Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WL7g0LUqmtcOVSZXGhdeUcfRGbM.roa
File: WL7g0LUqmtcOVSZXGhdeUcfRGbM.roa (raw, json)
Hash identifier: fbG05KgPi04n8Yck72WysGg45C1IW5bd9ON2yC103b4=
Subject key identifier: 58:BE:E0:D0:B5:2A:9A:D7:0E:55:26:57:1A:17:5E:51:C7:D1:19:B3
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A1BFD1618FF07DA8B2ACEE808CF532E5ED
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WL7g0LUqmtcOVSZXGhdeUcfRGbM.roa
Signing time: Mon 09 Nov 2026 10:18:52 +0000
ROA not before: Mon 09 Nov 2026 10:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 84.236.132.0/24 maxlen: 24
88.148.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:d1:61:8f:f0:7d:a8:b2:ac:ee:80:8c:f5:32:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Nov 9 10:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58bee0d0b52a9ad70e5526571a175e51c7d119b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:cc:41:f8:da:eb:93:0c:2a:d9:65:b9:44:
9a:93:9c:ce:5f:3a:53:2e:2b:46:7d:58:92:a6:aa:
30:59:e7:e9:81:c9:3f:49:42:b4:bd:11:66:be:4c:
da:e2:2e:ad:e6:69:01:c7:cf:b5:1b:b3:5d:d4:4f:
59:d3:c3:90:e6:cd:dc:ed:1e:ae:6a:cb:be:47:8c:
23:25:bf:66:c7:39:15:07:b5:9d:21:76:39:b4:61:
3a:57:5f:69:75:0f:f7:ec:47:a2:82:00:8e:b2:2d:
1c:f6:ba:5d:d7:30:7f:eb:b0:8c:d3:a3:02:1a:a1:
43:ad:42:b4:bc:7e:42:7f:69:ac:99:c1:cc:75:20:
61:6a:bb:13:35:68:35:4d:56:a2:fb:b6:92:85:dc:
d6:58:01:25:5c:5c:8d:37:62:4d:cf:86:1f:90:60:
26:5d:dc:6d:94:f5:38:43:3b:90:55:97:ed:7b:8b:
9c:cf:fc:cd:4c:a5:dc:7e:e3:21:70:4c:98:75:79:
2b:9a:65:40:84:4e:a0:17:78:0d:3c:8e:39:ab:8c:
f4:2a:37:da:fd:e1:fb:2d:67:b9:38:96:c3:01:aa:
a6:3c:9a:07:8f:54:37:b4:99:ee:6d:5c:03:bc:63:
ec:4e:c3:33:f6:89:6c:df:a4:4c:22:9e:d0:9a:f4:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:E0:D0:B5:2A:9A:D7:0E:55:26:57:1A:17:5E:51:C7:D1:19:B3
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WL7g0LUqmtcOVSZXGhdeUcfRGbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.132.0/24
88.148.7.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:14:3b:f2:79:e5:17:1d:4b:cb:d8:6e:c8:1f:6f:d5:8f:f3:
a5:a6:98:18:e4:ee:9a:66:02:e9:46:11:62:1f:ad:cf:89:1c:
de:b2:11:68:58:13:d4:e1:37:1c:60:01:0b:9d:d4:4b:71:d5:
0b:6a:e9:e6:aa:21:8d:46:2c:96:22:8b:0c:f0:3e:1a:cb:11:
23:eb:ff:66:5b:b8:d9:7c:af:df:36:d3:6f:18:61:82:0f:2a:
37:fa:1b:76:b2:b4:bd:2d:7a:8d:0b:16:61:55:ab:28:a7:6c:
0b:d9:fd:cb:3d:04:cd:55:44:67:e8:73:f6:65:15:2d:38:35:
35:ab:a4:48:0e:80:14:98:2b:cd:c9:20:b9:80:77:5c:97:a8:
44:bc:44:87:c6:be:fc:9f:4f:87:61:56:d7:a9:a8:6a:d5:52:
d2:66:91:2f:02:d4:17:03:59:08:b8:fc:a6:74:9d:c8:d7:d9:
4f:a3:b2:9a:c2:af:65:24:c5:8f:4e:11:bf:63:ff:f5:5e:7c:
95:c3:44:6f:dc:a8:b9:a7:3c:4e:45:0e:08:b6:97:c8:e7:fc:
a0:8e:8a:c8:bf:53:5b:4c:03:10:eb:08:2b:0b:9b:7d:d1:80:
09:57:09:a6:39:69:24:d1:89:cb:3f:0f:25:b7:37:71:34:80:
f0:50:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:22 2026 by rpki-client