:88:af:04:fe:67:c2:
29:5a:c5:12:7f:35:24:3f:25:58:53:80:2a:2f:51:
23:de:1b:c0:71:0b:f2:fd:26:04:55:61:40:a8:e7:
11:f4:1e:76:3c:11:79:06:a1:45:d8:47:7e:47:a2:
80:4f:bf:05:b3:a1:e9:f2:5d:db:3b:37:f4:a2:ce:
66:27:bd:56:28:c7:a6:02:2a:7b:bb:f0:19:c4:94:
c0:f9:d8:c0:fd:66:a0:d9:86:ed:63:5b:b5:5c:f2:
b5:2a:e2:13:8a:cc:5f:d0:b7:05:bd:5e:03:93:52:
70:02:25:55:07:ec:ff:24:c2:55:67:bd:7d:93:d3:
56:6e:40:be:95:1f:42:b4:45:4b:87:52:41:5b:3c:
d4:5f:79:6b:06:c3:00:78:0e:96:ba:21:50:35:23:
bf:10:3f:19:31:a6:1e:c0:1d:87:c1:92:9a:72:8f:
30:bd:bb:69:0f:9e:9d:2a:79:84:a5:4f:95:fb:bb:
38:eb:6d:55:3a:37:fe:95:60:06:43:6d:09:45:25:
50:9d:54:16:88:de:62:54:89:99:84:b1:77:b4:6f:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:7F:59:B4:2F:F1:D9:6C:E5:36:B0:28:0F:4A:1E:33:93:4E:D3
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1bJ_WbQv8dls5TawKA9KHjOTTtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:390::/44
2a14:c380:900::/40
Signature Algorithm: sha256WithRSAEncryption
7c:8a:5c:89:ae:11:71:f3:ae:29:60:c6:43:c6:9c:99:00:ff:
03:9c:b6:56:d0:41:da:d7:2e:1f:cf:36:31:61:c8:9f:7a:63:
b3:41:4d:c2:75:d8:ef:cb:2b:73:92:c6:26:5e:23:a2:e5:19:
d2:df:c7:ca:60:36:3d:36:0b:ff:b9:5e:10:e1:19:f2:7c:d5:
7d:60:9e:e1:12:ae:35:2c:8e:8b:65:74:8f:b3:9c:73:0b:cf:
3b:ac:31:9a:05:f7:fe:3d:dc:f3:60:ff:98:ee:9a:f1:12:1d:
68:13:25:b6:d9:5b:6d:a6:cc:8c:64:2e:27:aa:a5:be:a2:d6:
8f:41:3d:55:fa:d9:45:4e:61:93:32:ad:c8:a5:76:19:83:a8:
7c:0e:f6:54:40:64:ba:3a:5f:c9:da:7e:86:7c:10:80:2e:b0:
c7:e0:69:47:69:2f:e2:29:e9:e3:5b:9c:9d:d7:e9:16:9d:dd:
e2:b8:57:8a:5f:2c:1b:2a:98:00:90:a8:57:43:66:2f:57:04:
7b:2a:15:ae:db:27:61:a0:ca:0e:a8:bf:df:e1:45:44:c7:ec:
9c:60:94:9e:cf:4d:dd:58:c6:da:ad:94:82:a4:a1:38:b7:82:
1d:44:72:ff:76:72:e1:a8:07:9c:99:de:21:a0:14:48:a1:d1:
47:11:33:cc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZ7cTdXSSg9cFwlsksh1iI4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwNjE4MTk1NTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWIyN2Y1OWI0MmZmMWQ5NmNlNTM2YjAyODBmNGExZTMzOTM0ZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7w2/sNcZxf3iyvTwK4jMGRTW3He
fFTPqjF+fT+25++LQcEcMXKIrwT+Z8IpWsUSfzUkPyVYU4AqL1Ej3hvAcQvy/SYE
VWFAqOcR9B52PBF5BqFF2Ed+R6KAT78Fs6Hp8l3bOzf0os5mJ71WKMemAip7u/AZ
xJTA+djA/Wag2YbtY1u1XPK1KuITisxf0LcFvV4Dk1JwAiVVB+z/JMJVZ719k9NW
bkC+lR9CtEVLh1JBWzzUX3lrBsMAeA6WuiFQNSO/ED8ZMaYewB2HwZKaco8wvbtp
D56dKnmEpU+V+7s4621VOjf+lWAGQ20JRSVQnVQWiN5iVImZhLF3tG9JkQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFNWyf1m0L/HZbOU2sCgPSh4zk07TMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvMWJKX1diUXY4ZGxzNVRhd0tBOUtIak9UVHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhTDgAOQ
AwYAKhTDgAkwDQYJKoZIhvcNAQELBQADggEBAHyKXImuEXHzrilgxkPGnJkA/wOc
tlbQQdrXLh/PNjFhyJ96Y7NBTcJ12O/LK3OSxiZeI6LlGdLfx8pgNj02C/+5XhDh
GfJ81X1gnuESrjUsjotldI+znHMLzzusMZoF9/493PNg/5jumvESHWgTJbbZW22m
zIxkLieqpb6i1o9BPVX62UVOYZMyrcildhmDqHwO9lRAZLo6X8nafoZ8EIAusMfg
aUdpL+Ip6eNbnJ3X6Rad3eK4V4pfLBsqmACQqFdDZi9XBHsqFa7bJ2Ggyg6ov9/h
RUTH7JxglJ7PTd1YxtqtlIKkoTi3gh1Ecv92cuGoB5yZ3iGgFEih0UcRM8w=
-----END CERTIFICATE-----
Generated at Sun Jun 28 03:58:15 2026 by rpki-client