Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WsiLTQOLtpwYckyPa4p_Ca_ZCy0.roa
File: WsiLTQOLtpwYckyPa4p_Ca_ZCy0.roa (raw, json)
Hash identifier: A5s0F7F+3/lWQxvSGi9rQ0dX5SDWkYEdGMeddAEZzu4=
Subject key identifier: 5A:C8:8B:4D:03:8B:B6:9C:18:72:4C:8F:6B:8A:7F:09:AF:D9:0B:2D
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EF90724F76A616FBC85EECC0ED8B250AB
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WsiLTQOLtpwYckyPa4p_Ca_ZCy0.roa
Signing time: Wed 24 Jun 2026 09:47:35 +0000
ROA not before: Wed 24 Jun 2026 09:47:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211358
IP address blocks: 2a14:c380:270::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:07:24:f7:6a:61:6f:bc:85:ee:cc:0e:d8:b2:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 24 09:47:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ac88b4d038bb69c18724c8f6b8a7f09afd90b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:61:f3:1f:c5:74:ce:9b:40:86:71:df:3f:
47:d8:e2:99:08:5b:a4:c3:df:86:27:12:78:d3:ee:
06:3a:69:0e:6f:f5:84:c1:5b:b5:54:e9:b6:95:f2:
3e:06:ca:2a:ba:49:4b:af:1c:6b:61:4c:4e:5f:f2:
87:6e:28:3e:bf:e2:f8:d0:89:9a:50:d8:40:f1:fa:
6a:5c:1c:4e:72:26:10:53:46:77:97:0d:18:c2:f5:
8a:7a:8e:10:15:5d:ec:73:55:61:4a:83:e1:25:4a:
9d:dc:12:b3:54:d9:c1:bb:95:c4:e6:a9:16:3b:27:
69:c1:7d:d7:e7:74:5c:04:57:ca:ef:25:55:5f:39:
9d:60:e0:ae:7d:77:05:26:96:3e:43:7d:f8:d6:fa:
67:af:af:e9:48:bc:1f:1e:9f:0c:3d:0b:78:08:9e:
9b:18:88:dd:d2:c5:e7:8a:70:f6:3a:de:26:ed:17:
da:ac:26:c1:03:86:b3:26:84:8e:3d:0c:05:f0:96:
a7:ce:a2:6b:93:9b:2d:04:16:af:17:c7:96:e3:85:
cd:d4:c3:cb:97:3f:5e:64:27:8b:17:20:c0:af:55:
e5:4b:d6:2d:58:01:df:ee:44:99:55:56:5d:8a:fe:
a3:59:cc:32:71:5a:1e:b6:ad:ff:1d:6f:c6:97:01:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C8:8B:4D:03:8B:B6:9C:18:72:4C:8F:6B:8A:7F:09:AF:D9:0B:2D
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WsiLTQOLtpwYckyPa4p_Ca_ZCy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:270::/44
Signature Algorithm: sha256WithRSAEncryption
5f:d1:4c:5d:47:ff:e0:70:49:f2:43:07:0a:85:fc:c4:72:47:
54:3a:54:28:55:4c:66:c7:e9:97:64:9d:21:fe:9d:c4:e7:46:
f8:25:31:28:3e:90:a4:85:13:f1:3a:cc:ad:a7:b5:1f:8b:2a:
c5:00:53:78:54:87:d6:06:a6:2f:b6:34:93:8e:c2:7d:70:19:
d7:fd:93:12:63:52:07:2e:07:01:c7:ce:c1:c0:2a:38:70:ea:
b8:d7:e2:1e:de:2a:cc:fc:3b:ce:bd:29:97:93:3c:19:b0:85:
81:2c:77:fb:b6:3f:3f:6d:e1:5f:d2:01:7e:fb:18:ca:97:c0:
8b:96:7b:ff:a8:ec:29:58:9e:34:8b:18:c9:1c:86:55:04:3f:
56:c8:3c:66:69:0d:d6:19:5e:2c:67:b2:f1:f7:3a:9c:2f:90:
e9:c5:c6:df:90:f5:f6:4d:ab:45:42:5e:d1:7c:62:7a:f3:ae:
2c:09:a9:dd:ab:1a:32:d0:3e:98:59:ef:d4:a2:a2:c2:ae:e3:
51:ef:92:ad:8e:e1:fa:0c:22:82:61:3a:32:d1:3f:8c:7b:80:
0f:21:ff:88:58:b5:39:00:38:27:51:3e:08:4d:f8:b9:5e:af:
c1:1c:26:18:a2:b8:8a:66:76:6e:9c:9f:06:2f:93:95:c8:4e:
6c:26:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 06:26:22 2026 by rpki-client