Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Qt9NXYL9INAho3T-ufC-AMIeWMQ.roa
File: Qt9NXYL9INAho3T-ufC-AMIeWMQ.roa (raw, json)
Hash identifier: YXYL3xh0G43IQdZO+0H3nMy3moYstR9zUQndrislATU=
Subject key identifier: 42:DF:4D:5D:82:FD:20:D0:21:A3:74:FE:B9:F0:BE:00:C2:1E:58:C4
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019914FE256BA68B9B3D30F0EF23A69C358B
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Qt9NXYL9INAho3T-ufC-AMIeWMQ.roa
Signing time: Thu 04 Sep 2025 13:50:23 +0000
ROA not before: Thu 04 Sep 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 2a14:c380:50::/44 maxlen: 44
2a14:c380:70::/44 maxlen: 44
2a14:c380:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:fe:25:6b:a6:8b:9b:3d:30:f0:ef:23:a6:9c:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 4 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42df4d5d82fd20d021a374feb9f0be00c21e58c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:8e:c3:22:55:05:f7:e4:b8:f9:d1:1d:0b:
51:7d:5f:15:66:0d:38:a6:6a:ff:0f:38:b9:df:62:
bb:ec:20:a3:2d:b1:93:7c:92:9b:a0:7f:54:2b:cf:
ec:aa:bb:df:32:6b:99:eb:4d:ca:f8:5a:05:b7:de:
64:60:27:27:b6:0a:b4:03:c6:a1:f3:eb:d5:ea:4e:
d3:b3:11:ae:de:f8:cc:e2:76:6b:4c:9d:53:63:39:
c7:e9:a8:ad:e3:b8:45:1d:87:3e:16:b3:4d:07:9b:
89:d4:35:8e:23:6a:6c:89:a1:dc:86:8d:a4:4a:5c:
ad:61:6c:15:78:7c:ed:a8:b9:16:b0:5f:c5:8f:a3:
1f:12:34:85:26:03:55:10:8d:72:ba:57:c1:0d:dd:
55:ce:ce:ca:23:90:a5:ee:fd:64:00:69:5d:a8:21:
40:f1:21:ae:15:13:3e:ed:0a:70:63:07:1e:b6:02:
b8:7a:51:6f:ca:00:da:48:a6:f1:69:03:64:fc:9a:
80:12:d9:b1:91:7a:17:e8:3c:d4:8f:6c:78:0e:3c:
76:02:5c:ab:71:22:03:20:95:d9:8c:13:ce:28:74:
07:0b:cd:c3:d3:9d:00:d4:5f:37:6b:6b:52:af:b7:
7e:20:d5:9c:40:95:24:93:f7:db:d1:c3:e9:c2:34:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DF:4D:5D:82:FD:20:D0:21:A3:74:FE:B9:F0:BE:00:C2:1E:58:C4
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Qt9NXYL9INAho3T-ufC-AMIeWMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:50::/44
2a14:c380:70::/44
2a14:c380:130::/44
Signature Algorithm: sha256WithRSAEncryption
36:7c:14:12:55:55:58:be:58:f0:4b:74:bf:0d:fe:87:67:7e:
be:db:3d:dc:a3:46:15:a2:30:f5:d3:63:05:27:88:a8:c7:34:
62:42:e8:ec:87:dc:e0:03:3d:46:41:68:f5:ba:d7:59:3d:ea:
62:bd:57:db:1f:30:0f:6d:49:ee:00:ba:a3:14:e9:35:10:9d:
eb:1b:17:af:d7:35:d2:d9:56:e2:40:40:b7:80:0b:b6:a7:e3:
72:4c:30:af:ad:8a:6a:51:cd:67:e7:99:13:68:97:82:c2:a7:
a2:b7:c0:7b:ec:ec:a7:94:7f:30:ff:7a:9c:b7:81:19:98:87:
41:a0:b5:09:94:ac:54:f8:fa:94:03:78:51:64:e5:90:25:6d:
ba:26:da:4f:40:53:cc:83:8e:82:32:67:ad:06:3b:ab:36:c6:
35:aa:88:ef:43:7f:34:e2:0c:7f:87:18:b7:ab:41:c7:35:ca:
90:2b:80:49:75:a1:e3:28:f4:86:ea:a5:27:4e:34:12:69:2a:
a1:2e:77:08:cd:e4:0e:e4:f0:9e:a3:e4:a6:f0:31:cd:90:4d:
f9:de:8c:10:7a:2f:69:e6:c3:b2:dc:74:fb:5f:18:62:27:56:
30:d9:4b:3a:fd:42:c6:ad:ef:bd:52:4f:0c:fc:14:79:e3:cc:
d1:ae:43:ec
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZkU/iVrpoubPTDw7yOmnDWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjUwOTA0MTM1MDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmRmNGQ1ZDgyZmQyMGQwMjFhMzc0ZmViOWYwYmUwMGMyMWU1OGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR+OwyJVBffkuPnRHQtRfV8VZg04
pmr/Dzi532K77CCjLbGTfJKboH9UK8/sqrvfMmuZ603K+FoFt95kYCcntgq0A8ah
8+vV6k7TsxGu3vjM4nZrTJ1TYznH6ait47hFHYc+FrNNB5uJ1DWOI2psiaHcho2k
SlytYWwVeHztqLkWsF/Fj6MfEjSFJgNVEI1yulfBDd1Vzs7KI5Cl7v1kAGldqCFA
8SGuFRM+7QpwYwcetgK4elFvygDaSKbxaQNk/JqAEtmxkXoX6DzUj2x4Djx2Alyr
cSIDIJXZjBPOKHQHC83D050A1F83a2tSr7d+INWcQJUkk/fb0cPpwjTEHwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFELfTV2C/SDQIaN0/rnwvgDCHljEMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvUXQ5TlhZTDlJTkFobzNULXVmQy1BTUllV01RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKhTDgABQ
AwcEKhTDgABwAwcEKhTDgAEwMA0GCSqGSIb3DQEBCwUAA4IBAQA2fBQSVVVYvljw
S3S/Df6HZ36+2z3co0YVojD102MFJ4ioxzRiQujsh9zgAz1GQWj1utdZPepivVfb
HzAPbUnuALqjFOk1EJ3rGxev1zXS2VbiQEC3gAu2p+NyTDCvrYpqUc1n55kTaJeC
wqeit8B77OynlH8w/3qct4EZmIdBoLUJlKxU+PqUA3hRZOWQJW26JtpPQFPMg46C
MmetBjurNsY1qojvQ3804gx/hxi3q0HHNcqQK4BJdaHjKPSG6qUnTjQSaSqhLncI
zeQO5PCeo+Sm8DHNkE353owQei9p5sOy3HT7XxhiJ1Yw2Us6/ULGre+9Uk8M/BR5
48zRrkPs
-----END CERTIFICATE-----
Generated at Thu Sep 18 07:34:19 2025 by rpki-client