Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WLae_R3RQNj8B--SbAlTHFukpXk.roa
File: WLae_R3RQNj8B--SbAlTHFukpXk.roa (raw, json)
Hash identifier: DT6H8JWn6252+tmb/cUyHZOfNt1cDEBr1dNmS2MckP0=
Subject key identifier: 58:B6:9E:FD:1D:D1:40:D8:FC:07:EF:92:6C:09:53:1C:5B:A4:A5:79
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019E0174A5E5116CAEC33B46234B8AD9A51A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WLae_R3RQNj8B--SbAlTHFukpXk.roa
Signing time: Thu 07 May 2026 08:01:22 +0000
ROA not before: Thu 07 May 2026 08:01:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:74:a5:e5:11:6c:ae:c3:3b:46:23:4b:8a:d9:a5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 7 08:01:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58b69efd1dd140d8fc07ef926c09531c5ba4a579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:52:cd:6b:c6:9e:49:b3:02:a6:61:12:66:
58:fe:dc:35:83:ee:a2:12:b0:ec:4a:d3:a2:a2:a4:
7a:33:2e:f9:22:3e:0a:b0:dc:59:69:0d:39:02:6f:
70:45:54:ee:4d:f2:90:2c:6d:14:9b:8e:5d:a3:ac:
24:52:68:7c:e9:b4:c6:5c:58:08:c8:9a:5f:aa:d6:
03:1c:31:a6:3c:7a:ab:c3:e3:3b:9d:15:71:36:3c:
26:92:7d:e8:13:0e:d8:93:2f:ff:3a:17:2b:94:b0:
d7:28:45:4a:69:11:ce:b4:b9:4c:db:8f:46:af:64:
6d:2f:03:70:9d:3e:61:5d:51:13:a2:2e:eb:9b:e6:
6a:1d:a3:d1:54:0f:74:b7:86:64:c0:7e:9a:e8:89:
7d:97:da:14:c7:25:7d:6a:7e:32:35:2c:dc:b1:4e:
ae:b1:a4:0a:61:a1:7c:23:40:f1:56:c4:31:72:e2:
05:79:dd:4e:5a:a3:21:ad:68:0f:30:cf:dc:30:5e:
05:61:48:a8:9f:56:b5:4e:17:e9:e4:20:f6:e6:60:
23:bf:2f:f8:6c:7e:81:7c:8b:b4:52:b8:7f:d0:75:
21:25:bf:04:0d:37:a3:56:62:d7:dc:3e:6f:66:87:
76:ab:22:df:52:e9:3a:45:61:81:32:30:99:41:34:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:9E:FD:1D:D1:40:D8:FC:07:EF:92:6C:09:53:1C:5B:A4:A5:79
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WLae_R3RQNj8B--SbAlTHFukpXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.5.0/24
45.141.148.0/24
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a7:c9:68:c3:89:80:6c:1d:c6:ca:78:2b:88:8c:94:61:1f:
0b:e1:68:4f:e7:8d:4f:0f:fb:7e:c0:83:c3:8d:37:5d:40:c2:
6d:10:61:96:db:9d:37:e4:be:0f:43:91:2c:ad:89:3e:29:91:
3a:d3:1a:c2:45:17:ef:08:d0:1d:6d:30:e4:0d:69:ab:d3:f2:
c4:4a:54:c0:4e:65:fe:b5:d4:f9:57:23:9c:89:06:36:9b:c2:
a0:18:9c:f6:74:c7:04:08:4c:04:b4:1c:b5:2c:d5:24:c5:c8:
d4:ec:4f:17:e7:e5:c4:5a:a9:c5:e8:c6:28:4c:00:6e:70:9e:
33:03:f8:70:2f:69:c5:05:4b:90:1c:ae:bd:13:13:60:50:1b:
d6:98:55:27:30:b5:7d:d7:24:de:ad:49:e0:74:e8:ba:66:9a:
ea:e1:ed:60:59:07:03:f0:94:ca:8f:a2:c6:1f:79:84:41:98:
94:ca:56:bd:74:92:f1:ff:99:8e:43:3b:f7:ba:95:a6:b6:3a:
4a:29:36:a8:bb:be:a2:74:bd:36:7c:62:57:ac:44:83:d4:56:
bb:46:96:a3:71:f6:d5:da:d5:a4:67:67:44:56:62:97:0f:0c:
4d:1e:c9:4c:2b:f2:1a:b6:65:8f:ae:7b:42:0b:66:f5:30:93:
51:17:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:06 2026 by rpki-client