Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/_6m6uA3vD-xn8M42h-pROg9cRlg.roa
File: _6m6uA3vD-xn8M42h-pROg9cRlg.roa (raw, json)
Hash identifier: heLZ50dzPDQrqVdpuZjYDkG4tnAykFSdL3vxXddaDkg=
Subject key identifier: FF:A9:BA:B8:0D:EF:0F:EC:67:F0:CE:36:87:EA:51:3A:0F:5C:46:58
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EDC4DD3C2700E822C67D060EE2D3CF788
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/_6m6uA3vD-xn8M42h-pROg9cRlg.roa
Signing time: Thu 18 Jun 2026 19:55:48 +0000
ROA not before: Thu 18 Jun 2026 19:55:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199428
IP address blocks: 2a14:c380:280::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:4d:d3:c2:70:0e:82:2c:67:d0:60:ee:2d:3c:f7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 18 19:55:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffa9bab80def0fec67f0ce3687ea513a0f5c4658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:97:d9:85:2e:7d:c3:78:6f:5c:83:28:13:
17:32:33:e3:35:62:b9:e4:72:e3:05:03:a4:de:eb:
0d:44:25:e0:e0:50:37:56:12:02:51:10:5f:cd:80:
f1:fc:44:a3:34:22:e6:f3:3e:b4:8f:e7:1f:ea:03:
a9:00:af:c4:36:b1:65:d5:f8:c9:b4:bc:89:0f:13:
00:36:92:85:cf:9e:a5:97:e3:b7:cb:4c:2b:e9:7c:
92:32:6b:0b:45:5e:47:d0:52:a8:d0:09:83:c6:b3:
b7:97:97:eb:b1:7f:2c:e3:a5:4e:02:ce:3f:cb:4f:
9c:45:76:b6:e7:64:d5:16:47:2d:b0:59:2f:8f:99:
d5:7f:0a:ee:43:f6:0c:d6:95:5a:a3:f4:f9:29:c9:
40:fd:36:71:19:bf:86:a0:e1:28:13:d7:15:a3:32:
00:5d:47:64:18:64:80:45:51:84:97:95:11:c8:c6:
03:96:89:40:13:8e:b0:a1:22:34:d2:66:17:3b:ca:
06:84:8c:c1:4b:26:0b:50:ad:4b:42:dc:a4:9d:17:
24:a3:cf:28:2e:1e:40:aa:e0:9a:b0:ce:94:5f:a0:
43:6d:0f:15:5b:8f:92:dd:d5:cf:94:6e:1d:29:ae:
0e:1d:4e:a1:23:df:fb:13:9e:ca:67:13:1b:07:3f:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A9:BA:B8:0D:EF:0F:EC:67:F0:CE:36:87:EA:51:3A:0F:5C:46:58
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/_6m6uA3vD-xn8M42h-pROg9cRlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:280::/44
Signature Algorithm: sha256WithRSAEncryption
9c:d7:78:8a:cc:1c:f5:b3:6c:cb:05:11:2e:e9:90:32:da:97:
49:73:7c:5d:6e:3c:bc:3e:59:e8:9e:b0:ca:6b:5d:15:eb:8c:
cb:b4:9a:70:40:30:1e:29:78:22:57:30:d2:ec:a0:f4:1d:8e:
5c:08:b8:9d:6e:fc:db:b4:9d:10:66:ad:7b:fe:1e:71:67:37:
8c:e9:59:ab:43:cc:00:47:cb:ee:40:9e:78:5d:81:cd:ac:aa:
96:f2:fb:af:5c:c8:13:2f:c4:a2:71:a4:14:98:a8:29:16:79:
7e:fc:10:df:e8:8e:c0:ae:86:c0:b0:fd:eb:2a:da:db:0e:f8:
f6:63:6e:79:f8:c3:29:97:24:81:ad:9a:15:ac:67:88:8d:ea:
ca:24:9e:72:1c:60:af:c4:79:4c:d9:3e:a9:a9:69:39:10:eb:
20:cf:4c:af:ed:0e:ab:07:26:cf:b3:1e:5b:de:42:b4:95:0c:
7f:a2:c0:f0:6b:61:d0:48:aa:c6:b9:a1:bd:b0:20:18:bf:a2:
56:d1:6c:3c:9f:46:65:2a:33:ae:86:8d:10:68:0c:3b:9e:5e:
45:ad:7e:be:64:13:84:a4:88:3a:54:c1:a7:02:44:2b:2e:e5:
f9:f9:fa:23:95:bd:fa:35:c3:34:b4:c0:3c:4f:65:15:9e:49:
13:4a:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 06:27:17 2026 by rpki-client