Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/WBlw_6VIVJf8y8tp35IGY0KY5Sg.roa
File: WBlw_6VIVJf8y8tp35IGY0KY5Sg.roa (raw, json)
Hash identifier: W+hfHtjijwXDntickrdwjHCaSjq3oWvPLX71M2iKqZQ=
Subject key identifier: 58:19:70:FF:A5:48:54:97:FC:CB:CB:69:DF:92:06:63:42:98:E5:28
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 01A0C3A5069433B75DE7157DCD28E6E2CD04
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/WBlw_6VIVJf8y8tp35IGY0KY5Sg.roa
Signing time: Mon 21 Sep 2026 11:06:07 +0000
ROA not before: Mon 21 Sep 2026 11:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197912
IP address blocks: 128.127.168.0/24 maxlen: 24
128.127.169.0/24 maxlen: 24
128.127.170.0/24 maxlen: 24
128.127.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a5:06:94:33:b7:5d:e7:15:7d:cd:28:e6:e2:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Sep 21 11:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=581970ffa5485497fccbcb69df9206634298e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:1c:dc:9b:41:c4:e3:24:71:70:f9:03:1d:
2f:dc:73:19:6f:df:38:1f:62:b6:e7:49:fd:e7:22:
eb:db:77:33:68:9e:bf:5e:26:32:69:64:3a:5f:7b:
59:4c:88:bb:12:21:ba:2a:2f:c3:5f:43:f5:e2:c5:
a9:55:a0:1c:01:60:0d:30:0f:a7:bd:98:41:1f:36:
06:04:7f:2d:d9:22:b4:27:a5:3b:c7:26:9b:46:5e:
34:81:b2:0b:54:24:2a:9a:d1:50:e1:4c:6a:45:f5:
df:60:f3:96:3d:d1:07:ce:e6:49:77:9b:5c:29:a5:
48:74:fb:cf:ed:eb:a5:da:9b:31:f5:85:c5:99:da:
80:42:78:9b:6b:a4:e7:b0:14:13:1e:5d:8c:c1:6d:
13:5d:1e:c8:71:9d:af:19:f6:c0:e2:8e:ae:2d:06:
61:d5:09:84:b4:4c:2d:ae:69:9a:29:ce:f8:bb:47:
dc:1c:75:6b:e9:0d:bd:76:d3:15:7c:e8:6b:eb:69:
c3:9d:97:a5:e1:88:cc:8a:09:ca:97:66:bb:4c:6f:
cb:a4:04:1f:52:b7:84:c1:4f:ce:59:e5:ff:3f:e3:
53:3e:4f:24:dd:73:b3:d8:53:da:e3:48:0e:9c:94:
6e:76:d0:98:82:bf:40:17:e2:83:60:2b:fb:41:f6:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:70:FF:A5:48:54:97:FC:CB:CB:69:DF:92:06:63:42:98:E5:28
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/WBlw_6VIVJf8y8tp35IGY0KY5Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.168.0/22
Signature Algorithm: sha256WithRSAEncryption
87:aa:b6:f6:96:86:6a:9d:41:25:e5:0d:98:87:70:7c:b7:a5:
b4:96:b8:33:b3:83:44:0c:12:c4:7d:99:e4:d4:d1:46:85:c8:
9e:f0:e4:06:b0:df:6c:77:19:7b:ef:44:3b:78:93:9b:f3:c2:
dd:eb:73:bb:44:08:53:ad:b2:d6:e8:05:c4:e9:b6:11:90:19:
fa:cd:b1:3f:26:6f:35:e8:af:4e:14:7d:01:46:29:10:67:d2:
6c:80:59:ee:e9:6a:62:06:17:9a:5a:d9:89:99:c3:06:4d:48:
c8:36:3b:18:da:6d:1e:da:dd:7d:03:34:b1:47:db:58:c5:ab:
db:3f:4a:40:57:d1:19:53:36:07:8a:aa:61:10:ed:2f:73:f8:
90:4f:39:59:5b:a8:e1:35:c3:28:d1:e7:04:30:47:40:88:49:
73:99:e5:15:b6:9f:f5:05:e4:fd:c2:b8:f6:5b:c5:64:50:75:
13:a4:3b:0d:a8:5c:72:1e:1d:96:88:e4:e7:73:bf:8a:7a:e3:
00:1b:42:42:36:3e:fc:46:2a:2a:e8:5d:45:40:54:4d:bf:d8:
37:c0:eb:96:8f:ce:3a:f8:bd:13:d4:1b:8c:65:21:e7:7d:85:
8f:48:2d:50:25:a1:3a:88:34:bc:38:11:85:f1:7f:31:63:25:
9d:f9:ed:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDDpQaUM7dd5xV9zSjm4s0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm
MDNjNGEwHhcNMjYwOTIxMTEwNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE5NzBmZmE1NDg1NDk3ZmNjYmNiNjlkZjkyMDY2MzQyOThlNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FAc3JtBxOMkcXD5Ax0v3HMZb984
H2K250n95yLr23czaJ6/XiYyaWQ6X3tZTIi7EiG6Ki/DX0P14sWpVaAcAWANMA+n
vZhBHzYGBH8t2SK0J6U7xyabRl40gbILVCQqmtFQ4UxqRfXfYPOWPdEHzuZJd5tc
KaVIdPvP7eul2psx9YXFmdqAQniba6TnsBQTHl2MwW0TXR7IcZ2vGfbA4o6uLQZh
1QmEtEwtrmmaKc74u0fcHHVr6Q29dtMVfOhr62nDnZel4YjMignKl2a7TG/LpAQf
UreEwU/OWeX/P+NTPk8k3XOz2FPa40gOnJRudtCYgr9AF+KDYCv7QfZSSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgZcP+lSFSX/MvLad+SBmNCmOUoMB8GA1UdIwQY
MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt
YTAxZTllNmRjYmYyLzEvV0Jsd182VklWSmY4eTh0cDM1SUdZMEtZNVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy
LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgH+oMA0G
CSqGSIb3DQEBCwUAA4IBAQCHqrb2loZqnUEl5Q2Yh3B8t6W0lrgzs4NEDBLEfZnk
1NFGhcie8OQGsN9sdxl770Q7eJOb88Ld63O7RAhTrbLW6AXE6bYRkBn6zbE/Jm81
6K9OFH0BRikQZ9JsgFnu6WpiBheaWtmJmcMGTUjINjsY2m0e2t19AzSxR9tYxavb
P0pAV9EZUzYHiqphEO0vc/iQTzlZW6jhNcMo0ecEMEdAiElzmeUVtp/1BeT9wrj2
W8VkUHUTpDsNqFxyHh2WiOTnc7+KeuMAG0JCNj78Rioq6F1FQFRNv9g3wOuWj846
+L0T1BuMZSHnfYWPSC1QJaE6iDS8OBGF8X8xYyWd+e15
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:53:02 2026 by rpki-client