Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WLvsTWcCB9DKjQM6OEPOcYcfFCQ.roa
File: WLvsTWcCB9DKjQM6OEPOcYcfFCQ.roa (raw, json)
Hash identifier: /7yrXDNuuWgV+fG8FJR/Bw+Dsel2mOaobJnsDlOzNwA=
Subject key identifier: 58:BB:EC:4D:67:02:07:D0:CA:8D:03:3A:38:43:CE:71:87:1F:14:24
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019D66E8312903692E5912E147499C6E40F4
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WLvsTWcCB9DKjQM6OEPOcYcfFCQ.roa
Signing time: Tue 07 Apr 2026 07:46:25 +0000
ROA not before: Tue 07 Apr 2026 07:46:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203600
IP address blocks: 5.154.114.0/24 maxlen: 24
37.230.86.0/24 maxlen: 24
84.236.191.0/24 maxlen: 24
84.236.200.0/22 maxlen: 24
84.236.200.0/23 maxlen: 23
84.236.202.0/24 maxlen: 24
84.236.203.0/24 maxlen: 24
178.156.24.0/24 maxlen: 24
178.156.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:e8:31:29:03:69:2e:59:12:e1:47:49:9c:6e:40:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Apr 7 07:46:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58bbec4d670207d0ca8d033a3843ce71871f1424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:84:cc:78:bc:9f:f7:0d:74:23:96:44:ba:
1e:9c:a5:f0:2b:d0:41:5a:be:fc:ad:39:8f:67:7a:
92:3b:73:d3:2b:be:db:c9:a8:f6:87:09:f8:c0:d9:
f9:ff:ff:1b:16:0f:e4:f2:69:87:de:a5:63:e2:33:
a6:9c:4d:90:4e:84:f3:62:2b:4b:cb:6b:66:c7:d3:
a7:c5:fd:d1:69:78:9f:7c:48:79:3a:f3:da:08:df:
dc:03:97:5d:38:1b:99:de:83:cd:68:8a:c5:cb:5b:
5e:6d:21:3c:da:1d:b9:78:44:ba:b3:f6:9b:81:37:
af:04:d0:96:42:86:58:e0:7b:70:33:c0:4d:14:85:
1f:c7:f5:c6:f3:a6:b4:66:e8:ca:6d:70:41:be:86:
d6:a6:29:77:d8:d5:50:f7:95:55:71:46:6f:98:86:
80:92:b3:01:19:04:02:b0:0f:11:ec:c7:77:9d:f5:
0e:a3:7d:c7:ae:e7:9e:12:f3:0b:65:4c:11:f5:4c:
75:ab:f3:f4:c2:d3:02:2c:0c:d6:af:4b:46:d5:95:
8a:f5:f1:fd:cc:f1:04:0a:3c:e2:57:46:b9:f0:d9:
aa:de:5b:db:61:c3:c3:a4:35:7f:35:eb:bf:75:31:
fe:fb:6c:65:05:fa:f6:a3:90:97:2d:4f:fc:19:e3:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:EC:4D:67:02:07:D0:CA:8D:03:3A:38:43:CE:71:87:1F:14:24
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WLvsTWcCB9DKjQM6OEPOcYcfFCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.114.0/24
37.230.86.0/24
84.236.191.0/24
84.236.200.0/22
178.156.24.0/24
178.156.106.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a5:79:00:f3:7b:d7:43:4a:b8:1b:04:f1:8b:bf:d2:cd:a5:
63:98:e4:e6:88:46:c8:84:61:27:6e:33:62:1c:8a:8b:f7:0f:
1e:30:98:01:36:4d:65:8f:f6:3b:5f:08:6e:7c:a5:4b:57:ff:
47:3e:d4:d8:d3:5a:b1:7a:2f:07:84:f8:75:b0:89:45:dd:f6:
be:fb:a3:42:99:12:de:fe:f0:41:9c:9b:d5:11:e4:b0:95:ff:
11:0c:b3:ee:e0:c4:2d:7c:0f:37:ed:e0:26:4b:38:83:d5:77:
f3:ec:0f:19:37:bd:11:05:e2:50:72:45:8f:ec:8b:a6:50:a3:
7e:49:d7:22:d6:ac:1d:10:e9:7c:f3:89:58:2c:af:06:47:65:
29:e2:65:19:84:0d:1c:10:22:23:73:7a:27:fe:62:a8:79:73:
ec:0b:38:61:9a:48:dd:5b:10:fb:ad:ea:20:43:8b:59:4c:b9:
c3:77:64:6b:3e:da:c7:b2:af:b9:13:a1:1c:58:44:e4:af:37:
b5:65:57:e1:5b:09:83:45:9c:01:e9:c2:f5:40:34:6e:8f:41:
94:b8:de:95:b9:c5:80:48:16:d7:95:ea:64:43:ab:ed:83:f1:
12:93:c2:55:57:90:79:22:1b:41:41:ce:39:72:92:88:6d:60:
8c:69:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:11 2026 by rpki-client