Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wu-VNulMEaOEXxslDh7QKDNzuUs.roa
File: wu-VNulMEaOEXxslDh7QKDNzuUs.roa (raw, json)
Hash identifier: kN83R3axw9zb+eSozKhY1bGbMXNh2aTwzPAFSKBbeiM=
Subject key identifier: C2:EF:95:36:E9:4C:11:A3:84:5F:1B:25:0E:1E:D0:28:33:73:B9:4B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C6B03C4A67A4C3D5B99948A745C5A90C9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wu-VNulMEaOEXxslDh7QKDNzuUs.roa
Signing time: Tue 17 Feb 2026 09:52:14 +0000
ROA not before: Tue 17 Feb 2026 09:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 151.241.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:03:c4:a6:7a:4c:3d:5b:99:94:8a:74:5c:5a:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 17 09:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2ef9536e94c11a3845f1b250e1ed0283373b94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:88:6a:9d:3a:28:fa:5f:85:f2:8f:d6:b5:
d9:cf:90:64:b2:d3:d0:6a:01:b6:0e:0f:c4:a3:fd:
07:4f:12:7d:c1:e8:b6:c7:67:d6:64:c2:5d:7b:54:
58:d3:87:e2:2d:ec:4a:8d:fb:2b:94:fb:62:d6:62:
d6:35:62:06:df:70:4b:9e:b4:53:9c:c9:bf:36:27:
cf:04:82:b2:19:f9:29:72:1a:79:61:ca:d4:53:d1:
6a:35:52:48:84:af:f4:54:15:63:50:6f:a5:cb:17:
a5:11:14:1b:f8:7f:bc:a2:7b:5a:3d:00:c3:88:8e:
2a:26:d0:1b:8e:77:fc:d3:09:48:17:f6:96:f4:97:
8d:3e:0e:ba:63:6a:0c:b8:13:56:c9:8c:4a:8c:a4:
0e:b5:f4:3d:3d:37:df:e0:21:eb:00:38:58:4d:1d:
38:f6:6c:26:f6:16:d8:76:ff:78:66:b6:18:51:66:
41:d3:33:32:f2:cb:92:4e:ee:c6:a2:95:06:ff:81:
68:2f:8b:87:ea:36:de:7e:85:10:1d:7a:44:63:33:
b0:d4:09:04:1f:46:64:87:f5:f2:50:0b:d2:d4:7a:
88:ff:a4:e7:65:57:5c:fc:1d:fb:b1:0c:4a:6a:04:
7a:7c:db:17:26:70:2a:1c:3e:4a:e2:b2:50:33:a6:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:95:36:E9:4C:11:A3:84:5F:1B:25:0E:1E:D0:28:33:73:B9:4B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wu-VNulMEaOEXxslDh7QKDNzuUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.206.0/24
Signature Algorithm: sha256WithRSAEncryption
59:df:4b:91:2b:da:45:75:a3:9c:52:a7:b7:23:56:25:e5:81:
30:54:dc:46:11:c6:1c:9a:ca:de:a0:18:53:a9:73:37:0a:3f:
73:e4:c3:1f:3d:19:ee:5b:72:27:32:85:fa:21:53:32:00:a8:
70:86:6f:97:b0:43:1c:ee:41:78:70:52:ed:e4:65:9e:f0:e6:
8b:9f:da:06:85:6d:ab:25:f3:d6:82:9c:5a:a2:de:de:64:a4:
7d:7d:49:f4:59:d3:71:4d:66:d1:eb:30:54:2e:21:56:3c:41:
67:eb:47:84:36:84:c4:0b:1f:60:18:43:aa:2a:f9:4c:a5:9f:
3b:30:12:3f:68:72:68:c9:c6:89:ad:a0:ad:16:bb:d4:87:b1:
9a:6d:f3:ed:69:56:c3:8e:ca:f8:1d:c1:c1:ac:3a:57:bf:51:
25:f2:41:e7:a7:61:74:cc:74:4c:ad:09:68:54:3f:9f:62:f1:
42:99:7d:44:a2:71:9e:00:10:30:ec:df:bc:e5:15:24:c3:9b:
04:4d:28:63:5a:e9:a4:d9:9c:42:86:13:66:2c:7f:27:3a:91:
e2:c5:11:b0:77:8b:ad:4e:7c:71:d9:d0:16:4a:43:69:aa:95:
61:8f:30:0d:81:15:1e:a6:49:e2:af:fe:57:5d:5c:46:a6:8a:
ab:f2:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:29:52 2026 by rpki-client