Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/nQCXDZxO_8QcRW1suX_WgbCv3zI.roa
File: nQCXDZxO_8QcRW1suX_WgbCv3zI.roa (raw, json)
Hash identifier: nCNLf1Y1OyThfGP4osJwxDBamQ4T1Z02GNBdTIKNyTA=
Subject key identifier: 9D:00:97:0D:9C:4E:FF:C4:1C:45:6D:6C:B9:7F:D6:81:B0:AF:DF:32
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A0CE5A3266A8D44813DC0ACFAB9E2BE1CC
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/nQCXDZxO_8QcRW1suX_WgbCv3zI.roa
Signing time: Wed 23 Sep 2026 13:00:12 +0000
ROA not before: Wed 23 Sep 2026 13:00:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213641
IP address blocks: 2a14:c380:220::/44 maxlen: 44
2a14:c380:220::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:32:66:a8:d4:48:13:dc:0a:cf:ab:9e:2b:e1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 23 13:00:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d00970d9c4effc41c456d6cb97fd681b0afdf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:b5:58:5b:fc:ba:87:14:30:20:ce:a5:af:
32:de:94:04:f4:5e:e5:7f:47:46:02:23:71:6f:04:
eb:e7:89:80:ff:d6:e7:41:1b:3d:7b:e9:3f:9b:91:
aa:b0:a3:a1:ca:3e:df:0c:79:a6:cd:f9:fb:6e:57:
40:ca:8d:b4:30:ee:fc:9b:46:06:a2:0e:a7:e1:54:
38:d3:db:79:6c:43:3c:af:13:ba:a8:38:a7:87:27:
48:d7:9c:38:6a:f4:f6:e6:39:f0:19:6d:96:6b:9a:
9d:52:f6:a8:df:84:6f:03:f7:28:b9:a2:d7:7c:d9:
9e:2b:5a:a6:b5:90:00:9f:82:94:1b:bd:70:e4:13:
ed:45:de:a9:47:a8:b4:b3:c7:36:2e:49:4b:1a:6a:
11:1e:48:35:1a:f6:7c:2a:a3:6c:d0:5d:2c:08:a7:
ce:1c:cb:91:26:05:5a:24:92:29:03:f5:a3:aa:96:
a3:9a:cb:6f:6d:15:30:e1:e3:d5:73:6d:f4:a9:f2:
3c:59:ae:d2:b3:7e:7a:17:be:fe:65:68:76:30:75:
7c:0a:79:30:bd:d7:31:15:19:5f:c8:d2:17:93:52:
08:a4:46:79:15:23:9c:30:64:6c:5d:92:f6:40:13:
91:66:c3:81:de:56:49:9c:da:7c:c5:bb:fe:a1:d0:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:97:0D:9C:4E:FF:C4:1C:45:6D:6C:B9:7F:D6:81:B0:AF:DF:32
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/nQCXDZxO_8QcRW1suX_WgbCv3zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:220::/44
Signature Algorithm: sha256WithRSAEncryption
67:8f:32:bc:e4:76:18:6d:94:28:e2:9a:a2:fe:47:07:01:e9:
58:18:dc:81:f2:7e:a6:a3:b2:0d:7a:f4:17:b9:61:2c:06:39:
1e:27:fe:7b:45:22:a2:11:ac:c5:67:95:dd:5d:49:ed:21:84:
5a:20:31:fe:e6:8c:f0:5f:c1:65:6e:85:9a:ba:b7:c4:d0:cc:
c8:42:ec:cf:4b:4b:e2:28:be:c4:33:75:36:7c:bb:22:f8:4f:
ac:c8:3e:26:34:d5:68:26:8a:0d:31:bb:63:dd:e9:5e:0e:d3:
39:fe:dc:ea:af:f9:56:3d:43:82:0c:74:48:41:b4:90:12:f4:
b1:69:52:1c:e4:19:8d:b8:66:a3:e5:fa:90:97:58:a1:2a:35:
ed:67:a4:ad:27:c9:e4:20:a9:ec:62:19:75:f8:74:47:08:fb:
46:cf:1a:85:d7:67:95:29:e8:fc:b7:05:ad:03:9b:d5:81:5e:
fb:55:2e:10:5b:9f:f0:9c:88:d0:88:80:4f:bc:17:58:4c:d1:
e7:5f:04:92:e7:98:c0:44:53:34:2d:2f:bd:ba:90:14:22:a7:
7b:31:6a:1c:0b:1a:d2:1d:46:34:72:e8:9f:42:ae:4e:8e:e6:
e9:80:e8:f5:fe:78:f4:7b:38:8f:1f:93:c5:ec:9f:80:6c:c3:
fc:5d:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:13:36 2026 by rpki-client