Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wxlYctZvX4QOXi5lbwNY--wlp4I.roa
File: wxlYctZvX4QOXi5lbwNY--wlp4I.roa (raw, json)
Hash identifier: +oRo5rEHFhlE/qTZ+gRij39heJpaeFdmoaEB4dUhwaU=
Subject key identifier: C3:19:58:72:D6:6F:5F:84:0E:5E:2E:65:6F:03:58:FB:EC:25:A7:82
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019D3950CC47B59797395A86C519858D983C
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wxlYctZvX4QOXi5lbwNY--wlp4I.roa
Signing time: Sun 29 Mar 2026 11:18:09 +0000
ROA not before: Sun 29 Mar 2026 11:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a0b:8440::/29 maxlen: 32
2a0b:a4c0::/29 maxlen: 32
2a0f:89c0::/29 maxlen: 32
2a13:cdc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:50:cc:47:b5:97:97:39:5a:86:c5:19:85:8d:98:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 29 11:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3195872d66f5f840e5e2e656f0358fbec25a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:99:5d:2d:9f:b8:ad:cd:68:dc:55:ec:6a:
c9:98:ff:e9:04:f6:ab:6e:fe:9d:00:e0:37:56:38:
2d:6e:71:cc:23:a1:9c:56:ab:49:f0:0d:20:3a:a9:
b3:e4:90:9b:65:9a:41:0d:2a:32:01:be:74:1d:c9:
fe:ee:71:35:9b:59:8a:13:96:6a:d6:bf:36:f0:ff:
d8:81:00:1e:3a:87:49:f8:f9:6c:6c:fd:83:ae:81:
25:19:1c:ad:5f:35:74:66:2b:7b:78:5c:0f:1b:9d:
90:e3:80:23:17:ed:0e:41:c9:06:31:d9:6f:63:20:
c3:4e:90:3d:bf:35:0d:87:b5:52:45:2b:76:50:16:
b4:5f:6a:f7:2a:34:09:23:47:fb:68:5f:f8:86:bc:
d5:9c:c7:e5:1c:36:7a:7e:4e:15:73:b8:9e:78:51:
a0:4d:4f:8e:b7:b3:67:80:24:b4:18:f3:e9:3d:ba:
29:1f:9b:93:b6:21:7a:f6:e5:ec:90:3f:af:a7:46:
72:06:47:20:f9:0d:8f:55:8a:26:44:63:82:8a:65:
28:54:73:c3:fb:ef:5d:47:16:b6:df:72:d3:03:28:
69:63:e7:0c:a3:4e:e3:21:05:0c:a9:3e:fc:29:0b:
d2:25:28:bd:68:c0:83:92:d2:d7:32:3e:88:0f:23:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:58:72:D6:6F:5F:84:0E:5E:2E:65:6F:03:58:FB:EC:25:A7:82
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wxlYctZvX4QOXi5lbwNY--wlp4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8440::/29
2a0b:a4c0::/29
2a0f:89c0::/29
2a13:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
41:75:fc:85:fa:52:fd:60:99:13:23:7f:37:03:5c:a7:7e:62:
d6:3e:c1:55:27:b7:fd:4f:3a:77:72:c6:b2:15:dc:5f:8e:37:
b7:57:f7:0d:af:47:3b:9a:60:9c:20:38:78:7c:d7:a7:e9:4a:
52:a1:ae:24:38:d9:79:2e:c5:3b:a7:31:43:8c:5b:9e:ee:c6:
89:38:d8:fb:d5:0d:ce:e8:44:ef:27:76:56:73:98:d6:5c:ae:
34:d8:88:88:e5:45:21:30:7f:a9:f0:67:7d:d8:d3:c3:4e:b3:
b7:1e:6b:0e:45:f3:3a:a3:df:29:c9:f5:e0:48:67:01:0b:51:
5e:85:1d:a6:ef:dd:fc:96:cb:c2:4f:c5:aa:24:54:8c:9d:76:
ef:60:e0:b7:cd:70:f5:6d:96:bc:7e:58:56:6a:ec:a0:11:fa:
e3:96:2f:c1:44:3e:57:72:10:f3:d9:e3:90:58:2d:c3:cc:de:
ce:f8:c3:e6:99:d7:23:7e:48:13:5d:a9:74:21:59:c6:08:fd:
67:a8:21:98:68:77:b7:26:56:56:65:16:ed:2c:81:06:2e:f7:
63:9d:3d:07:b3:13:c3:87:0b:21:20:89:4e:20:9f:fa:52:7b:
f2:ef:6d:8a:78:66:a2:91:0d:78:90:0d:18:55:8d:1f:64:72:
f5:1b:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:09 2026 by rpki-client