Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WLP0Fe665ETItVY13-3Wp_GhRXw.roa
File: WLP0Fe665ETItVY13-3Wp_GhRXw.roa (raw, json)
Hash identifier: qg+fCMWEK45vmVvyPaamS9qGvgIb9MCsq6M6U5bxCck=
Subject key identifier: 58:B3:F4:15:EE:BA:E4:44:C8:B5:56:35:DF:ED:D6:A7:F1:A1:45:7C
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823D3AC91293FC746E7FCF6C64EF09
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WLP0Fe665ETItVY13-3Wp_GhRXw.roa
Signing time: Tue 25 Aug 2026 15:20:31 +0000
ROA not before: Tue 25 Aug 2026 15:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 31.40.196.0/24 maxlen: 24
31.40.204.0/24 maxlen: 24
92.249.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3d:3a:c9:12:93:fc:74:6e:7f:cf:6c:64:ef:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58b3f415eebae444c8b55635dfedd6a7f1a1457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:1c:ba:2f:35:4d:0e:c6:cc:97:09:f5:7b:
2c:91:5a:74:79:cf:e6:31:63:56:3c:c4:82:6b:83:
89:0c:53:9e:0b:8f:48:24:51:b9:79:73:86:e8:78:
f7:5c:da:40:f6:20:42:97:f8:0f:91:4b:f3:dd:a2:
c3:e2:b8:d0:81:f8:69:87:cc:2d:dc:44:a4:8a:ff:
15:57:57:0b:6a:1c:de:f3:e9:c5:7f:44:43:84:3f:
de:c8:12:34:a0:83:a1:70:2e:6d:3b:dd:86:13:d0:
73:de:0c:fa:ad:4c:c1:f7:ea:7e:22:5c:8d:c6:26:
7f:d0:4d:25:c4:a7:b5:96:4f:2e:9e:07:80:54:d5:
0d:3c:73:79:21:4b:09:bd:6b:8a:43:69:6a:d0:03:
72:d7:79:2d:7f:72:8c:d2:fc:e4:30:3e:ef:ae:cc:
a1:ef:b6:90:20:d8:a3:2b:86:fc:2c:c2:dc:0d:fa:
56:6b:81:d5:d7:1b:45:7c:a9:cf:a7:38:e9:8d:82:
61:22:de:c1:6f:04:0b:79:1f:bf:37:32:6b:75:c5:
52:30:75:1f:8f:c7:51:97:0c:34:4f:bf:8e:f3:15:
38:7e:bf:0b:72:4e:b4:e0:57:cd:12:50:9a:a2:d2:
d5:a9:39:f7:4c:b9:1e:4f:5b:61:55:5d:42:76:91:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B3:F4:15:EE:BA:E4:44:C8:B5:56:35:DF:ED:D6:A7:F1:A1:45:7C
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WLP0Fe665ETItVY13-3Wp_GhRXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/24
31.40.204.0/24
92.249.62.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1d:97:50:4d:c6:aa:70:91:18:68:ad:09:ac:cb:91:e8:47:
2d:b8:0e:d9:41:77:1f:4a:e7:39:f5:ed:9a:c1:8c:5b:1b:49:
8d:d2:27:c1:4e:7a:37:53:d7:4b:d5:4b:02:64:20:94:ad:7b:
00:65:ca:bb:17:90:44:33:a6:2c:05:77:0f:31:b7:fc:7b:7b:
37:6f:20:79:52:55:94:d7:91:a9:83:71:a7:08:15:bd:cd:86:
ef:3f:7b:2b:76:cf:01:8d:a7:47:b6:b1:77:00:36:28:d8:04:
52:2b:fc:d9:3c:f2:00:10:5f:76:a2:e1:ee:a8:d1:eb:93:da:
4d:48:ce:2b:2f:ad:ca:79:5f:79:9a:13:90:bd:cb:e2:0f:6f:
c5:0c:3d:bb:f6:49:e8:83:56:e4:79:f7:82:38:c3:a2:fa:27:
6d:bf:b6:56:74:8f:3e:6e:5b:58:58:db:d4:27:ee:ab:27:1b:
cd:c3:b3:6d:c6:a7:2d:d0:28:43:66:dd:5a:81:b4:09:07:5d:
04:97:a6:98:a3:d4:0a:cb:ca:a2:29:e4:4a:65:e2:70:8e:4d:
ba:27:cf:72:2d:58:73:99:76:84:d8:4f:c9:3c:b0:d9:d4:84:
68:a3:23:23:c6:66:05:de:b7:19:d6:31:75:21:9d:0d:f9:c0:
d0:7e:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:14 2026 by rpki-client