Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/E7kKeedzL4j7YlfXZXn28DxNG-I.roa
File: E7kKeedzL4j7YlfXZXn28DxNG-I.roa (raw, json)
Hash identifier: PVwTBkyMLHh+I9gO70cF+6pv/EG9BoIq3C/ovF98pEk=
Subject key identifier: 13:B9:0A:79:E7:73:2F:88:FB:62:57:D7:65:79:F6:F0:3C:4D:1B:E2
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019E2B6F5427E9E9D6772CA552EEF61A1B71
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/E7kKeedzL4j7YlfXZXn28DxNG-I.roa
Signing time: Fri 15 May 2026 11:39:36 +0000
ROA not before: Fri 15 May 2026 11:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197569
IP address blocks: 2a14:c380:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 18 May 2026 05:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:6f:54:27:e9:e9:d6:77:2c:a5:52:ee:f6:1a:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: May 15 11:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13b90a79e7732f88fb6257d76579f6f03c4d1be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:3d:79:7b:34:ba:4f:aa:f5:7a:e2:aa:87:
39:ed:e9:16:e3:30:71:ac:42:56:16:06:e3:55:1a:
ba:da:10:cf:54:34:92:7b:a3:42:9e:0e:5f:42:4d:
af:60:e4:14:45:61:c8:34:f2:e8:06:fb:84:ee:ed:
fd:52:b9:3d:85:4c:cf:b2:f3:d7:03:b8:d4:9a:45:
50:c0:85:2e:5a:77:68:2c:e5:c5:92:d7:52:04:ed:
fd:8f:a3:3a:96:dd:b2:e1:51:63:c3:8f:d9:0d:e3:
f8:6b:15:cb:61:a3:53:0d:70:d9:34:03:32:a8:49:
4b:f6:4d:5d:f2:40:5d:b4:c4:36:4a:b2:e1:38:9f:
06:3c:50:9b:49:4f:7a:f9:c5:d5:59:64:51:59:23:
38:54:86:db:d0:74:c2:e7:0a:77:14:f1:91:b4:36:
d3:ca:b4:c8:85:da:0e:30:de:5d:21:c2:ed:83:36:
67:64:be:4e:2f:25:50:53:8e:f0:c1:99:86:8c:e9:
a8:d4:8e:e8:f6:8a:09:72:03:a6:95:1b:b5:9a:ed:
e6:eb:fd:c6:1c:00:94:e2:bd:ba:45:5d:8c:e1:8a:
4f:8b:6f:d2:ad:c4:c7:6f:94:1b:5c:22:3d:7c:c2:
ef:9f:a9:7d:f6:fb:9f:a2:8e:c2:0f:08:e1:b7:0b:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:0A:79:E7:73:2F:88:FB:62:57:D7:65:79:F6:F0:3C:4D:1B:E2
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/E7kKeedzL4j7YlfXZXn28DxNG-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1000::/40
Signature Algorithm: sha256WithRSAEncryption
09:ea:73:5c:ff:25:af:68:1a:9b:fb:e8:f9:5a:eb:24:d0:62:
3b:14:1e:d1:93:c7:b6:58:4c:d2:7f:32:fa:9b:67:b4:3a:0c:
cb:e8:06:47:d3:55:7d:c5:8a:f1:1f:71:04:00:4d:3b:d4:09:
07:eb:00:09:99:f3:32:91:15:29:12:43:b9:7a:dc:5e:b0:08:
26:8f:53:31:98:98:95:c9:5c:98:d3:0a:29:a4:13:9c:b1:38:
0f:12:1d:db:3d:2d:25:f4:f9:5d:c4:39:90:6f:ae:9d:a8:0c:
15:81:8b:02:67:6d:bb:26:24:1c:17:c3:c4:aa:1c:6c:c9:09:
e3:09:52:aa:27:b2:91:1e:6f:70:33:80:cf:1f:43:75:56:24:
25:12:c2:49:b2:f4:e4:37:a5:79:3e:40:ce:07:80:91:7c:9b:
68:e8:5c:7b:f8:0d:18:48:6e:f9:86:c5:db:b6:15:7a:91:24:
9c:46:ef:0a:4a:e4:0f:53:46:d6:7f:75:23:a1:93:ca:36:96:
15:b7:6d:a7:2e:4d:73:0d:c1:a2:ec:7a:84:31:a1:31:22:f8:
75:04:b2:ad:87:d1:09:e9:61:8f:2a:f3:30:05:8d:2d:bd:99:
f8:7b:fc:59:8e:6f:66:c2:83:8d:27:ed:52:cb:f0:af:53:30:
45:2a:4f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 11:04:14 2026 by rpki-client