Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/W8-PwKMzVrW65-R2fHKjqVUbX54.roa
File: W8-PwKMzVrW65-R2fHKjqVUbX54.roa (raw, json)
Hash identifier: C0sW97okII2QoOOpXdKP/WHxFbjbFOar+kEl1869pAo=
Subject key identifier: 5B:CF:8F:C0:A3:33:56:B5:BA:E7:E4:76:7C:72:A3:A9:55:1B:5F:9E
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 0198EA013443A11E283EAAC2B246553CE7AF
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/W8-PwKMzVrW65-R2fHKjqVUbX54.roa
Signing time: Wed 27 Aug 2025 05:30:04 +0000
ROA not before: Wed 27 Aug 2025 05:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47869
IP address blocks: 91.235.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:01:34:43:a1:1e:28:3e:aa:c2:b2:46:55:3c:e7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Aug 27 05:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bcf8fc0a33356b5bae7e4767c72a3a9551b5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:6b:92:99:7f:51:d8:94:89:ec:91:6c:17:
ad:0d:cf:bf:26:ff:ba:06:15:cb:2b:a7:99:db:c9:
55:da:ca:90:fc:48:89:95:b5:61:87:06:64:39:a7:
e0:09:9d:d9:cf:17:08:ae:5c:f1:06:12:cc:9e:1d:
59:5b:3e:da:7b:38:4c:69:e6:f2:65:f5:fb:cf:d5:
94:31:46:95:cf:c2:30:b6:8b:32:58:51:0f:f9:b0:
4e:dd:4c:c9:96:8c:b0:52:b6:2c:f4:b4:06:14:63:
09:38:d8:c6:fb:d9:b5:ab:97:f0:9d:95:12:6e:23:
24:e9:a3:de:76:01:88:ad:9b:95:4b:91:93:da:d8:
91:bd:87:ee:80:6e:fe:4e:79:ce:0e:c1:4f:8e:c4:
5c:e5:02:92:4f:7b:7a:9a:71:0d:61:f4:a6:75:59:
58:9d:5a:31:01:7d:24:77:ca:c8:ac:7b:04:e0:87:
02:eb:01:80:49:a5:af:63:49:a8:2c:d9:6c:82:4c:
cb:6d:d4:67:70:e1:ca:20:79:8f:58:e4:47:27:4d:
14:32:4d:61:1b:b5:ef:00:27:6f:36:e9:38:59:47:
5a:24:38:75:ff:b5:04:10:90:d5:ca:e3:72:2a:26:
b7:34:e8:8d:d3:0f:69:0e:5d:00:04:1c:0a:50:a4:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:8F:C0:A3:33:56:B5:BA:E7:E4:76:7C:72:A3:A9:55:1B:5F:9E
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/W8-PwKMzVrW65-R2fHKjqVUbX54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:88:c2:1a:84:78:48:ba:4f:47:30:0d:4b:bc:42:93:71:f6:
3b:80:16:83:fa:59:15:6e:5d:fe:c1:4c:8b:0d:6a:a5:87:5f:
dd:62:f7:84:92:33:d3:e1:0d:7d:e3:8f:6a:b0:c9:b3:f2:f6:
c1:57:56:08:20:21:7c:80:9d:dc:c0:ba:36:88:f2:00:0f:d7:
53:00:0a:61:18:29:f9:2d:b7:0b:82:3d:2a:e5:1a:3a:1f:5d:
11:3b:b1:97:47:fb:05:49:12:dd:4d:3a:bf:ac:34:c4:25:31:
48:c5:03:d0:d7:2d:b2:70:3b:10:83:9a:1a:9d:1f:bf:2e:a7:
66:24:77:d8:fc:3f:9f:d4:02:52:ef:10:2b:13:93:7e:f5:4c:
d0:dc:3c:e9:2e:ce:3b:0b:d7:1e:c4:70:47:d9:a5:c2:b7:01:
07:05:5d:69:f3:43:60:8e:d3:68:13:80:1a:a3:fc:d1:c4:c1:
ac:3c:b0:8b:a8:77:83:42:a8:f8:fb:20:de:92:f7:6a:c5:dd:
9e:b1:ad:8c:ce:dd:4b:65:93:54:00:32:6a:01:20:97:d8:c6:
6c:96:48:24:a4:53:e0:a5:21:e6:a2:b0:fb:4a:40:a4:06:8e:
94:90:b7:00:cb:85:09:0b:bd:8d:7f:e6:9f:54:ca:94:c9:fc:
c7:18:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:10:13 2025 by rpki-client