Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WBXO-tfpfTNevgr58kr9Y2qxYq0.roa
File: WBXO-tfpfTNevgr58kr9Y2qxYq0.roa (raw, json)
Hash identifier: zGP9Ci2ds4uEeNV/WHc15PMwSjh30r+FrV0TVGSHYRE=
Subject key identifier: 58:15:CE:FA:D7:E9:7D:33:5E:BE:0A:F9:F2:4A:FD:63:6A:B1:62:AD
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0199EBFD70A76FB0A2680D56A95518891113
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WBXO-tfpfTNevgr58kr9Y2qxYq0.roa
Signing time: Thu 16 Oct 2025 07:47:59 +0000
ROA not before: Thu 16 Oct 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273295
IP address blocks: 45.142.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:eb:fd:70:a7:6f:b0:a2:68:0d:56:a9:55:18:89:11:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 16 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5815cefad7e97d335ebe0af9f24afd636ab162ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:03:b2:a8:0d:f1:2a:ae:51:ed:b2:e4:22:
b3:22:0f:55:a0:b6:3c:1b:82:34:fb:0a:b3:54:85:
b7:5c:33:8a:2a:e9:e3:4b:eb:41:e5:19:f8:ee:86:
05:72:7c:24:8b:63:f0:3e:e5:c5:c9:f8:49:9f:23:
c2:22:5f:99:12:26:80:ef:ce:ce:aa:b1:c1:b0:82:
8c:92:d1:74:73:9e:2e:29:d0:40:9c:61:3d:40:b8:
8d:01:cf:38:b3:a6:ab:79:d8:f2:19:1c:7d:73:25:
79:bb:51:1c:b4:90:3d:b8:ae:6e:97:2a:49:e2:63:
0d:e0:b4:eb:2b:10:9d:3d:7b:22:78:77:17:ce:34:
43:58:10:70:b3:e5:a8:b3:4f:41:48:a0:75:c6:b7:
18:bf:50:45:50:ef:8b:8b:86:46:cc:bf:fb:d2:10:
42:82:3b:18:99:ca:3d:11:b3:08:76:3f:e3:d4:70:
2b:0a:89:c1:19:eb:5c:8d:05:59:a0:6e:46:29:02:
8a:d9:47:1a:c8:14:e6:e9:7c:f6:d7:f8:5b:ac:65:
7b:3f:1b:a0:85:81:a9:84:18:79:e5:b3:94:d7:e6:
de:a7:a3:76:04:1a:80:51:dd:b6:b4:f0:be:dc:ca:
9c:cb:55:3f:dd:03:d4:7c:7a:ff:9c:9c:60:53:5b:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:CE:FA:D7:E9:7D:33:5E:BE:0A:F9:F2:4A:FD:63:6A:B1:62:AD
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WBXO-tfpfTNevgr58kr9Y2qxYq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.42.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:53:c8:c4:3d:b8:7b:25:2e:39:e7:db:e4:d3:92:40:83:83:
55:a7:b5:62:37:3b:e5:74:77:7e:b8:8d:8e:64:c0:ed:00:ae:
32:92:a8:92:4d:72:2f:01:d1:c6:8b:52:87:64:19:d2:d4:0b:
cc:f5:ad:1a:a1:0c:ff:c1:c2:95:f1:e1:04:7e:07:57:22:e8:
b6:bf:04:0b:df:26:88:db:8a:4d:e6:e6:88:58:4d:3c:17:91:
80:a4:79:e2:53:14:f0:8b:87:d5:ca:0d:c4:a4:6b:e4:82:67:
b6:74:52:d4:c6:5e:a9:16:a7:df:4d:6b:58:e7:62:86:f9:34:
bf:c8:db:b0:36:53:f0:34:46:22:58:7e:da:0e:19:0d:56:e4:
cf:ca:b3:32:2d:7c:0e:1a:83:34:d2:e6:80:7b:f1:78:f0:ae:
b9:0e:91:ff:58:a7:58:0f:8e:14:42:e9:d2:b3:4e:b6:3e:4f:
f1:3f:ba:b6:bc:ad:af:75:9e:8a:ec:b6:d7:f9:1b:e1:2e:99:
1b:35:d3:22:2e:19:c7:85:92:9f:b4:62:50:97:29:f6:da:06:
48:c0:45:d4:9b:52:d7:fa:28:c2:4e:71:12:60:6a:26:91:05:
e6:d3:93:09:ed:7f:0c:9e:ab:06:e5:18:42:17:1b:63:aa:b2:
77:d7:14:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnr/XCnb7CiaA1WqVUYiRETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUxMDE2MDc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE1Y2VmYWQ3ZTk3ZDMzNWViZTBhZjlmMjRhZmQ2MzZhYjE2MmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2gDsqgN8SquUe2y5CKzIg9VoLY8
G4I0+wqzVIW3XDOKKunjS+tB5Rn47oYFcnwki2PwPuXFyfhJnyPCIl+ZEiaA787O
qrHBsIKMktF0c54uKdBAnGE9QLiNAc84s6aredjyGRx9cyV5u1EctJA9uK5ulypJ
4mMN4LTrKxCdPXsieHcXzjRDWBBws+Wos09BSKB1xrcYv1BFUO+Li4ZGzL/70hBC
gjsYmco9EbMIdj/j1HArConBGetcjQVZoG5GKQKK2UcayBTm6Xz21/hbrGV7Pxug
hYGphBh55bOU1+bep6N2BBqAUd22tPC+3Mqcy1U/3QPUfHr/nJxgU1tG9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgVzvrX6X0zXr4K+fJK/WNqsWKtMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvV0JYTy10ZnBmVE5ldmdyNThrcjlZMnF4WXEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLY4qMA0G
CSqGSIb3DQEBCwUAA4IBAQA+U8jEPbh7JS4559vk05JAg4NVp7ViNzvldHd+uI2O
ZMDtAK4ykqiSTXIvAdHGi1KHZBnS1AvM9a0aoQz/wcKV8eEEfgdXIui2vwQL3yaI
24pN5uaIWE08F5GApHniUxTwi4fVyg3EpGvkgme2dFLUxl6pFqffTWtY52KG+TS/
yNuwNlPwNEYiWH7aDhkNVuTPyrMyLXwOGoM00uaAe/F48K65DpH/WKdYD44UQunS
s062Pk/xP7q2vK2vdZ6K7LbX+RvhLpkbNdMiLhnHhZKftGJQlyn22gZIwEXUm1LX
+ijCTnESYGomkQXm05MJ7X8MnqsG5RhCFxtjqrJ31xQ/
-----END CERTIFICATE-----
Generated at Fri Oct 24 00:29:14 2025 by rpki-client