Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ehm8WyrCtyNoE2J57Roa4WryOK4.roa
File: ehm8WyrCtyNoE2J57Roa4WryOK4.roa (raw, json)
Hash identifier: db/jI1TwDMa7eyqKpp1LJsN9AV/AL6HTSt5xCAXmI4g=
Subject key identifier: 7A:19:BC:5B:2A:C2:B7:23:68:13:62:79:ED:1A:1A:E1:6A:F2:38:AE
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EB554C4941166CAD372A0D1C627A429C1
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ehm8WyrCtyNoE2J57Roa4WryOK4.roa
Signing time: Thu 11 Jun 2026 06:18:11 +0000
ROA not before: Thu 11 Jun 2026 06:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197959
IP address blocks: 2a14:c380:e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:54:c4:94:11:66:ca:d3:72:a0:d1:c6:27:a4:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 11 06:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a19bc5b2ac2b72368136279ed1a1ae16af238ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:60:4c:89:ce:01:6b:3b:7a:6b:c8:64:4c:
08:d2:42:d7:ab:ee:c0:9f:7b:ec:92:f7:cf:ca:4e:
f2:0f:47:5c:b4:6e:fc:6d:e8:fa:69:39:bd:b8:72:
a7:7a:0b:9b:67:2e:b7:96:5e:3f:c0:93:81:3e:1f:
9c:10:6b:f9:65:a1:48:f5:a5:58:13:f9:e6:33:96:
14:39:11:df:d6:6e:16:19:44:6d:15:bd:7f:09:a9:
5e:38:da:b9:f4:57:36:8c:e8:cf:43:fd:56:c5:71:
41:36:fa:0f:80:be:8b:85:4e:11:34:b8:eb:35:3a:
7e:fb:0a:0b:4a:6f:89:68:a4:e8:e0:a2:20:59:bc:
2b:55:0a:9f:12:b8:52:23:f0:fc:15:ed:90:ad:d1:
65:c2:bb:6e:53:33:79:47:60:ca:9f:d1:e7:3c:1f:
d1:21:28:6c:ef:3a:e0:08:a1:64:2e:52:c5:21:fa:
0e:1f:2e:d0:cb:81:0c:b5:28:2d:2d:3c:cc:90:ac:
cf:35:38:75:7e:a6:fe:15:7b:2a:e9:5d:22:5e:33:
81:92:f3:6b:47:6e:3d:93:a9:f9:22:ce:48:8e:15:
63:61:be:dd:69:3b:45:a0:75:52:71:4d:7f:6b:20:
31:bd:e9:17:2d:5a:c5:dd:91:09:9a:fe:34:bd:b8:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:BC:5B:2A:C2:B7:23:68:13:62:79:ED:1A:1A:E1:6A:F2:38:AE
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ehm8WyrCtyNoE2J57Roa4WryOK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:e00::/40
Signature Algorithm: sha256WithRSAEncryption
87:6e:ae:76:68:29:a2:cf:42:01:09:36:d8:55:36:59:a5:5f:
38:d3:70:37:92:ea:a4:f7:08:82:39:46:ed:32:f2:61:89:80:
ed:27:cf:7e:4c:64:20:6b:3d:d0:d4:a8:0f:cf:52:b2:27:26:
e0:15:c8:2c:7f:e1:76:48:26:a1:a4:19:ad:e7:b7:83:85:cc:
c4:8f:e3:6e:14:52:e1:de:5c:36:bc:16:18:50:37:93:4d:9f:
37:7f:21:22:0d:43:fd:22:17:d0:ce:8a:fb:b0:c2:85:52:8a:
3c:60:33:27:f2:46:f0:31:b7:be:14:16:ed:ac:02:59:a5:33:
9a:65:57:8f:b9:80:8a:f6:dd:06:2d:10:72:fb:2a:bd:a2:96:
e1:1c:04:40:fc:98:ee:dd:ed:51:d8:11:27:54:01:6f:49:65:
b0:a3:67:cb:ba:f4:aa:ce:40:fc:ea:cc:2d:30:ad:1b:64:44:
46:33:fd:00:b7:21:77:86:1e:00:f5:1a:11:c4:93:03:c2:5b:
5c:29:83:c5:b9:33:08:06:dd:e2:fe:75:e4:46:9c:75:a0:43:
13:e1:a5:3b:ec:56:ff:6f:96:cc:ca:eb:65:bc:21:a5:6a:f8:
57:49:cf:9a:28:ee:b3:75:2c:4c:af:f5:1d:14:a2:1c:40:a2:
92:fa:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:44:05 2026 by rpki-client