Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/tFt_ghC1GPZs93DSEkZECw6cPaA.roa
File: tFt_ghC1GPZs93DSEkZECw6cPaA.roa (raw, json)
Hash identifier: M7BtusxQm9gKwb0GtbZCBv1dFwRkaY/141YdUqT346I=
Subject key identifier: B4:5B:7F:82:10:B5:18:F6:6C:F7:70:D2:12:46:44:0B:0E:9C:3D:A0
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EDC4DD83D957F35B77411C81E8AB77D85
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/tFt_ghC1GPZs93DSEkZECw6cPaA.roa
Signing time: Thu 18 Jun 2026 19:55:49 +0000
ROA not before: Thu 18 Jun 2026 19:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 2a14:c380:31::/48 maxlen: 48
2a14:c380:32::/48 maxlen: 48
2a14:c380:33::/48 maxlen: 48
2a14:c380:3000::/40 maxlen: 40
2a14:c380:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:4d:d8:3d:95:7f:35:b7:74:11:c8:1e:8a:b7:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 18 19:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b45b7f8210b518f66cf770d21246440b0e9c3da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:d9:fa:aa:db:ab:ca:90:14:fe:33:89:46:
61:6a:2c:1e:4f:c2:04:26:0c:67:bb:a6:b8:44:0f:
e2:58:c8:03:43:15:93:ee:18:ca:bb:b7:70:fb:fc:
2d:38:2a:c4:78:9f:9f:07:91:b0:27:92:67:6a:c0:
06:ae:eb:92:a7:1f:9a:08:fb:60:25:38:12:b6:0c:
be:62:9f:fe:84:7b:18:48:ab:08:41:5c:0b:94:85:
1e:87:35:89:47:4b:cd:04:d1:69:75:15:83:f8:ef:
71:bb:21:51:6d:de:4c:c0:48:6b:5b:a6:95:86:f6:
ae:ae:d0:a7:a0:81:3f:7e:9e:c5:0e:fa:a7:50:a6:
6b:e9:16:77:c5:6c:f7:00:b8:82:cb:71:b9:34:14:
af:c4:a9:56:d7:21:30:a3:99:28:f7:bd:39:10:53:
d2:37:a9:c7:50:c7:43:97:0f:fe:29:ad:34:6b:bb:
19:06:a8:39:0a:47:ff:5e:3e:14:b5:11:d9:d3:22:
69:fe:ab:cb:b7:60:3a:e3:87:7c:b9:c2:dc:6a:4d:
07:5d:aa:d3:50:d5:f4:86:95:2b:c7:b6:f1:f6:96:
31:07:37:29:72:8c:54:0e:56:cc:c4:a3:69:8c:a4:
72:53:3a:8b:de:85:39:49:2d:a5:78:04:24:ee:39:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:7F:82:10:B5:18:F6:6C:F7:70:D2:12:46:44:0B:0E:9C:3D:A0
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/tFt_ghC1GPZs93DSEkZECw6cPaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:31::-2a14:c380:33:ffff:ffff:ffff:ffff:ffff
2a14:c380:3000::/40
2a14:c380:4000::/40
Signature Algorithm: sha256WithRSAEncryption
94:7e:f0:ed:01:5f:69:94:52:43:42:23:4a:41:27:3f:fe:d3:
75:3d:f7:af:9e:92:13:9d:26:32:09:97:01:30:71:46:17:1d:
ec:8a:55:23:96:29:aa:e8:d7:54:fc:02:62:5c:e4:a2:2b:c8:
70:e2:8c:4b:0b:38:6d:6e:d6:d9:c3:c0:e6:80:26:77:80:da:
74:4c:73:19:e1:8d:b3:e8:4c:c9:94:cf:bc:0b:90:cc:aa:2a:
a8:e9:a9:8b:77:7a:2e:77:17:88:9b:54:57:f6:23:df:ae:72:
42:3c:cb:65:b0:41:1a:1f:b1:3c:06:29:d5:5b:89:2c:a7:59:
a4:53:06:05:69:8a:88:90:b6:2b:ec:13:03:5b:61:ef:6e:58:
46:d9:b5:91:43:71:01:46:57:d9:73:92:b6:e7:d3:08:4f:a9:
f8:ba:b0:22:b1:1e:94:8c:50:8d:b5:00:20:32:df:b8:f3:8a:
a9:ad:69:4d:05:b2:21:d8:fe:86:36:54:1e:fd:25:d7:44:6b:
21:7e:31:7a:17:37:8b:a4:9a:8b:98:f3:1c:3f:4a:30:bf:dd:
fe:4d:20:6c:0e:01:26:0a:8a:ee:17:d0:70:c0:62:b1:37:21:
5f:23:22:0d:6d:fd:21:8f:ad:62:83:57:0c:54:65:eb:19:8d:
f7:41:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 06:26:28 2026 by rpki-client