Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/WPhU5VJjZ4XlVB-NSWgguYVyk2I.roa
File: WPhU5VJjZ4XlVB-NSWgguYVyk2I.roa (raw, json)
Hash identifier: WwAQ3pAJaD5eojN1JVb3k2pcnL29/F5p++a6VuNNYzM=
Subject key identifier: 58:F8:54:E5:52:63:67:85:E5:54:1F:8D:49:68:20:B9:85:72:93:62
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 01A0CD96304C817D9897D027EA77C55B8D8D
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/WPhU5VJjZ4XlVB-NSWgguYVyk2I.roa
Signing time: Wed 23 Sep 2026 09:26:07 +0000
ROA not before: Wed 23 Sep 2026 09:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 45.151.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:96:30:4c:81:7d:98:97:d0:27:ea:77:c5:5b:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Sep 23 09:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f854e552636785e5541f8d496820b985729362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e6:70:75:8a:5a:15:81:73:82:d1:dd:c3:9b:
1c:74:91:f5:23:36:ef:e8:1f:ae:00:da:27:c7:f9:
b3:0c:c2:4d:f3:2a:82:f2:55:fb:4b:0d:62:81:08:
b4:d1:38:ce:46:a0:e7:d1:19:79:1b:81:67:c5:c4:
cd:6d:8a:ea:86:38:4e:f2:b9:2a:9e:00:f7:b0:11:
98:8d:11:13:8c:86:c8:96:48:44:70:ef:b8:4c:2b:
cc:a0:22:b8:be:67:bd:7a:39:a0:a7:9c:e9:c9:c2:
4b:12:51:56:d7:39:2f:fa:5c:e1:34:ec:34:35:4a:
47:f1:6f:2f:10:9c:b4:5d:57:57:ec:54:e7:04:2b:
4c:99:a1:c2:01:0b:04:eb:c3:64:ab:b5:de:2a:e9:
c5:e3:98:88:27:a3:1b:d4:5e:41:1f:27:c5:f5:9a:
87:a9:9c:71:bd:e8:62:a4:d3:8a:f4:d5:da:57:f0:
72:32:17:29:d0:7b:ef:28:ed:1e:b6:57:7b:f4:6d:
ed:d7:44:4c:8a:50:61:87:99:f4:1e:ac:b8:82:9d:
8e:ff:7c:3d:ad:9d:a8:d0:67:a0:2f:2f:4b:04:cd:
0c:53:1d:a4:59:0f:77:45:bd:ca:2d:f5:ce:15:f5:
55:28:9d:4e:7c:34:69:2a:29:b6:3a:ff:55:48:06:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:54:E5:52:63:67:85:E5:54:1F:8D:49:68:20:B9:85:72:93:62
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/WPhU5VJjZ4XlVB-NSWgguYVyk2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.71.0/24
Signature Algorithm: sha256WithRSAEncryption
77:15:ec:6c:3b:ad:a7:5b:cc:6c:4b:5b:9a:32:35:ee:3f:e9:
c4:77:e9:f3:1f:8b:2c:b4:4c:d8:ee:66:08:f7:27:71:91:d0:
d7:9e:8c:dc:8f:4d:27:c8:61:bb:ba:f7:8a:0a:d3:72:d5:80:
8b:cc:b3:80:12:13:6e:1b:c9:17:b2:c2:a2:bc:23:fd:0a:f1:
4e:cc:3c:6b:7e:30:1e:1e:91:c6:65:59:e6:2a:04:cb:38:73:
01:54:3b:e5:e5:65:be:20:3d:a6:e6:59:9b:0c:ee:40:ba:1c:
86:52:4e:6a:2a:d7:3a:b5:4e:e2:85:24:7e:86:c3:31:75:9f:
bc:e0:0c:5d:8c:3a:87:92:6e:6b:66:17:4a:51:a0:78:08:9c:
ee:13:ba:62:2c:96:48:00:8b:02:35:54:c6:b2:28:f5:77:b3:
4b:13:cc:41:e0:be:6e:52:50:f1:e4:fb:97:65:73:ab:3a:a1:
b7:1e:62:aa:ea:9d:74:a6:5b:0e:f5:53:51:9a:54:8d:0e:f2:
8f:22:d8:b2:ed:52:8e:18:15:b9:60:23:7b:bc:61:dd:7a:83:
79:2d:2b:74:d4:90:55:08:4f:9c:c2:9a:be:d8:9b:49:3a:0f:
2c:70:41:65:b7:a2:b1:68:7e:10:e7:e8:3c:2b:d7:6f:1c:e6:
c2:b4:58:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDNljBMgX2Yl9An6nfFW42NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1
YWZiYWEwHhcNMjYwOTIzMDkyNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGY4NTRlNTUyNjM2Nzg1ZTU1NDFmOGQ0OTY4MjBiOTg1NzI5MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OZwdYpaFYFzgtHdw5scdJH1Izbv
6B+uANonx/mzDMJN8yqC8lX7Sw1igQi00TjORqDn0Rl5G4FnxcTNbYrqhjhO8rkq
ngD3sBGYjRETjIbIlkhEcO+4TCvMoCK4vme9ejmgp5zpycJLElFW1zkv+lzhNOw0
NUpH8W8vEJy0XVdX7FTnBCtMmaHCAQsE68Nkq7XeKunF45iIJ6Mb1F5BHyfF9ZqH
qZxxvehipNOK9NXaV/ByMhcp0HvvKO0etld79G3t10RMilBhh5n0Hqy4gp2O/3w9
rZ2o0GegLy9LBM0MUx2kWQ93Rb3KLfXOFfVVKJ1OfDRpKim2Ov9VSAZPyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFj4VOVSY2eF5VQfjUloILmFcpNiMB8GA1UdIwQY
MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt
ZDJkYTUxN2E5NmZkLzEvV1BoVTVWSmpaNFhsVkItTlNXZ2d1WVZ5azJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk
LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdHMA0G
CSqGSIb3DQEBCwUAA4IBAQB3FexsO62nW8xsS1uaMjXuP+nEd+nzH4sstEzY7mYI
9ydxkdDXnozcj00nyGG7uveKCtNy1YCLzLOAEhNuG8kXssKivCP9CvFOzDxrfjAe
HpHGZVnmKgTLOHMBVDvl5WW+ID2m5lmbDO5AuhyGUk5qKtc6tU7ihSR+hsMxdZ+8
4AxdjDqHkm5rZhdKUaB4CJzuE7piLJZIAIsCNVTGsij1d7NLE8xB4L5uUlDx5PuX
ZXOrOqG3HmKq6p10plsO9VNRmlSNDvKPItiy7VKOGBW5YCN7vGHdeoN5LSt01JBV
CE+cwpq+2JtJOg8scEFlt6KxaH4Q5+g8K9dvHObCtFj0
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:39 2026 by rpki-client