Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WCwPQ2a2hw1aDwSFO3Uj2DfKBJw.roa
File: WCwPQ2a2hw1aDwSFO3Uj2DfKBJw.roa (raw, json)
Hash identifier: fkJz9qXMj5ynw9lOxfERcfNf6ncTaRPu8tKWHtwTDxE=
Subject key identifier: 58:2C:0F:43:66:B6:87:0D:5A:0F:04:85:3B:75:23:D8:37:CA:04:9C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A034364CAA87A18494FF51EC98881761F0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WCwPQ2a2hw1aDwSFO3Uj2DfKBJw.roa
Signing time: Mon 24 Aug 2026 14:39:28 +0000
ROA not before: Mon 24 Aug 2026 14:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147224
IP address blocks: 151.247.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:36:4c:aa:87:a1:84:94:ff:51:ec:98:88:17:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 24 14:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=582c0f4366b6870d5a0f04853b7523d837ca049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:35:ac:c0:bf:bf:8b:ae:68:35:d0:ab:09:
b1:bb:d9:70:e7:9a:e0:c8:13:75:3c:f8:fe:4f:4c:
1b:6c:89:fd:9c:ad:22:0b:05:22:85:e3:20:09:b8:
a2:8d:c7:02:f8:c8:e1:4d:e2:4b:7f:12:25:53:94:
16:2b:5d:d7:c7:e6:0f:49:18:0c:39:85:e4:0a:3b:
57:a7:48:2d:af:84:bf:fd:ab:91:ef:8f:8e:48:43:
29:cb:ba:92:e6:8e:81:77:ef:f6:33:14:f7:ed:b8:
9c:9b:65:5c:17:21:49:42:c4:bf:06:06:fa:e8:44:
ff:16:79:98:7b:73:5c:9d:56:f7:84:96:1b:3f:9f:
47:8b:98:4b:d7:9d:66:ff:fd:3a:f2:5b:b5:44:3f:
3b:c1:ae:af:cd:5a:5c:d4:35:89:91:92:7a:8c:00:
34:4d:92:b9:1a:ad:10:d3:f2:d8:fc:64:ba:2a:db:
10:f3:90:4c:94:3b:bd:0e:89:5f:ba:26:8c:f4:3b:
75:6d:9e:6a:4a:ef:20:60:cc:14:20:d4:ff:8c:fc:
55:3b:ee:8e:3e:f8:ff:6c:c9:2a:56:1c:0b:26:54:
9f:5c:12:8a:78:45:48:99:e8:da:1b:07:e4:05:5c:
6a:3e:c5:be:36:6b:c6:19:4e:65:e8:b9:4d:b1:49:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:0F:43:66:B6:87:0D:5A:0F:04:85:3B:75:23:D8:37:CA:04:9C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WCwPQ2a2hw1aDwSFO3Uj2DfKBJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.171.0/24
Signature Algorithm: sha256WithRSAEncryption
17:60:13:f0:e3:95:74:6e:0b:6d:28:90:af:47:9c:11:08:fd:
32:0b:53:b2:a1:2e:e8:f8:ea:1a:74:1a:a2:71:54:f8:f3:7e:
0c:d8:a5:cf:2b:77:ea:73:88:91:34:54:e0:85:e3:c0:3f:45:
ed:19:8a:44:22:cf:77:76:d0:ee:a7:12:82:37:c3:58:3c:6a:
8c:5f:e8:57:74:b3:e7:08:10:f9:a6:41:a4:6a:d6:41:38:1c:
09:be:6f:d5:1d:3c:9f:a9:cf:82:ae:f8:b0:08:8b:a1:a9:57:
7e:52:5a:5b:47:ee:3a:a3:52:1b:1d:0b:78:06:23:65:c2:86:
ed:c7:bf:07:da:24:68:f4:be:19:e3:cf:8e:93:fe:48:05:02:
14:2c:38:8b:eb:fd:d6:6d:a4:06:47:7e:cc:02:2a:15:81:76:
d4:7a:a2:b7:fe:b7:61:83:63:a8:a9:e4:83:24:66:33:8c:be:
33:1b:e3:e3:37:f6:b2:6f:27:1a:09:28:12:52:66:d0:f8:ca:
6f:47:2d:5b:d5:b9:6a:b1:da:5f:93:5d:b8:9d:50:f1:1e:75:
7a:32:7e:5d:23:fc:f3:37:98:47:90:68:3f:a2:e2:e5:60:de:
c6:6d:0e:ae:db:6c:17:f3:c3:74:5a:df:58:fd:9c:6b:ae:e9:
7e:4c:a1:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA0Nkyqh6GElP9R7JiIF2HwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODI0MTQzOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODJjMGY0MzY2YjY4NzBkNWEwZjA0ODUzYjc1MjNkODM3Y2EwNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6g1rMC/v4uuaDXQqwmxu9lw55rg
yBN1PPj+T0wbbIn9nK0iCwUiheMgCbiijccC+MjhTeJLfxIlU5QWK13Xx+YPSRgM
OYXkCjtXp0gtr4S//auR74+OSEMpy7qS5o6Bd+/2MxT37bicm2VcFyFJQsS/Bgb6
6ET/FnmYe3NcnVb3hJYbP59Hi5hL151m//068lu1RD87wa6vzVpc1DWJkZJ6jAA0
TZK5Gq0Q0/LY/GS6KtsQ85BMlDu9DolfuiaM9Dt1bZ5qSu8gYMwUINT/jPxVO+6O
Pvj/bMkqVhwLJlSfXBKKeEVImejaGwfkBVxqPsW+NmvGGU5l6LlNsUnXGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgsD0NmtocNWg8EhTt1I9g3ygScMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvV0N3UFEyYTJodzFhRHdTRk8zVWoyRGZLQkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/erMA0G
CSqGSIb3DQEBCwUAA4IBAQAXYBPw45V0bgttKJCvR5wRCP0yC1OyoS7o+OoadBqi
cVT4834M2KXPK3fqc4iRNFTghePAP0XtGYpEIs93dtDupxKCN8NYPGqMX+hXdLPn
CBD5pkGkatZBOBwJvm/VHTyfqc+CrviwCIuhqVd+UlpbR+46o1IbHQt4BiNlwobt
x78H2iRo9L4Z48+Ok/5IBQIULDiL6/3WbaQGR37MAioVgXbUeqK3/rdhg2OoqeSD
JGYzjL4zG+PjN/aybycaCSgSUmbQ+MpvRy1b1blqsdpfk124nVDxHnV6Mn5dI/zz
N5hHkGg/ouLlYN7GbQ6u22wX88N0Wt9Y/Zxrrul+TKGY
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:58:59 2026 by rpki-client