Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/WNlY6EleMRRBrp6sZUEH7DxvZlc.roa
File: WNlY6EleMRRBrp6sZUEH7DxvZlc.roa (raw, json)
Hash identifier: dLCuSMcuIVzwoKSwK9PkR1g78fv8OGI64PcrszyfgyA=
Subject key identifier: 58:D9:58:E8:49:5E:31:14:41:AE:9E:AC:65:41:07:EC:3C:6F:66:57
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019D2B2EC342501BE7E7919578C5BD10BC0F
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/WNlY6EleMRRBrp6sZUEH7DxvZlc.roa
Signing time: Thu 26 Mar 2026 17:26:18 +0000
ROA not before: Thu 26 Mar 2026 17:26:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203963
IP address blocks: 94.154.41.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:2e:c3:42:50:1b:e7:e7:91:95:78:c5:bd:10:bc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 26 17:26:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58d958e8495e311441ae9eac654107ec3c6f6657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:1b:5d:c6:c6:3d:64:fb:36:39:57:62:11:
af:c4:a4:62:f0:0e:bc:de:50:50:e0:7c:c9:d0:c2:
02:d3:67:19:71:fc:ec:4c:ad:83:8c:dc:0a:a8:ad:
13:ca:9e:4a:03:a8:f3:f5:5d:37:07:5f:f6:9b:6a:
f1:46:f5:83:ef:b5:5a:e3:56:94:4c:71:9f:9b:5a:
ab:c4:10:6a:a7:33:16:7c:6b:c0:72:6b:29:4c:72:
f2:9b:4f:ee:17:65:57:5c:81:d8:7a:2e:e5:8c:6f:
50:a8:42:bf:a5:07:4f:98:41:cc:22:3d:43:5a:42:
3d:6c:27:ae:87:ff:a7:14:49:ad:21:21:71:1e:3f:
bd:58:24:15:13:84:a4:f3:84:73:74:36:54:2a:50:
12:17:d9:3f:16:42:88:40:13:0b:74:9a:b0:0c:6c:
ad:1b:28:5d:6c:f9:3e:cd:c0:06:63:93:58:45:3b:
9a:1c:ba:6a:4b:26:ea:28:9f:5c:cd:21:75:7f:3d:
1b:25:f1:54:81:10:20:a1:9e:49:fe:5b:28:63:a7:
4a:96:8c:65:3b:b9:13:cc:28:2f:76:3c:49:27:0b:
a4:08:b6:4d:ca:68:6f:05:d2:37:88:48:1c:4f:62:
f3:58:25:8b:79:98:4c:c8:9a:c2:80:7f:2e:0f:36:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D9:58:E8:49:5E:31:14:41:AE:9E:AC:65:41:07:EC:3C:6F:66:57
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/WNlY6EleMRRBrp6sZUEH7DxvZlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.41.0/24
94.154.44.0/24
Signature Algorithm: sha256WithRSAEncryption
51:51:57:a2:bd:94:0b:ee:1f:11:4f:0e:47:f7:89:a0:ee:05:
3b:23:97:43:c2:7c:4b:af:5f:b3:4d:41:27:a6:86:89:34:c4:
c0:72:4f:6b:77:94:d6:60:1f:d8:35:6e:44:59:ee:ba:32:a8:
db:57:03:d2:76:79:ac:ff:92:77:48:4e:1c:30:b2:2c:20:27:
75:9c:a4:5e:63:80:fe:64:bf:f7:48:93:02:c0:10:6e:62:0c:
b7:a6:6a:7a:86:73:01:97:8a:d2:46:6d:3d:cf:fe:57:40:2b:
42:d5:80:39:11:cd:84:8a:a3:a2:c8:d8:9c:0b:e7:d2:48:84:
3a:4c:76:d6:ec:33:9b:62:3e:1f:16:52:6e:ed:3d:4a:13:7f:
2f:14:08:40:14:3c:cb:3c:cf:a4:18:cf:86:99:65:48:02:92:
c1:7c:84:c5:c0:31:6f:54:2b:34:63:b8:5a:80:15:62:71:97:
16:3d:c1:a0:16:00:14:1f:a5:eb:08:7e:05:8e:ca:7f:79:9c:
cd:f8:f0:c3:1e:a7:80:21:d5:d9:f6:93:31:a3:6d:1c:9f:33:
7a:80:22:3e:42:a1:cf:f4:80:fc:f9:16:e9:ad:48:9e:c1:b5:
8b:1f:10:fa:7f:e7:42:74:64:e9:88:8b:7a:6b:77:9e:6d:b3:
9f:32:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:22 2026 by rpki-client