Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/WZLWasAJTJL4NuQLzsppN-RJdv4.roa
File: WZLWasAJTJL4NuQLzsppN-RJdv4.roa (raw, json)
Hash identifier: xh9deKElrPJPAsuDDFcPUr8rOJKxDjEmgaGF1/UzKKY=
Subject key identifier: 59:92:D6:6A:C0:09:4C:92:F8:36:E4:0B:CE:CA:69:37:E4:49:76:FE
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 01A05182F6DD9047791D2578CE352BD09966
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/WZLWasAJTJL4NuQLzsppN-RJdv4.roa
Signing time: Sun 30 Aug 2026 07:12:12 +0000
ROA not before: Sun 30 Aug 2026 07:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51484
IP address blocks: 46.45.64.0/18 maxlen: 18
46.45.80.0/20 maxlen: 20
46.45.96.0/20 maxlen: 20
46.45.104.0/23 maxlen: 23
46.45.112.0/20 maxlen: 20
46.45.124.0/22 maxlen: 22
2a03:24c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:82:f6:dd:90:47:79:1d:25:78:ce:35:2b:d0:99:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Aug 30 07:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5992d66ac0094c92f836e40bceca6937e44976fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:30:62:84:7d:9b:fb:95:f9:27:58:da:32:
77:bf:7c:bf:5c:46:ae:38:b2:e9:1e:c4:fe:6c:e6:
4b:b7:9a:6a:76:9d:02:75:6a:60:2e:f8:7e:e9:ac:
a6:32:ac:2e:69:5a:88:aa:7a:33:90:ed:0c:e8:6a:
ca:67:31:8b:fd:e6:15:4a:26:b1:12:9c:15:c5:5c:
d7:1d:12:15:0c:ab:76:b7:1d:d1:fd:e8:06:26:a2:
cc:17:36:ba:bf:d4:f4:df:9e:6e:7f:5d:24:fb:42:
a0:94:27:64:ea:2e:05:fd:99:1a:85:1b:a5:f0:f7:
9c:f2:60:ce:a0:c1:4b:e9:95:86:e6:44:5a:29:18:
1b:10:5d:08:56:3e:a4:83:23:f9:6a:f2:cf:b6:dd:
4e:bc:b0:e8:b4:99:01:1a:c3:85:c1:fb:07:d7:74:
79:28:f0:93:23:4f:ce:ab:31:b2:b9:be:2a:3d:f8:
fb:69:14:d5:da:d8:7b:04:95:66:27:e6:43:ba:ed:
15:73:41:11:01:73:fd:a4:43:2c:2b:d9:91:4c:33:
66:be:5e:32:61:b6:4a:78:a4:c2:c4:58:db:81:f1:
42:e1:fd:4a:21:96:b4:0d:09:b4:fd:3f:e7:51:b1:
76:3e:1e:22:cd:70:0a:6d:01:47:ae:52:dd:65:75:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:92:D6:6A:C0:09:4C:92:F8:36:E4:0B:CE:CA:69:37:E4:49:76:FE
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/WZLWasAJTJL4NuQLzsppN-RJdv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.64.0/18
IPv6:
2a03:24c0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:cd:0e:25:ec:24:59:7d:a1:f3:b0:ff:47:79:82:0f:1a:9a:
a6:52:b0:24:44:a2:5e:7d:27:2a:66:ce:ee:ac:dc:10:0a:73:
70:b6:ad:3e:59:65:cb:17:c3:17:76:28:a8:4a:ba:c7:ce:a2:
7f:e4:ca:14:87:67:a0:2e:df:ab:e7:f4:a6:a4:94:47:05:1b:
7a:95:6d:65:44:d3:34:a5:59:3d:ba:4f:f8:b5:9f:b5:c2:80:
5f:33:c2:b3:b1:f9:14:41:b9:b5:ea:2e:ef:93:0b:c3:f4:b0:
e4:cd:cd:4b:39:a1:06:b1:28:1d:40:92:55:0f:86:ff:0b:dc:
af:72:95:83:bc:34:13:85:90:93:13:77:48:17:cc:a5:e6:50:
33:0e:13:6c:5d:52:1a:3b:c7:89:8d:cd:77:04:9a:b7:22:b9:
66:92:5c:ae:4a:2e:bb:9c:58:d2:bb:87:20:e6:42:eb:f3:47:
68:f3:06:aa:66:9c:be:20:3f:47:ea:d8:f7:6e:a0:95:73:ef:
04:9c:1d:ee:03:7c:33:f3:ef:27:cc:26:20:5f:97:2e:b9:14:
30:f4:20:c6:76:8a:58:d5:4c:69:f7:15:f9:0e:f5:5a:38:96:
76:5d:77:90:6d:c8:c7:78:04:64:66:87:fe:ae:51:28:56:b2:
e8:02:12:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaBRgvbdkEd5HSV4zjUr0JlmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy
ZDdjZGYwHhcNMjYwODMwMDcxMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTkyZDY2YWMwMDk0YzkyZjgzNmU0MGJjZWNhNjkzN2U0NDk3NmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgEwYoR9m/uV+SdY2jJ3v3y/XEau
OLLpHsT+bOZLt5pqdp0CdWpgLvh+6aymMqwuaVqIqnozkO0M6GrKZzGL/eYVSiax
EpwVxVzXHRIVDKt2tx3R/egGJqLMFza6v9T0355uf10k+0KglCdk6i4F/ZkahRul
8Pec8mDOoMFL6ZWG5kRaKRgbEF0IVj6kgyP5avLPtt1OvLDotJkBGsOFwfsH13R5
KPCTI0/OqzGyub4qPfj7aRTV2th7BJVmJ+ZDuu0Vc0ERAXP9pEMsK9mRTDNmvl4y
YbZKeKTCxFjbgfFC4f1KIZa0DQm0/T/nUbF2Ph4izXAKbQFHrlLdZXUu9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFmS1mrACUyS+DbkC87KaTfkSXb+MB8GA1UdIwQY
MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt
Mzk1MTM3OGFhNzY2LzEvV1pMV2FzQUpUSkw0TnVRTHpzcHBOLVJKZHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2
LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQGLi1AMA8E
AgACMAkDBwAqAyTAAAAwDQYJKoZIhvcNAQELBQADggEBAH/NDiXsJFl9ofOw/0d5
gg8amqZSsCREol59Jypmzu6s3BAKc3C2rT5ZZcsXwxd2KKhKusfOon/kyhSHZ6Au
36vn9KaklEcFG3qVbWVE0zSlWT26T/i1n7XCgF8zwrOx+RRBubXqLu+TC8P0sOTN
zUs5oQaxKB1AklUPhv8L3K9ylYO8NBOFkJMTd0gXzKXmUDMOE2xdUho7x4mNzXcE
mrciuWaSXK5KLrucWNK7hyDmQuvzR2jzBqpmnL4gP0fq2PduoJVz7wScHe4DfDPz
7yfMJiBfly65FDD0IMZ2iljVTGn3FfkO9Vo4lnZdd5BtyMd4BGRmh/6uUShWsugC
Enw=
-----END CERTIFICATE-----
Generated at Sat Sep 5 22:59:21 2026 by rpki-client