Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/txCmPH7aKUxLuhFBr7QZxZ0WC9A.roa
File: txCmPH7aKUxLuhFBr7QZxZ0WC9A.roa (raw, json)
Hash identifier: soqLaDHpuDUcxBz8kZcaA+M+LT0rhUMCQe5JbyQQt0w=
Subject key identifier: B7:10:A6:3C:7E:DA:29:4C:4B:BA:11:41:AF:B4:19:C5:9D:16:0B:D0
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019E64137476F37C37ABD05B1DC98A6D8A2C
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/txCmPH7aKUxLuhFBr7QZxZ0WC9A.roa
Signing time: Tue 26 May 2026 11:37:36 +0000
ROA not before: Tue 26 May 2026 11:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200912
IP address blocks: 2a14:c380:26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:13:74:76:f3:7c:37:ab:d0:5b:1d:c9:8a:6d:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: May 26 11:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b710a63c7eda294c4bba1141afb419c59d160bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:b5:fb:ce:c9:a6:ff:9d:0d:4c:f2:04:1e:
be:5b:6e:84:d6:aa:44:2a:5c:24:a8:22:1c:e7:11:
7e:68:b7:9f:35:b3:79:6b:95:ab:10:19:87:b9:f7:
af:41:d8:30:4e:1e:8e:b7:91:f4:16:b2:31:be:bd:
9a:bf:24:06:a0:1b:9d:b7:0b:45:7a:4c:c4:0e:c7:
34:7e:a3:78:67:c7:48:13:75:b0:e9:1f:db:38:d2:
e1:e7:55:0a:ae:24:75:35:0f:4c:d9:03:aa:81:71:
e3:70:8c:b6:32:ef:4e:c5:70:2e:ec:69:ff:e0:9b:
6d:68:9f:fe:ec:26:79:9c:d2:ee:4d:2c:e8:c3:f1:
cc:40:ed:1d:db:a5:46:78:41:b9:19:50:13:c9:a6:
4d:94:bf:4b:39:6d:a1:aa:9c:61:29:f7:54:91:21:
d5:14:eb:ea:97:b4:cd:c8:5b:88:9f:46:2d:36:fa:
f5:4f:f3:33:7c:7d:a5:43:ee:14:09:e2:93:70:c8:
41:5f:b8:89:52:e8:ed:a0:c1:1a:e3:f2:f6:2c:b8:
0d:a6:aa:c5:2d:91:21:2f:7c:c7:f0:81:55:a7:e1:
3e:a3:49:19:ce:3d:54:75:f7:3b:c3:b1:a0:c3:84:
99:14:f0:99:2d:17:ec:19:d9:0b:48:45:9b:b5:16:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:A6:3C:7E:DA:29:4C:4B:BA:11:41:AF:B4:19:C5:9D:16:0B:D0
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/txCmPH7aKUxLuhFBr7QZxZ0WC9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:26::/48
Signature Algorithm: sha256WithRSAEncryption
4d:c9:02:58:00:eb:50:5f:eb:d5:4b:04:5a:51:93:e8:47:7a:
e8:b3:56:3f:64:6a:4b:72:3a:6a:37:08:8d:1e:9c:e6:06:5c:
55:82:4e:40:9d:86:b9:77:ba:68:cc:59:f7:85:6f:fa:3c:48:
07:73:db:44:fa:d7:84:ce:60:45:81:f9:e1:7f:dc:a4:05:95:
2d:63:04:71:7b:fd:3f:c3:ae:5f:d6:03:5f:b2:9a:86:8f:b5:
b3:55:3c:05:e3:aa:cd:af:2a:da:9d:96:07:73:00:f0:9c:06:
88:1d:07:88:21:c0:04:23:0e:3a:c7:32:ca:e7:37:1e:b1:62:
28:41:9e:13:29:f1:b5:fe:25:8a:f2:1c:73:d3:fd:27:dc:12:
38:34:46:e5:32:fa:f6:7f:09:e6:6d:94:c4:ef:40:f8:ca:b9:
5b:e3:20:c0:43:3d:bb:d5:3c:92:df:4f:55:8d:82:ca:c2:eb:
d9:20:42:75:82:c6:90:d7:55:b1:3c:24:8c:ba:79:53:aa:22:
f7:6c:52:89:5f:d9:b4:21:5f:02:30:7c:95:2e:42:35:b1:91:
b4:ca:43:b8:17:5f:10:5b:83:a0:f4:4b:29:44:84:b5:1a:55:
67:f4:61:81:fb:71:9c:cb:2e:7c:da:08:cb:e2:7d:03:63:e4:
66:f8:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:02:18 2026 by rpki-client