Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/WLFylf_EzLR5NPqWwSi8ZX4KJhg.roa
File: WLFylf_EzLR5NPqWwSi8ZX4KJhg.roa (raw, json)
Hash identifier: tHgQqxzDsjEOM4M3e4CEGAm/rlohRzsq44vR6yG9LPw=
Subject key identifier: 58:B1:72:95:FF:C4:CC:B4:79:34:FA:96:C1:28:BC:65:7E:0A:26:18
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019FF0122E73413869E429B65DB666DB940C
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/WLFylf_EzLR5NPqWwSi8ZX4KJhg.roa
Signing time: Tue 11 Aug 2026 09:05:51 +0000
ROA not before: Tue 11 Aug 2026 09:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.217.223.0/24 maxlen: 24
103.69.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:12:2e:73:41:38:69:e4:29:b6:5d:b6:66:db:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Aug 11 09:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58b17295ffc4ccb47934fa96c128bc657e0a2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:ae:e3:2d:b1:c8:c5:44:3b:87:da:f0:20:
e5:c7:fa:b0:81:f6:48:37:ba:16:3d:0a:9d:54:59:
0f:03:bf:85:ef:ab:4b:af:f7:e8:74:48:c5:e4:f7:
85:2b:3b:f8:a9:d8:67:7c:e0:c8:c3:e7:bc:d1:a6:
bf:aa:d0:14:0f:39:48:2d:07:3f:f0:a7:70:45:cd:
a5:fc:c5:2b:55:dc:22:cd:48:65:f9:7e:bb:f1:28:
43:a4:7d:ca:d0:03:2b:8b:d4:24:ed:af:51:ab:83:
19:0f:6b:59:de:0e:43:01:20:85:57:23:b7:9e:2a:
a1:be:fe:14:f3:30:e2:4b:c0:9c:48:cf:15:6c:56:
ff:c2:a8:35:a2:00:11:b4:0b:78:bc:a3:e4:66:e0:
3e:9f:61:58:4a:c6:00:81:18:a7:b2:9f:84:c6:1c:
63:4c:5c:11:c1:d0:7d:65:de:d3:9a:49:70:25:b6:
f9:93:20:4f:c3:50:cb:83:22:b5:ba:ec:40:18:47:
b6:77:53:7c:93:fa:dd:7d:1c:ee:8b:61:3e:fa:a9:
14:a9:f2:85:0b:cb:44:02:57:f8:76:23:bf:59:fe:
b1:6b:d2:64:78:77:a8:16:93:d2:80:ea:a1:91:c6:
04:ec:80:1b:1a:ab:bd:d3:b2:d1:2a:4e:cd:2f:bc:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:72:95:FF:C4:CC:B4:79:34:FA:96:C1:28:BC:65:7E:0A:26:18
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/WLFylf_EzLR5NPqWwSi8ZX4KJhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
103.69.227.0/24
Signature Algorithm: sha256WithRSAEncryption
16:92:b0:d5:b7:12:83:ea:6b:55:ce:0d:15:bc:9c:d9:bf:03:
35:07:3b:f7:1d:37:8a:be:a2:f8:7e:da:e5:c0:dc:90:18:e2:
1c:a0:fb:a1:91:fd:40:5d:67:8c:d1:b9:1d:37:ef:95:82:4d:
30:a9:5a:19:a6:73:27:1c:b6:0c:62:b1:98:93:c6:0d:c6:cd:
2a:56:ac:aa:59:43:97:a0:84:04:39:9c:22:b4:62:8b:48:7b:
36:a2:1f:71:8e:d0:a7:3b:fe:71:96:3a:3e:6e:04:de:fc:92:
d1:eb:75:1e:53:10:6c:7e:a0:73:54:df:2f:fd:12:6c:e3:e1:
59:05:93:52:d6:bb:a9:ae:8c:7f:6e:6b:f5:5b:3f:f1:39:9f:
62:46:d6:e8:81:6a:d1:40:f5:ff:a4:9a:69:e9:b8:ce:2b:e2:
2c:dc:78:d5:ad:2e:42:ed:a0:54:e2:04:f0:9f:2e:dd:e0:5b:
ae:88:2a:09:65:a8:3a:ae:9f:63:1e:7c:88:56:c1:ac:bd:71:
c3:f8:67:19:44:84:80:33:aa:b6:46:79:bf:02:66:dd:c3:89:
95:14:89:d1:c6:35:76:e3:b3:86:cd:7a:99:8c:17:1b:e2:52:
bd:3c:83:b8:61:ec:b1:57:8e:ed:46:38:4a:a2:a5:b3:0c:49:
6c:45:fe:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:55 2026 by rpki-client