Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/6hQlQEoYrFHtglHPL_Ypnfxb3Vk.roa
File: 6hQlQEoYrFHtglHPL_Ypnfxb3Vk.roa (raw, json)
Hash identifier: 18RDDC6YC/cNpOuVoZGfDymtyxb6Dlg6mkrvwqAPIyE=
Subject key identifier: EA:14:25:40:4A:18:AC:51:ED:82:51:CF:2F:F6:29:9D:FC:5B:DD:59
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A09645DEE55F033DDD249C0E73C4CC3FC9
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/6hQlQEoYrFHtglHPL_Ypnfxb3Vk.roa
Signing time: Sat 12 Sep 2026 15:39:16 +0000
ROA not before: Sat 12 Sep 2026 15:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213905
IP address blocks: 2a14:c380:a20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:45:de:e5:5f:03:3d:dd:24:9c:0e:73:c4:cc:3f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 12 15:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1425404a18ac51ed8251cf2ff6299dfc5bdd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:68:f2:14:2e:4e:9f:98:9b:ad:91:c6:75:
00:a4:4b:ee:3c:31:94:ff:77:ad:36:8e:97:51:1c:
f2:9a:1a:ae:a0:ef:fa:f2:cd:82:28:c4:be:a5:11:
34:6b:19:cf:8b:3e:fe:97:28:98:84:88:17:6d:a7:
91:40:12:79:cc:4b:3b:3c:ac:0a:ae:f7:79:a4:a2:
1e:38:c3:25:26:4a:5f:6e:08:4c:3b:a1:50:1b:67:
58:c1:06:13:68:40:7c:0d:60:61:c3:66:20:36:f2:
53:36:21:c3:41:59:66:ce:8f:a4:09:fd:78:2d:e8:
58:91:a4:70:a6:60:4a:09:64:5d:2f:8b:dc:c9:e9:
cb:bc:93:fb:85:e1:7a:aa:d0:42:d8:f1:38:57:ca:
80:7b:ff:29:67:52:31:c5:27:9b:4a:dd:7a:77:34:
6c:24:1c:54:c0:77:86:cb:eb:a0:60:19:1f:51:b0:
3b:51:59:f1:59:60:e7:ad:7b:3e:6e:7f:80:7d:a0:
07:20:a7:fa:40:fa:33:c9:a6:87:c2:e3:d9:7d:cd:
ac:e4:db:31:87:8c:14:18:d3:bd:d5:9a:25:ea:16:
39:08:0d:33:d5:28:4a:b4:c4:27:45:bb:90:e0:3f:
48:74:3d:43:a2:00:ed:4b:55:e2:82:61:aa:0a:62:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:25:40:4A:18:AC:51:ED:82:51:CF:2F:F6:29:9D:FC:5B:DD:59
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/6hQlQEoYrFHtglHPL_Ypnfxb3Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:a20::/48
Signature Algorithm: sha256WithRSAEncryption
13:c0:c9:0a:40:57:56:f8:ed:e7:2f:92:10:58:45:6a:f3:f3:
ec:53:54:b0:9c:4d:30:00:78:86:dd:db:97:5d:bd:db:23:e2:
a4:a5:6d:80:7a:47:2f:6e:ac:d5:06:29:a7:6d:b8:8a:dd:f5:
05:ec:3a:af:5b:a1:cb:83:6a:44:b6:1c:df:f5:d5:54:4e:d0:
78:0f:d3:ff:64:b9:2a:f4:9e:dc:20:d3:40:0d:33:20:36:f5:
50:f0:17:1e:16:2b:62:96:73:8b:96:4a:72:2b:c4:5b:31:ef:
d0:a2:1c:e3:54:b9:52:17:4f:60:7b:77:00:91:2c:4b:0a:f4:
6b:1e:eb:53:4f:86:39:05:81:a5:fd:24:bd:30:8d:67:b5:2b:
55:59:d9:01:85:6b:61:0f:e8:32:d8:e3:c7:c1:e2:c5:75:0c:
aa:15:fe:89:9d:ea:72:11:cc:5f:10:f2:33:bd:46:98:0d:42:
88:7b:e7:42:ab:d1:c3:31:1a:13:2a:86:e2:34:30:76:76:21:
da:73:ee:ca:b8:d2:4d:ac:fa:d2:ca:f4:02:ce:5c:65:41:7f:
77:3d:f1:51:c4:cb:07:01:dc:23:5e:a6:b9:78:e7:f2:7e:8f:
55:71:c4:98:fb:ba:81:61:2a:ce:c4:73:4c:ea:a0:85:a2:0c:
74:6c:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:44 2026 by rpki-client