Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/c9_PoDfzziBkD62BRNj2Sxqje3I.roa
File: c9_PoDfzziBkD62BRNj2Sxqje3I.roa (raw, json)
Hash identifier: osuOFufeWpxc7sKHkX4O3ubhuHEaiMhyu9v9Fo8w5L0=
Subject key identifier: 73:DF:CF:A0:37:F3:CE:20:64:0F:AD:81:44:D8:F6:4B:1A:A3:7B:72
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019DA5AAB2B7630965DD9284E61A8D6761D3
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/c9_PoDfzziBkD62BRNj2Sxqje3I.roa
Signing time: Sun 19 Apr 2026 12:15:20 +0000
ROA not before: Sun 19 Apr 2026 12:15:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21641
IP address blocks: 2a14:c380:600::/40 maxlen: 40
2a14:c380:e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:aa:b2:b7:63:09:65:dd:92:84:e6:1a:8d:67:61:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Apr 19 12:15:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73dfcfa037f3ce20640fad8144d8f64b1aa37b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:ac:5c:a9:7d:ca:bc:33:d2:2c:83:51:93:
74:e3:0d:7a:a2:80:3d:39:5d:b2:11:ba:63:3d:92:
71:18:0e:13:bc:28:7c:e9:29:04:05:03:28:71:b2:
1e:cf:af:42:90:c5:31:ca:a7:35:65:23:aa:51:88:
e3:a8:6a:65:a8:9f:1c:99:2c:9c:5f:2e:f2:74:d5:
c9:6d:4f:b1:8b:cf:5e:2d:49:27:60:a0:98:5a:b2:
1b:6c:6f:6b:58:e8:cb:fe:fd:3a:50:a4:37:f6:78:
df:5e:ca:b1:fe:f8:1a:bb:d4:bc:d7:0e:3e:f2:db:
ad:8d:9e:1f:cb:8c:d5:f4:00:70:c3:3f:2e:6d:80:
7e:ca:71:38:74:8d:66:62:84:c8:ef:a9:75:fe:f3:
a6:b3:6e:11:a6:b5:f5:93:99:37:6d:c4:b3:22:3f:
c9:41:47:2a:39:dc:d4:41:a0:8e:18:dc:1b:19:a1:
98:a1:21:6e:0f:a9:0b:d2:2b:55:c4:4e:ab:24:e5:
27:33:53:0d:b2:a6:12:34:d0:93:8e:ae:66:6a:16:
8b:47:c7:61:27:fa:61:44:1d:39:af:c2:9b:88:32:
06:70:a7:1b:a4:98:80:1b:f7:7a:25:9e:7b:6b:ac:
e1:50:37:65:67:7f:08:88:87:78:33:f8:6a:92:1e:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:CF:A0:37:F3:CE:20:64:0F:AD:81:44:D8:F6:4B:1A:A3:7B:72
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/c9_PoDfzziBkD62BRNj2Sxqje3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:600::/40
2a14:c380:e00::/40
Signature Algorithm: sha256WithRSAEncryption
03:5c:81:0b:3b:c1:71:aa:b5:5d:98:12:0e:6c:82:88:0f:4b:
cd:83:23:7d:4b:7f:99:7d:9f:6e:62:f2:67:6b:ab:70:ee:e7:
a5:17:b8:14:e0:44:35:d9:5b:c3:88:3a:f7:69:b0:6a:ad:15:
dd:c3:15:27:de:33:53:6d:67:06:c9:de:48:e7:be:d9:c4:be:
26:bd:5b:d2:b9:16:46:d9:c6:eb:5a:8b:17:11:c8:a7:bc:ea:
4b:0f:d5:1b:73:5b:a8:b8:59:57:37:98:90:b7:5c:87:ed:16:
86:d2:f7:db:28:d2:c4:dc:86:cb:50:2b:fa:c1:99:87:84:3a:
21:c2:6b:b3:cf:89:25:64:da:7c:9a:6e:23:24:9f:d1:65:b3:
02:5e:24:cc:40:7f:68:c9:d8:e1:00:b0:ef:4c:1d:22:8d:9e:
14:6e:17:a2:91:7c:00:11:fb:f0:fc:2a:10:d6:d9:f9:54:bb:
f7:ca:f1:9d:cc:e3:b2:3c:75:a7:3e:a8:30:ec:21:84:97:41:
e5:75:b9:bf:cc:6d:af:28:12:7a:88:8e:3b:03:53:ad:9d:7d:
46:14:6b:ba:11:9c:5c:73:72:93:3f:5c:6e:38:c7:d6:20:7e:
4a:30:7d:af:a4:07:6e:6e:b3:d5:57:07:2d:47:62:a7:87:97:
01:ca:4a:b4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZ2lqrK3Ywll3ZKE5hqNZ2HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwNDE5MTIxNTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2RmY2ZhMDM3ZjNjZTIwNjQwZmFkODE0NGQ4ZjY0YjFhYTM3YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SysXKl9yrwz0iyDUZN04w16ooA9
OV2yEbpjPZJxGA4TvCh86SkEBQMocbIez69CkMUxyqc1ZSOqUYjjqGplqJ8cmSyc
Xy7ydNXJbU+xi89eLUknYKCYWrIbbG9rWOjL/v06UKQ39njfXsqx/vgau9S81w4+
8tutjZ4fy4zV9ABwwz8ubYB+ynE4dI1mYoTI76l1/vOms24RprX1k5k3bcSzIj/J
QUcqOdzUQaCOGNwbGaGYoSFuD6kL0itVxE6rJOUnM1MNsqYSNNCTjq5mahaLR8dh
J/phRB05r8KbiDIGcKcbpJiAG/d6JZ57a6zhUDdlZ38IiId4M/hqkh78ZwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFHPfz6A3884gZA+tgUTY9ksao3tyMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvYzlfUG9EZnp6aUJrRDYyQlJOajJTeHFqZTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKhTDgAYD
BgAqFMOADjANBgkqhkiG9w0BAQsFAAOCAQEAA1yBCzvBcaq1XZgSDmyCiA9LzYMj
fUt/mX2fbmLyZ2urcO7npRe4FOBENdlbw4g692mwaq0V3cMVJ94zU21nBsneSOe+
2cS+Jr1b0rkWRtnG61qLFxHIp7zqSw/VG3NbqLhZVzeYkLdch+0WhtL32yjSxNyG
y1Ar+sGZh4Q6IcJrs8+JJWTafJpuIySf0WWzAl4kzEB/aMnY4QCw70wdIo2eFG4X
opF8ABH78PwqENbZ+VS798rxnczjsjx1pz6oMOwhhJdB5XW5v8xtrygSeoiOOwNT
rZ19RhRruhGcXHNykz9cbjjH1iB+SjB9r6QHbm6z1VcHLUdip4eXAcpKtA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:39:05 2026 by rpki-client