Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/e28inoXxtbg_qPO3ttvfMAem8xo.roa
File:                     e28inoXxtbg_qPO3ttvfMAem8xo.roa (raw, json)
Hash identifier:          wKhsXcmdsZdOQoOnFv9lwwoF0rXWNXfxXM4VPl7OKdM=
Subject key identifier:   7B:6F:22:9E:85:F1:B5:B8:3F:A8:F3:B7:B6:DB:DF:30:07:A6:F3:1A
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019EDC4DD6A10A10B0856338366B46896F61
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/e28inoXxtbg_qPO3ttvfMAem8xo.roa
Signing time:             Thu 18 Jun 2026 19:55:49 +0000
ROA not before:           Thu 18 Jun 2026 19:55:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213501
IP address blocks:        2a14:c380:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:4d:d6:a1:0a:10:b0:85:63:38:36:6b:46:89:6f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jun 18 19:55:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b6f229e85f1b5b83fa8f3b7b6dbdf3007a6f31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:ff:9d:bd:42:24:55:c6:86:35:bd:7f:e8:
                    5b:ac:0a:7c:45:07:3e:b1:2f:81:8e:18:c8:84:57:
                    ec:1b:3f:4b:5c:1c:fe:b3:93:13:58:12:09:9d:9d:
                    09:51:ed:14:69:ca:31:6b:c3:54:94:31:be:21:a6:
                    74:74:cd:f1:27:05:7e:1f:21:7e:e0:ed:27:33:76:
                    ad:ff:af:86:99:7b:fc:7d:34:63:1e:f2:93:c3:c5:
                    ff:9c:bd:6d:6c:80:0d:11:3f:c0:c4:0d:49:e3:40:
                    b3:8d:aa:c4:62:33:5a:d6:1e:68:ab:f1:6e:83:1d:
                    ba:2f:1d:ed:f9:7a:4e:76:09:c0:03:e0:ec:de:7a:
                    ac:6b:32:4b:aa:28:44:3e:ef:bc:89:88:8e:43:f0:
                    2a:13:7f:c6:44:1d:50:c4:e4:6d:a9:73:fa:1b:7c:
                    a4:da:79:bb:31:c4:d6:2d:5b:65:0c:bc:24:85:b3:
                    8c:33:eb:55:0f:fd:d0:6a:84:66:d9:5a:b2:d2:5e:
                    b4:f5:18:57:ca:53:b6:f3:ea:e5:1e:22:44:77:5e:
                    0d:96:48:85:47:bf:29:39:3f:66:df:a3:6e:4d:a8:
                    e6:a7:c6:6a:2c:78:e9:21:c1:5d:ab:ca:25:26:43:
                    d0:67:55:f9:20:23:2c:8e:83:18:e1:00:82:f5:87:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:22:9E:85:F1:B5:B8:3F:A8:F3:B7:B6:DB:DF:30:07:A6:F3:1A
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/e28inoXxtbg_qPO3ttvfMAem8xo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:ea:b9:37:8a:35:1a:f3:96:1d:49:f0:f3:6a:03:f2:b9:
         7e:19:9b:84:54:9e:59:24:a8:f0:12:e1:4e:1e:eb:54:c2:cc:
         d7:87:a1:98:08:9c:ff:1f:02:e1:22:c6:b0:04:f6:44:77:ee:
         35:28:35:f3:f9:90:d5:18:15:74:52:b9:ba:17:11:59:33:e5:
         29:ec:cf:25:19:03:34:91:39:86:81:c7:6e:82:db:63:52:cb:
         e1:ae:d0:c4:00:68:08:e1:4c:f2:47:8a:43:0f:57:af:3e:11:
         b3:72:db:33:dd:98:2a:23:81:ee:af:14:f5:3d:11:2e:e3:fd:
         5c:fb:51:89:02:02:a7:ed:05:e7:b9:91:e5:60:b1:0a:bd:6d:
         ad:73:b7:94:55:70:19:b7:7a:06:9a:5d:5b:a7:ad:7e:52:c5:
         39:5b:09:72:81:4b:47:54:2e:64:fa:c8:46:9f:78:58:d9:5d:
         a2:c8:3f:89:0c:99:b6:61:0a:78:26:96:7b:33:b0:82:7d:7e:
         99:56:0c:c8:ca:06:cc:31:69:7d:64:63:87:4e:54:ba:90:f2:
         fb:a7:7f:86:c8:f4:11:6a:bc:19:0e:52:70:d4:4a:e3:d7:30:
         2e:71:c8:83:28:67:10:e0:c1:f9:25:2c:dd:fd:20:f8:8d:e0:
         ed:34:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 06:26:41 2026 by rpki-client