Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/puBWcsDvI5EMFmFfYbYvkCD8RYo.roa
File: puBWcsDvI5EMFmFfYbYvkCD8RYo.roa (raw, json)
Hash identifier: TPqsvFVwt1B/1/ZbLtdUylxmIDJtveylYJkYBGSGqHc=
Subject key identifier: A6:E0:56:72:C0:EF:23:91:0C:16:61:5F:61:B6:2F:90:20:FC:45:8A
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A1CBABDCF7C33785547BEECBC1149BA7C7
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/puBWcsDvI5EMFmFfYbYvkCD8RYo.roa
Signing time: Wed 11 Nov 2026 17:33:20 +0000
ROA not before: Wed 11 Nov 2026 17:33:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205104
IP address blocks: 2a14:c380:2000::/48 maxlen: 48
2a14:c380:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:ab:dc:f7:c3:37:85:54:7b:ee:cb:c1:14:9b:a7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Nov 11 17:33:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6e05672c0ef23910c16615f61b62f9020fc458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:ac:dd:59:c5:c4:8c:49:77:9d:13:97:ac:
62:98:bb:34:9b:09:17:18:12:95:7f:ad:3b:0e:56:
af:5e:a2:2e:6f:86:3e:45:e4:7e:01:d6:f3:dd:f5:
f7:14:66:f3:01:2b:df:fa:bb:d8:7a:9f:2d:c3:82:
36:2a:19:1b:ff:58:03:5d:53:de:2d:b3:c5:ef:61:
00:08:98:35:9e:16:8f:9b:56:7f:48:94:1b:c0:2f:
90:94:f9:f1:24:7f:22:7c:5c:ba:a4:56:92:23:b2:
7e:38:53:97:f4:cc:54:2d:be:fc:3f:ad:14:93:8a:
ac:35:32:73:49:22:ae:e9:63:a5:b0:3c:38:c2:12:
14:13:7a:75:f2:c3:34:0f:6d:36:d4:b0:27:fb:05:
50:62:74:1f:ca:80:76:66:0a:bb:3b:8d:df:9d:2f:
18:c1:01:d7:40:e1:8f:e5:a9:68:c3:0e:18:39:20:
8f:37:1d:c6:a6:00:7c:0d:a5:13:f0:54:41:44:d6:
0c:13:98:2c:3f:a5:ad:80:85:62:4b:95:94:7a:92:
d6:d5:0f:1e:d2:82:a3:64:12:62:f5:89:29:b9:de:
23:0a:17:7f:88:bd:09:52:0d:6e:19:00:a0:b9:75:
91:e9:c7:1a:04:36:70:6b:ab:c0:15:0a:09:d7:f8:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E0:56:72:C0:EF:23:91:0C:16:61:5F:61:B6:2F:90:20:FC:45:8A
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/puBWcsDvI5EMFmFfYbYvkCD8RYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:2000::/47
Signature Algorithm: sha256WithRSAEncryption
64:4a:00:b4:e4:b4:35:2c:6a:13:31:14:cc:37:b4:ff:fb:d5:
da:bb:99:86:6e:23:f1:fd:d0:82:2c:38:16:03:90:07:4d:fa:
4c:cf:6d:6b:73:12:34:77:1d:e0:71:cf:80:8e:ba:05:ca:e6:
7b:8c:09:8f:05:38:66:9b:80:bb:a1:35:5a:c2:e9:0b:66:b5:
79:35:b1:de:65:50:0b:80:e8:20:62:96:e5:24:24:6e:6f:64:
21:b8:33:3b:f8:5e:99:ec:37:f0:d1:f7:61:b2:2b:db:8c:6c:
47:93:da:d9:6c:3f:da:be:6f:05:b1:bc:0e:af:a6:c3:9c:13:
4c:1e:5a:47:28:1c:95:0f:1b:af:40:bc:3f:c1:69:71:e1:0f:
b7:0c:d7:57:07:5e:40:ae:ac:7b:c4:42:c0:5b:1c:bd:32:4b:
6d:12:ae:dd:a3:ea:f9:9a:ff:7e:91:df:ed:c7:40:05:a7:06:
fa:c8:0e:2d:fa:96:bd:38:42:69:20:77:cd:5b:2a:7e:0f:0c:
dd:b5:b7:53:d2:71:f9:f5:75:3f:01:21:ae:65:7a:e4:44:d8:
a1:53:e3:13:90:88:f4:f3:a9:25:02:9d:24:fe:af:47:3d:75:
4e:02:55:a1:4e:25:33:30:b3:9b:6d:f2:fc:78:fc:73:71:2a:
20:dd:94:73
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaHLq9z3wzeFVHvuy8EUm6fHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYxMTExMTczMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmUwNTY3MmMwZWYyMzkxMGMxNjYxNWY2MWI2MmY5MDIwZmM0NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg2s3VnFxIxJd50Tl6ximLs0mwkX
GBKVf607DlavXqIub4Y+ReR+Adbz3fX3FGbzASvf+rvYep8tw4I2Khkb/1gDXVPe
LbPF72EACJg1nhaPm1Z/SJQbwC+QlPnxJH8ifFy6pFaSI7J+OFOX9MxULb78P60U
k4qsNTJzSSKu6WOlsDw4whIUE3p18sM0D2021LAn+wVQYnQfyoB2Zgq7O43fnS8Y
wQHXQOGP5aloww4YOSCPNx3GpgB8DaUT8FRBRNYME5gsP6WtgIViS5WUepLW1Q8e
0oKjZBJi9Ykpud4jChd/iL0JUg1uGQCguXWR6ccaBDZwa6vAFQoJ1/jNXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKbgVnLA7yORDBZhX2G2L5Ag/EWKMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvcHVCV2NzRHZJNUVNRm1GZlliWXZrQ0Q4UllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhTDgCAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBkSgC05LQ1LGoTMRTMN7T/+9Xau5mGbiPx/dCC
LDgWA5AHTfpMz21rcxI0dx3gcc+AjroFyuZ7jAmPBThmm4C7oTVawukLZrV5NbHe
ZVALgOggYpblJCRub2QhuDM7+F6Z7Dfw0fdhsivbjGxHk9rZbD/avm8FsbwOr6bD
nBNMHlpHKByVDxuvQLw/wWlx4Q+3DNdXB15Arqx7xELAWxy9MkttEq7do+r5mv9+
kd/tx0AFpwb6yA4t+pa9OEJpIHfNWyp+DwzdtbdT0nH59XU/ASGuZXrkRNihU+MT
kIj086klAp0k/q9HPXVOAlWhTiUzMLObbfL8ePxzcSog3ZRz
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:04:57 2026 by rpki-client