Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/NyvfVaHvKKQfG2GvnD301TkClYU.roa
File: NyvfVaHvKKQfG2GvnD301TkClYU.roa (raw, json)
Hash identifier: m7UmftMEbbwfTyxI7LKxv6RIRVGd98WCQkhAjozZt7M=
Subject key identifier: 37:2B:DF:55:A1:EF:28:A4:1F:1B:61:AF:9C:3D:F4:D5:39:02:95:85
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A00BBC200459E1C9BEBD4561B41826729C
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/NyvfVaHvKKQfG2GvnD301TkClYU.roa
Signing time: Sun 16 Aug 2026 18:01:13 +0000
ROA not before: Sun 16 Aug 2026 18:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a14:c380:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:bc:20:04:59:e1:c9:be:bd:45:61:b4:18:26:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Aug 16 18:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=372bdf55a1ef28a41f1b61af9c3df4d539029585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:f1:37:f7:ac:90:2a:44:34:ed:dd:6f:7f:
05:ca:47:f6:01:1a:0a:1b:db:cf:dc:a1:c4:73:c7:
e1:54:89:27:91:1c:74:05:5f:6d:c8:5c:8b:b6:6b:
cb:5b:96:5c:91:8c:58:94:61:19:db:29:ae:f0:90:
49:07:de:41:f2:7d:d1:25:41:2c:11:c4:9a:66:4b:
97:5b:18:de:81:da:6e:30:e5:22:66:b8:88:ab:b8:
e8:1e:b1:76:07:4b:e6:c5:0c:6a:1c:d6:80:b1:37:
1d:9c:aa:54:52:f9:68:02:6d:19:fd:db:fd:6c:c6:
43:28:04:83:e6:9f:d7:5e:81:fe:e9:ac:83:97:36:
56:93:c7:2c:c3:95:f3:f2:e8:23:ac:07:d9:09:0d:
be:b3:fe:84:a1:2a:51:dd:21:2e:1b:2b:07:d4:00:
17:37:fb:7c:c1:f7:71:65:e7:a3:80:3d:e7:9f:b9:
2d:af:2b:1a:b4:d8:9e:80:57:29:79:56:b5:86:97:
3c:55:02:4e:68:b0:94:5c:2e:1f:d2:a1:9a:48:13:
66:39:08:55:8f:bf:1a:f4:71:8f:ce:7b:60:1f:e9:
c5:a1:af:01:62:44:b3:cd:59:31:0c:36:45:80:f9:
fb:fd:3b:14:41:94:bb:78:be:b5:0e:32:26:4b:77:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2B:DF:55:A1:EF:28:A4:1F:1B:61:AF:9C:3D:F4:D5:39:02:95:85
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/NyvfVaHvKKQfG2GvnD301TkClYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:800::/40
Signature Algorithm: sha256WithRSAEncryption
79:57:6b:93:81:28:ce:39:9b:d2:04:89:c9:9c:db:aa:83:56:
a7:45:f9:99:6b:eb:85:83:59:0d:04:4f:b4:1d:7f:66:e8:ac:
4e:58:fa:c4:e1:71:80:68:aa:17:89:0b:c8:7f:d5:85:1b:d8:
4a:13:81:c4:5d:36:87:6d:ab:7b:bf:af:f5:54:63:fd:40:9c:
d9:f6:4e:61:92:bb:7e:12:c6:37:c0:61:1f:3d:3d:5a:ce:53:
09:80:5e:12:17:4a:36:09:df:4c:2b:d4:ff:ba:0f:b7:64:2b:
7e:ac:59:84:21:da:5c:ea:b4:08:e1:59:60:0e:d7:27:12:e8:
d2:14:66:c4:d6:95:f1:fc:ce:74:13:ce:1e:10:f6:73:73:33:
af:05:18:85:fc:2f:cc:9a:2c:05:34:bd:5d:10:ba:19:e1:5f:
fd:7b:7f:85:b6:05:47:75:cb:f3:65:99:66:c1:77:0a:da:5c:
61:ea:4a:9e:6c:f9:c6:9e:ef:7a:85:2f:2a:1d:11:e9:19:45:
c2:63:fb:5d:8b:90:f6:8c:ee:62:1f:cf:6c:d4:1f:d2:dd:d6:
d2:f0:55:d7:4f:36:c2:b4:13:eb:a5:b1:ec:6a:73:03:43:17:
37:d5:9c:e5:6e:ab:6c:f4:f2:6c:04:78:2a:10:45:ad:52:33:
c0:8e:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:12:50 2026 by rpki-client