Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa
File:                     Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa (raw, json)
Hash identifier:          wf6Ot6Ex/s7myo+jesSKrN1q9D7ZqoW374UIQ9ocJss=
Subject key identifier:   5A:57:6B:F9:E3:72:83:81:68:FF:29:4B:A1:BF:87:A7:B7:DC:C3:CF
Certificate issuer:       /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial:       019C719FA15A62A05A4F1CB50A2BB1FED3A5
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa
Signing time:             Wed 18 Feb 2026 16:40:12 +0000
ROA not before:           Wed 18 Feb 2026 16:40:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212116
IP address blocks:        185.225.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:71:9f:a1:5a:62:a0:5a:4f:1c:b5:0a:2b:b1:fe:d3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
        Validity
            Not Before: Feb 18 16:40:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a576bf9e372838168ff294ba1bf87a7b7dcc3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:03:e9:79:27:67:8c:7d:51:bc:f5:13:45:69:
                    5c:da:80:5b:f9:54:4a:7e:84:a8:83:a0:cb:10:02:
                    97:a4:80:2a:93:7c:60:dc:16:68:be:5c:c9:e6:75:
                    55:a2:48:b7:73:b9:46:d5:01:54:06:0e:99:5d:e5:
                    13:02:a6:81:2d:9f:9b:88:fa:00:4b:83:ab:95:79:
                    1b:dc:94:16:6a:cb:0a:ed:b7:a6:df:78:d5:aa:19:
                    e8:ef:9c:e8:d1:0c:bf:57:68:81:08:83:62:08:dd:
                    0c:ae:a2:13:3e:c9:b4:aa:39:73:65:47:0c:02:77:
                    29:f4:0d:3b:9c:49:5e:e5:72:5c:78:c9:1a:93:19:
                    c2:87:e4:10:bf:34:c5:de:81:49:85:4b:98:80:42:
                    27:b5:f5:82:6a:05:19:77:fb:ce:7d:20:49:a6:8e:
                    6e:bf:05:d6:ae:3d:20:5e:cc:fd:bc:d8:03:ae:1d:
                    fb:16:bc:d3:aa:a2:b4:9f:c8:0f:12:e7:9a:8b:22:
                    12:25:25:ee:34:b4:b7:bf:18:f3:11:7b:6b:fa:78:
                    68:af:b8:39:e3:af:66:19:40:e4:08:db:a0:5f:c9:
                    a5:48:36:a5:11:04:97:87:ef:a1:d0:ce:8e:75:35:
                    97:42:03:ab:c1:65:ea:e7:e6:54:54:39:a4:b1:6a:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:57:6B:F9:E3:72:83:81:68:FF:29:4B:A1:BF:87:A7:B7:DC:C3:CF
            X509v3 Authority Key Identifier:
                keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:6e:11:11:f1:06:ed:c2:0d:af:4e:8f:e1:c5:00:14:25:66:
         ab:f0:9a:c2:18:46:ad:aa:f5:b2:76:51:7d:64:a3:cc:c5:e7:
         3b:00:63:e6:e4:83:b6:30:04:57:dc:21:56:93:14:4f:39:35:
         9f:74:c6:c0:00:9f:b1:0c:b7:ae:26:84:05:c8:63:7a:9f:cc:
         85:08:a6:c7:fc:f1:ba:4a:94:6a:dc:d3:03:b1:e9:cb:3d:30:
         2b:ea:ee:da:c6:09:13:77:85:43:15:09:fb:70:44:3a:6f:d0:
         97:a6:29:2f:48:8d:b9:81:45:e5:50:6f:57:c2:d8:c3:e7:7d:
         d6:67:1a:81:54:a2:69:7a:2a:14:19:52:cc:c0:6b:98:45:a6:
         0e:4e:fa:46:05:90:cb:47:7c:02:eb:62:3c:ce:a1:4a:49:de:
         46:64:1c:11:c1:e5:9c:84:cd:a5:5d:2c:b4:59:81:e6:cc:76:
         e3:61:2e:46:9d:38:aa:b9:69:c7:fe:2e:79:80:99:97:a7:24:
         b6:21:9d:0f:d4:e8:cf:69:3b:6c:41:d9:40:20:81:fc:fe:cf:
         36:8f:00:4d:79:a4:af:67:cc:f3:50:42:cb:7d:95:bc:17:05:
         25:fc:a2:02:89:c5:e6:3b:ea:01:46:c6:b0:c6:42:54:9a:40:
         e1:73:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:25:12 2026 by rpki-client