Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/WlhMchBpnT-b11_eX-zMEkQyhtw.roa
File: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (raw, json)
Hash identifier: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=
Subject key identifier: 5A:58:4C:72:10:69:9D:3F:9B:D7:5F:DE:5F:EC:CC:12:44:32:86:DC
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019E6A6509A1FCDF353D2D96F0B80B8FE072
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/WlhMchBpnT-b11_eX-zMEkQyhtw.roa
Signing time: Wed 27 May 2026 17:04:26 +0000
ROA not before: Wed 27 May 2026 17:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197683
IP address blocks: 150.40.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:65:09:a1:fc:df:35:3d:2d:96:f0:b8:0b:8f:e0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: May 27 17:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a584c7210699d3f9bd75fde5feccc12443286dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:b7:19:4c:f8:6c:dd:e0:ad:f2:cc:48:6d:
9d:59:73:46:12:28:7a:a4:fc:9a:5b:55:e7:27:f1:
0b:61:b7:2f:73:1b:7b:f0:8c:55:17:da:de:44:4e:
37:f1:3d:38:e8:31:b8:73:b6:c7:47:bb:0b:3b:8f:
eb:a1:8a:de:70:a8:9c:92:ae:fb:2f:e9:f0:81:b9:
d1:8f:0f:9b:a3:57:90:8b:46:b5:cc:6c:15:4a:a5:
ef:f5:ce:34:a9:28:af:0f:53:f7:57:fb:5e:4c:2a:
b9:1f:76:58:9d:af:89:3d:76:fb:f0:54:1b:c5:e0:
50:37:17:1b:15:9d:57:66:74:fb:d3:35:f0:89:f9:
00:e2:08:ab:a5:33:dc:6b:49:62:34:e3:46:1a:7d:
f5:e3:ca:b6:d9:72:fe:93:8f:fc:8b:d4:42:f1:4f:
8a:25:20:11:08:64:4a:f4:e6:c3:2d:6e:4e:e4:e0:
4f:2b:d9:2b:70:76:9f:c9:9a:b3:87:83:c9:31:99:
88:aa:52:6c:1f:27:90:2b:fd:6a:88:27:fb:39:9c:
32:03:e0:65:c6:45:93:c8:c3:e1:4f:af:10:52:47:
6a:33:83:aa:fb:c3:a3:77:a7:3f:65:5a:ea:55:cb:
eb:18:95:80:61:15:ef:2e:c4:15:9b:fe:b6:bb:2e:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:58:4C:72:10:69:9D:3F:9B:D7:5F:DE:5F:EC:CC:12:44:32:86:DC
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/WlhMchBpnT-b11_eX-zMEkQyhtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.122.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c6:2b:30:68:2b:86:22:9e:ed:4f:a8:e9:47:b4:49:09:76:
86:39:34:54:3c:ae:1e:23:9c:f5:74:43:32:f3:98:31:f2:c3:
5e:48:18:f6:5a:2b:8a:42:89:50:20:ac:e6:ff:b4:3d:86:86:
63:97:72:e8:90:2e:5b:36:5c:1f:d6:57:77:35:c9:81:80:11:
ee:fe:f1:4f:71:c0:6f:98:c2:9f:d5:44:e9:e1:eb:ce:03:31:
39:ff:64:4b:5f:52:41:7f:56:07:75:d1:ce:7a:28:8d:1c:93:
f1:b7:41:ca:93:f1:af:88:6e:da:87:31:cc:35:8c:85:b7:ee:
2a:17:f5:e4:7b:33:db:79:9a:de:52:b2:cb:46:d0:4b:1e:ee:
6c:6f:a0:4b:f4:82:08:63:ec:6b:53:62:a1:ac:27:5b:f7:4c:
77:64:dc:db:de:d8:29:dc:47:e7:d5:9a:5e:a0:fd:8b:0a:35:
34:b8:3b:ed:39:57:9a:6d:e8:10:80:2b:f1:7f:f7:e1:46:c6:
77:46:b1:47:31:dd:84:bd:0a:06:87:14:3b:3d:b7:23:26:b9:
92:2a:77:02:03:d8:52:31:82:0c:48:41:ad:6b:c3:a9:b6:94:
98:e8:6b:75:cd:d8:27:ad:d9:9d:49:e1:e3:49:ec:cd:dd:4d:
0a:8a:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:52:20 2026 by rpki-client