Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/w0_V9Mm56UIZ_u7kW2UaKMWX1JU.roa
File: w0_V9Mm56UIZ_u7kW2UaKMWX1JU.roa (raw, json)
Hash identifier: 8ozWWDKxLWYTK1jS+5aMi83uRdumfcUyC+IrKUhZ+Lk=
Subject key identifier: C3:4F:D5:F4:C9:B9:E9:42:19:FE:EE:E4:5B:65:1A:28:C5:97:D4:95
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019C7B8089B15580756FD6572DBF28CC5655
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/w0_V9Mm56UIZ_u7kW2UaKMWX1JU.roa
Signing time: Fri 20 Feb 2026 14:42:27 +0000
ROA not before: Fri 20 Feb 2026 14:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 2a14:c380:d40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:80:89:b1:55:80:75:6f:d6:57:2d:bf:28:cc:56:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Feb 20 14:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c34fd5f4c9b9e94219feeee45b651a28c597d495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:fc:d1:80:a7:b4:d9:b7:06:79:31:46:20:
af:41:f6:32:ce:d8:d2:8b:4f:88:4a:82:2e:ee:a8:
de:8e:21:89:b0:a6:a0:08:27:11:56:ea:1e:6b:e9:
01:9a:77:8d:b5:e5:b6:41:58:48:5f:dd:f8:5e:85:
2b:c3:cd:b4:d7:cc:1d:92:e5:ce:3a:40:b3:de:2d:
4e:f2:51:13:e5:c7:31:66:cc:74:64:ce:48:c0:d5:
21:6d:b5:35:24:33:2e:e5:b9:a6:1f:e2:eb:b9:61:
37:f5:fe:65:34:09:22:f3:4e:2f:c9:1a:4d:c0:bd:
bc:10:b8:32:ec:d8:00:71:61:45:6d:77:3b:56:c4:
7a:ad:ab:e7:6c:56:7d:79:51:dc:ba:3c:66:41:13:
60:b3:70:38:11:22:46:30:12:70:bc:8f:3f:85:35:
f5:1d:93:47:b8:0b:6f:43:fa:27:9a:88:42:d6:78:
20:80:be:8f:92:46:df:3d:bc:0f:bc:ae:22:ae:27:
39:c5:5f:3d:81:1f:c8:0f:8f:4c:fe:7c:37:35:d9:
58:5f:4e:21:7f:bb:ac:a1:02:32:3e:64:40:cb:48:
77:7c:19:8b:e4:c2:21:70:1b:a6:13:2d:6f:31:89:
4e:9d:fd:d0:b3:6d:92:d7:61:23:55:b5:b3:1f:c1:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4F:D5:F4:C9:B9:E9:42:19:FE:EE:E4:5B:65:1A:28:C5:97:D4:95
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/w0_V9Mm56UIZ_u7kW2UaKMWX1JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:d40::/44
Signature Algorithm: sha256WithRSAEncryption
8f:1c:8e:cb:32:32:36:d9:60:44:c1:56:c2:1e:cf:a0:8c:06:
0e:d6:12:cb:e5:f0:3f:c8:51:48:29:b1:17:de:d7:0a:5c:26:
76:7e:4a:a4:81:10:a6:61:a2:b0:58:7a:84:aa:33:55:02:cf:
0c:b5:72:3e:28:76:24:ba:de:46:50:ac:0f:ae:29:a5:8d:99:
c1:89:05:a6:ac:44:16:bb:aa:49:f5:c3:8a:9a:ad:73:3b:35:
61:48:0d:f1:cd:7c:23:9f:70:69:91:39:dd:ce:0d:36:44:43:
f6:6c:61:9f:aa:f2:8a:bb:74:78:6e:cb:00:94:a0:e2:78:85:
d3:a7:bf:67:92:b5:34:44:c8:4a:40:7a:f5:c6:bf:19:2a:e4:
ec:c3:ad:b4:e6:4b:21:ee:6d:66:f0:44:40:a5:a5:00:24:70:
ff:cf:49:d5:d2:6e:1e:db:87:f0:a0:6d:d1:75:dd:b5:d6:7f:
e1:bd:b9:a5:bb:d0:00:59:fd:20:81:b4:d2:0b:71:c8:af:09:
54:91:98:56:f4:99:70:ed:31:bd:75:50:41:10:6b:ba:b7:df:
8a:68:c8:ba:bd:d7:b6:13:5d:a4:ab:27:6a:d7:0e:c4:86:d2:
26:b4:2d:c0:33:3f:f7:53:bf:96:07:f1:b9:b8:1b:b0:7c:b4:
20:0c:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:16:09 2026 by rpki-client