Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/7HCyQNsCM8CdJjqUkfF4iwBbJ9k.roa
File: 7HCyQNsCM8CdJjqUkfF4iwBbJ9k.roa (raw, json)
Hash identifier: Qo6W39lPHx8OWcvzVEQJ7VzXtKZU48pUTHigZciK4wA=
Subject key identifier: EC:70:B2:40:DB:02:33:C0:9D:26:3A:94:91:F1:78:8B:00:5B:27:D9
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EEEBEAA6DF01F4C13592B92092D6292A9
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/7HCyQNsCM8CdJjqUkfF4iwBbJ9k.roa
Signing time: Mon 22 Jun 2026 09:52:13 +0000
ROA not before: Mon 22 Jun 2026 09:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219412
IP address blocks: 2a14:c380:27::/48 maxlen: 48
2a14:c380:28::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:be:aa:6d:f0:1f:4c:13:59:2b:92:09:2d:62:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 22 09:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec70b240db0233c09d263a9491f1788b005b27d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:e4:80:ea:c5:c8:af:69:aa:a3:bc:89:38:
17:55:67:b6:06:18:24:88:05:6a:9e:42:1b:4f:5b:
4f:18:56:bc:1b:f2:a8:18:ad:e1:b1:ef:53:68:f6:
76:0b:aa:13:ef:5f:20:3f:84:d0:03:ad:c0:5a:5d:
50:51:99:85:8b:6e:84:eb:77:47:78:68:6d:e2:93:
72:ce:2f:86:b2:73:cd:d5:13:94:79:92:68:bd:60:
f2:8f:a4:40:41:28:18:75:ac:c8:fb:44:6e:4a:92:
d5:1d:74:9e:41:bf:35:14:79:e4:a9:ba:ce:51:3e:
c2:b1:f5:15:ea:6a:61:1e:41:c8:74:35:30:39:7c:
95:cf:05:ac:f0:85:48:eb:7a:a8:54:e2:22:ca:f4:
64:8f:74:6e:a1:d0:0a:ac:7b:09:7c:87:46:b0:7e:
54:ba:36:ea:68:46:f4:9f:f8:49:43:3f:2f:55:39:
96:62:19:78:c5:44:57:87:86:e1:5d:73:d8:7b:9d:
42:a1:34:7d:75:cf:42:91:a1:9f:29:7c:be:31:7c:
a9:57:93:3a:56:39:61:22:88:22:78:4b:e2:4a:e1:
51:e1:7f:5e:72:11:a2:81:bf:b2:93:f8:ca:67:28:
ba:b3:d6:57:d4:21:56:f2:9f:27:1e:0c:a8:58:cf:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:B2:40:DB:02:33:C0:9D:26:3A:94:91:F1:78:8B:00:5B:27:D9
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/7HCyQNsCM8CdJjqUkfF4iwBbJ9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:27::-2a14:c380:29:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:4e:e9:5a:85:a3:a5:ca:a2:d3:49:b0:19:9e:88:4d:cb:22:
77:09:2b:4c:22:47:de:16:e5:2d:84:61:5a:f8:ba:63:74:46:
c8:1b:eb:63:07:d9:41:fd:61:c2:70:1e:e0:aa:20:d4:b7:f2:
8b:95:b7:54:0a:83:84:86:c0:84:c8:22:70:fb:c6:d6:e3:a0:
84:28:1d:8e:e9:37:b7:bf:73:2d:17:40:31:0e:26:78:75:7c:
16:70:b1:22:8e:93:a1:4f:7b:4c:54:2e:b6:32:aa:43:df:7d:
a2:bf:bb:c7:87:5d:d4:ea:6c:0e:39:aa:5c:55:3e:7d:81:f6:
86:a4:ec:fd:0b:95:01:1b:81:85:67:24:ea:c8:15:5e:1a:84:
31:b8:8d:b6:1e:65:6d:f9:3a:eb:18:c1:b9:a1:91:ab:a8:28:
47:e3:6c:36:ee:fd:a6:1e:8c:bd:cd:79:3d:9a:65:82:ec:11:
a6:8e:8d:af:e4:a5:f9:4a:29:9d:14:9b:47:fa:9e:b8:9c:e6:
84:e2:91:32:6a:92:97:7c:c6:8e:ac:7d:d5:a6:4c:e2:bc:57:
fa:d1:96:e5:be:28:e4:41:bc:e4:bb:b8:77:dd:f9:04:72:ee:
df:53:51:a6:1b:dc:30:29:73:07:02:bb:af:01:84:9f:ac:38:
be:8a:ce:2e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ7uvqpt8B9ME1krkgktYpKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwNjIyMDk1MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzcwYjI0MGRiMDIzM2MwOWQyNjNhOTQ5MWYxNzg4YjAwNWIyN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3zkgOrFyK9pqqO8iTgXVWe2Bhgk
iAVqnkIbT1tPGFa8G/KoGK3hse9TaPZ2C6oT718gP4TQA63AWl1QUZmFi26E63dH
eGht4pNyzi+GsnPN1ROUeZJovWDyj6RAQSgYdazI+0RuSpLVHXSeQb81FHnkqbrO
UT7CsfUV6mphHkHIdDUwOXyVzwWs8IVI63qoVOIiyvRkj3RuodAKrHsJfIdGsH5U
ujbqaEb0n/hJQz8vVTmWYhl4xURXh4bhXXPYe51CoTR9dc9CkaGfKXy+MXypV5M6
VjlhIogieEviSuFR4X9echGigb+yk/jKZyi6s9ZX1CFW8p8nHgyoWM9PxwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOxwskDbAjPAnSY6lJHxeIsAWyfZMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvN0hDeVFOc0NNOENkSmpxVWtmRjRpd0JiSjlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqFMOA
ACcDBwEqFMOAACgwDQYJKoZIhvcNAQELBQADggEBADpO6VqFo6XKotNJsBmeiE3L
IncJK0wiR94W5S2EYVr4umN0Rsgb62MH2UH9YcJwHuCqINS38ouVt1QKg4SGwITI
InD7xtbjoIQoHY7pN7e/cy0XQDEOJnh1fBZwsSKOk6FPe0xULrYyqkPffaK/u8eH
XdTqbA45qlxVPn2B9oak7P0LlQEbgYVnJOrIFV4ahDG4jbYeZW35OusYwbmhkauo
KEfjbDbu/aYejL3NeT2aZYLsEaaOja/kpflKKZ0Um0f6nric5oTikTJqkpd8xo6s
fdWmTOK8V/rRluW+KORBvOS7uHfd+QRy7t9TUaYb3DApcwcCu68BhJ+sOL6Kzi4=
-----END CERTIFICATE-----
Generated at Sun Jun 28 06:26:22 2026 by rpki-client