Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3bR25h5kvjeSYTFxMm3QHsX3DV4.roa
File: 3bR25h5kvjeSYTFxMm3QHsX3DV4.roa (raw, json)
Hash identifier: W2ZGPidz2fOSTgtq2h5AmaJE0nuGqpYgi+tnu6t0PoI=
Subject key identifier: DD:B4:76:E6:1E:64:BE:37:92:61:31:71:32:6D:D0:1E:C5:F7:0D:5E
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019F9451C433FBFC30ED9BF0DCA56248305D
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3bR25h5kvjeSYTFxMm3QHsX3DV4.roa
Signing time: Fri 24 Jul 2026 13:30:14 +0000
ROA not before: Fri 24 Jul 2026 13:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200625
IP address blocks: 2a14:c380:1c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:51:c4:33:fb:fc:30:ed:9b:f0:dc:a5:62:48:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 24 13:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddb476e61e64be3792613171326dd01ec5f70d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:23:19:45:35:00:94:27:29:1a:20:4f:2e:
b7:6f:ad:12:55:30:53:55:45:c4:6b:4e:71:19:13:
2f:8e:a4:d4:c4:e4:dc:2b:c1:19:26:5a:2d:f0:87:
ce:01:77:65:04:fb:1d:2c:94:6d:24:48:17:9b:e1:
61:b3:51:72:d6:80:39:8e:ae:38:99:04:2a:4f:15:
13:fb:6f:e0:de:0a:41:b1:9b:6a:da:06:7a:94:a3:
49:3d:a2:0f:20:02:d8:e2:64:ef:b4:cd:c8:90:27:
d1:6a:47:c2:42:6d:f8:e4:88:8c:6f:7f:7b:6e:b5:
d9:79:e9:c4:28:7c:45:04:9d:7b:bd:17:3c:8f:bc:
14:cd:fe:9c:88:60:b5:0e:39:9b:20:29:59:8a:fe:
e3:f2:90:8f:b5:46:e9:62:6a:43:8b:80:2b:4c:eb:
c2:63:03:ba:9d:36:80:43:0a:b5:40:18:e3:1a:0b:
3c:f6:01:b7:9a:27:96:14:35:56:cd:cd:76:63:10:
60:d9:f8:67:02:33:9a:66:89:d6:c2:90:33:d0:65:
08:ad:3a:77:38:ff:f2:26:00:17:64:ad:45:e3:5c:
0a:c1:20:37:dc:8e:f4:e7:e7:3d:ec:c2:db:1f:5f:
98:20:b6:b9:f1:cd:3b:d3:f0:f2:af:24:ab:70:ec:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:76:E6:1E:64:BE:37:92:61:31:71:32:6D:D0:1E:C5:F7:0D:5E
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3bR25h5kvjeSYTFxMm3QHsX3DV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
7e:8f:34:9b:aa:04:0f:76:5c:d7:75:99:bf:67:02:ca:10:e8:
47:4e:20:7c:ba:4e:88:db:2f:4d:f5:03:96:51:cd:b5:38:81:
10:88:5f:46:8c:e2:d1:3f:f4:6a:c3:05:83:32:a1:f1:2d:8b:
04:e0:15:d1:37:96:4c:22:a4:21:76:17:65:7c:1a:72:09:0b:
c6:dc:fe:70:b5:21:a6:aa:ff:32:52:c4:9f:38:8a:ef:90:bc:
78:8d:8d:fc:08:36:b2:34:4c:1b:8c:38:6f:0c:7c:3a:9f:f6:
b3:98:20:48:46:bf:85:b1:52:ad:b3:ee:7a:34:32:15:6e:bf:
47:7a:f3:76:40:4e:16:c6:00:1e:d7:57:7a:20:41:92:9b:86:
79:6a:a3:94:da:2b:72:fa:3b:03:af:5b:00:50:83:16:39:98:
31:48:7c:9b:58:bf:5f:3e:42:ea:d1:3b:98:cd:3f:7d:87:2b:
be:1b:81:aa:81:d1:24:53:f6:0e:bf:ef:39:f9:1e:72:8e:42:
01:a7:b6:5e:80:1e:7e:cf:a7:d7:98:15:fb:50:4e:5b:a5:67:
a6:25:49:8e:ae:f2:d5:6b:4a:ba:74:13:d2:28:a7:5d:34:e7:
4b:76:6d:13:c5:8c:44:32:f4:e3:06:5a:c4:4d:1c:3c:c2:05:
01:d1:5f:37
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+UUcQz+/ww7Zvw3KViSDBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwNzI0MTMzMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGI0NzZlNjFlNjRiZTM3OTI2MTMxNzEzMjZkZDAxZWM1ZjcwZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKojGUU1AJQnKRogTy63b60SVTBT
VUXEa05xGRMvjqTUxOTcK8EZJlot8IfOAXdlBPsdLJRtJEgXm+Fhs1Fy1oA5jq44
mQQqTxUT+2/g3gpBsZtq2gZ6lKNJPaIPIALY4mTvtM3IkCfRakfCQm345IiMb397
brXZeenEKHxFBJ17vRc8j7wUzf6ciGC1DjmbIClZiv7j8pCPtUbpYmpDi4ArTOvC
YwO6nTaAQwq1QBjjGgs89gG3mieWFDVWzc12YxBg2fhnAjOaZonWwpAz0GUIrTp3
OP/yJgAXZK1F41wKwSA33I705+c97MLbH1+YILa58c070/DyrySrcOw9iwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN20duYeZL43kmExcTJt0B7F9w1eMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvM2JSMjVoNWt2amVTWVRGeE1tM1FIc1gzRFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAHA
MA0GCSqGSIb3DQEBCwUAA4IBAQB+jzSbqgQPdlzXdZm/ZwLKEOhHTiB8uk6I2y9N
9QOWUc21OIEQiF9GjOLRP/RqwwWDMqHxLYsE4BXRN5ZMIqQhdhdlfBpyCQvG3P5w
tSGmqv8yUsSfOIrvkLx4jY38CDayNEwbjDhvDHw6n/azmCBIRr+FsVKts+56NDIV
br9HevN2QE4WxgAe11d6IEGSm4Z5aqOU2ity+jsDr1sAUIMWOZgxSHybWL9fPkLq
0TuYzT99hyu+G4GqgdEkU/YOv+85+R5yjkIBp7ZegB5+z6fXmBX7UE5bpWemJUmO
rvLVa0q6dBPSKKddNOdLdm0TxYxEMvTjBlrETRw8wgUB0V83
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:29:01 2026 by rpki-client