Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IYjbs4gAC6v9Y5jS3IPri_adXIA.roa
File: IYjbs4gAC6v9Y5jS3IPri_adXIA.roa (raw, json)
Hash identifier: /+eHOdbk50wS5ImyUlT8GIOXkMrTZaEYdLIb9Ra0EEg=
Subject key identifier: 21:88:DB:B3:88:00:0B:AB:FD:63:98:D2:DC:83:EB:8B:F6:9D:5C:80
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01993AB356552102D75C9A72D1492704C570
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IYjbs4gAC6v9Y5jS3IPri_adXIA.roa
Signing time: Thu 11 Sep 2025 21:34:15 +0000
ROA not before: Thu 11 Sep 2025 21:34:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205533
IP address blocks: 2a14:c380:380::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:b3:56:55:21:02:d7:5c:9a:72:d1:49:27:04:c5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 11 21:34:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2188dbb388000babfd6398d2dc83eb8bf69d5c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:b8:55:e2:01:c4:cc:e3:b0:19:13:03:6a:
ea:dc:6d:d0:b0:5a:12:e3:b9:07:fa:89:dd:4b:be:
58:eb:3d:e2:c3:cf:f3:dc:77:94:a5:24:b9:71:bb:
aa:25:b0:4d:cc:f4:59:26:29:96:b8:ad:18:60:7d:
be:06:09:03:7b:e3:6b:3f:75:17:59:d9:ab:10:ae:
41:8c:44:e9:8a:05:95:43:e1:f2:45:c2:e4:f5:a0:
23:91:21:48:c5:cb:84:ae:4b:44:45:ee:86:a1:0a:
88:49:58:4f:a8:ee:4f:a0:dc:63:41:22:2f:cc:17:
91:c3:dc:76:b7:b6:5d:6f:07:76:24:55:bb:ea:a6:
18:8c:9d:27:8d:49:0d:5e:88:a1:ae:bf:f7:9f:ae:
98:e6:e2:d7:f1:2f:cb:42:c5:9a:95:9a:39:b2:fa:
20:f4:2c:50:d1:6e:34:74:00:fc:ba:67:e2:e0:0b:
2e:7e:21:82:3a:d7:5b:ed:68:59:ae:54:02:f3:b3:
17:1c:ce:84:a0:16:b4:fd:36:5a:17:7d:97:2c:e2:
48:2c:02:e0:d1:12:95:c0:7d:3a:51:ed:60:d7:3a:
30:61:b6:3b:2e:ae:78:65:99:b1:4e:7e:6a:8b:07:
3e:f1:b4:d8:1b:d6:f0:d0:8e:e1:bb:60:f6:ba:cd:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:88:DB:B3:88:00:0B:AB:FD:63:98:D2:DC:83:EB:8B:F6:9D:5C:80
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IYjbs4gAC6v9Y5jS3IPri_adXIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:380::/44
Signature Algorithm: sha256WithRSAEncryption
1f:26:6d:21:94:d8:8a:c5:3a:8f:86:ce:e7:ad:da:3b:24:bc:
a0:78:b7:62:54:83:fc:8f:22:30:9c:e7:99:8b:3f:ca:f8:ef:
42:55:b2:63:f3:ed:82:ac:a4:dd:9f:cc:d3:5b:20:86:97:95:
1b:4f:96:1e:68:4c:2e:80:13:11:a8:69:0a:86:e0:37:11:5c:
95:95:a4:e4:d0:94:ee:c5:28:86:4c:b7:39:ca:7c:ab:f7:dc:
2b:88:b2:36:f9:cc:d1:c9:23:82:89:32:a5:5f:bc:a6:66:62:
df:7e:ef:87:d9:f7:6f:ee:72:11:15:e7:a8:27:81:b4:67:18:
ff:3e:44:51:99:2e:6e:ad:69:91:93:05:41:71:59:4a:98:2e:
4e:75:4f:2f:0e:f4:62:b2:a7:3c:6b:7c:86:71:9c:b9:90:41:
06:6d:9c:65:cd:45:2d:b6:f7:51:92:cc:df:b8:ca:88:e2:92:
cf:8d:f4:da:63:3a:39:75:49:9c:7c:cf:70:0c:cd:b3:6d:95:
a0:b0:6f:84:af:68:96:41:59:fc:0f:84:3c:24:96:01:78:c1:
0b:a2:e4:3e:f6:85:5a:28:b6:6e:28:54:6c:2d:bd:ca:ab:2e:
fa:b8:a0:bd:1e:69:ba:d2:21:ef:96:ae:7c:78:82:ff:ae:08:
e7:0c:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:35:56 2025 by rpki-client