Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/wlbCQCbrUI3SxwZA5HNQA0HGepg.roa
File: wlbCQCbrUI3SxwZA5HNQA0HGepg.roa (raw, json)
Hash identifier: zmsKMPohzvqVP0YR0GOcciBU4GmXvtoj3886J28B8bg=
Subject key identifier: C2:56:C2:40:26:EB:50:8D:D2:C7:06:40:E4:73:50:03:41:C6:7A:98
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019E3A4E177970C1E151E58A7F4C18D77FAE
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/wlbCQCbrUI3SxwZA5HNQA0HGepg.roa
Signing time: Mon 18 May 2026 08:57:36 +0000
ROA not before: Mon 18 May 2026 08:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44606
IP address blocks: 2.56.80.0/24 maxlen: 24
2.56.81.0/24 maxlen: 24
2.56.82.0/24 maxlen: 24
2.56.83.0/24 maxlen: 24
45.156.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:4e:17:79:70:c1:e1:51:e5:8a:7f:4c:18:d7:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: May 18 08:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c256c24026eb508dd2c70640e473500341c67a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:a9:0a:72:37:83:70:3c:52:dd:ae:10:d3:
94:b0:e6:c4:a5:4d:3f:de:55:89:27:8c:8b:55:36:
de:1c:2d:34:d7:28:ab:4d:96:04:e1:6a:7a:2a:60:
26:1b:47:f5:0a:85:10:35:d8:0d:dc:37:d3:ad:c7:
25:a6:df:6a:21:83:01:25:b7:7f:f7:b7:a7:12:67:
a0:77:2b:c9:8d:d0:c8:e7:dd:a8:ed:fd:df:77:c1:
e8:d6:e5:a7:c9:1e:8b:ed:38:09:79:fc:d2:34:a6:
cc:7f:1e:fe:6d:9c:21:5a:0d:ff:5e:e0:92:19:68:
5c:e1:6f:d3:50:bb:e3:d6:22:85:d2:59:ff:ce:cb:
35:53:03:4e:81:13:98:a4:02:0a:5f:78:e7:27:ba:
ee:90:61:f0:26:d8:25:83:f1:2b:29:0c:58:db:0b:
e1:13:23:07:91:cb:fc:fb:48:ff:72:dd:5f:d8:f3:
27:74:7c:73:e2:63:84:29:a5:58:64:c7:75:71:6d:
4e:5f:9f:93:6b:3c:0a:7f:bd:4e:71:6b:fd:29:c4:
77:97:76:ec:a9:24:c5:fe:80:e4:51:3b:44:12:34:
dc:34:10:ab:d9:43:60:26:21:58:96:4d:95:3f:d6:
a7:b5:11:83:77:e7:e0:f7:cd:f5:e9:16:21:17:26:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:56:C2:40:26:EB:50:8D:D2:C7:06:40:E4:73:50:03:41:C6:7A:98
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/wlbCQCbrUI3SxwZA5HNQA0HGepg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.80.0/22
45.156.244.0/24
Signature Algorithm: sha256WithRSAEncryption
32:24:43:86:c6:73:61:eb:bd:0a:cf:dd:a8:7a:a3:f8:dd:51:
b8:37:c5:4f:a7:e9:52:0d:5e:02:62:2b:37:75:29:0b:cc:ce:
0b:68:0b:bd:d5:24:b0:05:50:f7:3c:2e:8e:e4:ef:3e:5f:e4:
95:c7:86:6e:24:b0:28:cb:6e:40:1c:fc:f0:cb:51:63:a1:8f:
90:a0:1e:89:74:b6:b4:69:7b:92:1f:f2:32:3b:d8:6b:13:48:
1c:78:e1:fc:3d:10:dc:7d:92:39:fa:ab:af:75:cf:57:2b:3e:
66:2a:4a:eb:ba:ee:c9:26:9e:89:2f:53:26:15:a7:80:d6:2d:
36:1a:8f:1a:30:58:d2:b4:16:88:4e:fc:80:7b:b5:7b:cb:49:
2e:c4:a0:c0:12:d0:d6:e0:99:45:61:7c:e8:4f:b6:a1:19:f2:
5b:4b:64:24:ce:17:e5:a3:f6:79:82:f1:e4:f7:9c:b6:75:3c:
dc:0d:87:89:0e:47:57:a0:e1:8b:fd:c5:65:89:50:3f:fb:72:
cb:16:27:58:36:b7:13:67:72:5e:97:c6:0a:07:9b:35:54:ef:
23:d3:66:ff:56:7a:08:ef:48:80:6d:62:e6:bc:6e:a4:ca:90:
b6:d3:ef:0e:e4:c8:35:be:2b:12:37:c0:40:4c:66:2c:c5:b2:
85:9b:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:56:22 2026 by rpki-client