Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IVN4VWRNSuUQQL_H8-Hvk5sw_K0.roa
File: IVN4VWRNSuUQQL_H8-Hvk5sw_K0.roa (raw, json)
Hash identifier: cVmriSYgIxLdUNP9iOMyD76POrvwOx2CyG4qdLu3fvI=
Subject key identifier: 21:53:78:55:64:4D:4A:E5:10:40:BF:C7:F3:E1:EF:93:9B:30:FC:AD
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01995173EBF7D92ECEA931C4627F49BEF24A
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IVN4VWRNSuUQQL_H8-Hvk5sw_K0.roa
Signing time: Tue 16 Sep 2025 07:36:15 +0000
ROA not before: Tue 16 Sep 2025 07:36:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213465
IP address blocks: 2a14:c380:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:73:eb:f7:d9:2e:ce:a9:31:c4:62:7f:49:be:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 16 07:36:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21537855644d4ae51040bfc7f3e1ef939b30fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:de:b4:7a:22:81:e4:c4:aa:f6:bc:ad:7f:
fe:8b:56:53:e5:bb:c3:8f:2d:6f:0f:0a:7f:39:b4:
bd:f7:60:43:d7:06:e4:ab:2a:1c:f2:c9:0d:08:e0:
85:8f:31:39:c1:74:77:b0:03:ff:5a:0c:e7:3d:73:
d5:6b:0d:b7:3b:10:45:88:01:65:0f:36:c5:a7:0e:
bf:ec:5e:43:5e:94:a0:f1:27:aa:03:4a:87:e8:c7:
c2:f7:ac:53:da:d1:a3:5c:12:ba:d0:fa:88:d9:1d:
16:96:a9:82:97:d7:ee:f3:d0:8a:f2:b3:9c:77:15:
e1:29:94:74:21:ec:df:ec:83:0f:72:36:fd:e1:1b:
84:5f:0b:81:f1:52:11:f1:35:09:2b:aa:84:f9:69:
37:21:dc:11:c1:86:71:8f:ac:db:1d:99:a5:85:65:
be:f5:0c:b4:f6:14:a7:e7:dd:33:0c:1e:1f:ed:d6:
75:b1:b7:54:0a:c8:1d:44:84:a0:67:30:17:fe:19:
a7:75:7b:9d:4b:0f:91:70:ee:e0:92:4f:24:ec:a2:
b4:1c:56:4a:6d:fc:5c:e8:08:aa:fc:7e:b0:dc:f6:
5b:69:35:f3:14:79:2c:bf:df:3a:1f:37:1e:2c:f7:
a8:42:8d:b5:d4:f9:f1:8f:3c:2a:57:99:00:bc:56:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:78:55:64:4D:4A:E5:10:40:BF:C7:F3:E1:EF:93:9B:30:FC:AD
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IVN4VWRNSuUQQL_H8-Hvk5sw_K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:10::/48
Signature Algorithm: sha256WithRSAEncryption
07:35:5e:c3:cd:62:e2:66:ef:f5:1c:a0:a8:cd:3a:86:bb:12:
84:f4:28:0c:77:5c:d9:1b:07:17:a5:72:07:d9:01:31:67:78:
f0:87:af:7c:ed:90:38:6a:b8:f7:62:1f:20:42:4e:38:cf:39:
fb:3b:b0:fb:86:07:3e:07:83:73:66:28:74:f8:50:07:a8:3e:
f8:60:4e:4c:60:23:84:48:11:a2:f3:82:99:1d:7b:33:3e:fb:
63:80:3d:2d:c0:ab:4c:5b:c8:e8:65:e9:be:9a:8d:58:1f:01:
0f:ed:15:a0:ec:9d:92:1e:86:d7:ad:ca:1e:b2:03:1d:bf:f1:
91:69:5c:be:7a:30:39:1c:11:fe:69:c1:9a:55:08:79:44:c4:
5d:bf:1f:96:bd:ac:fa:25:7a:47:88:57:ad:2f:5b:a0:60:4d:
5d:fc:9e:1b:50:f8:d6:11:20:eb:ec:ff:20:eb:07:7f:3f:ad:
d5:d9:67:80:16:73:c3:ea:fe:8a:2e:13:23:10:b1:76:d7:bd:
4e:25:93:9b:dd:10:dc:f7:79:5e:62:fd:2a:14:ba:a5:4c:8d:
82:00:e2:39:fc:9b:01:28:04:15:d9:f3:38:bd:4d:68:19:07:
80:b6:f9:44:3a:49:a3:74:57:82:16:94:fd:cc:57:6d:85:44:
1c:de:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:34:54 2025 by rpki-client