Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/w8_LAB8kvTtczZxPI15__-9sqtQ.roa
File: w8_LAB8kvTtczZxPI15__-9sqtQ.roa (raw, json)
Hash identifier: 7raCSBXbMoBLDAnetlJF8Jv8m4ym8ko83bWkTBgYtYs=
Subject key identifier: C3:CF:CB:00:1F:24:BD:3B:5C:CD:9C:4F:23:5E:7F:FF:EF:6C:AA:D4
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F4A08E546EA0E15A06FD4F04A4FCE408A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/w8_LAB8kvTtczZxPI15__-9sqtQ.roa
Signing time: Fri 10 Jul 2026 03:18:44 +0000
ROA not before: Fri 10 Jul 2026 03:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 62.105.219.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:08:e5:46:ea:0e:15:a0:6f:d4:f0:4a:4f:ce:40:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 10 03:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3cfcb001f24bd3b5ccd9c4f235e7fffef6caad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:db:1a:62:59:51:0c:48:58:56:d7:c9:1b:
7f:35:71:23:af:f7:1b:4f:59:42:9a:10:8e:9e:8f:
0b:08:13:18:13:ce:34:cc:95:93:d4:14:41:d6:5a:
85:3e:13:c4:54:d2:8f:ec:2f:fc:49:4a:73:9f:90:
b8:6f:2b:37:bd:70:1a:c1:69:ee:39:9d:70:01:46:
ad:07:02:47:8a:40:07:a7:f3:8c:bf:cb:14:3c:b9:
a5:e3:2d:1d:1b:5a:92:67:38:c8:31:d8:1e:88:2e:
88:84:50:bd:1f:fb:ed:d7:38:21:46:75:9b:e1:1d:
da:c8:16:40:05:7d:63:37:dc:70:23:9a:5c:3e:95:
e4:3a:e6:f9:78:33:23:62:72:e1:15:8e:bd:34:56:
0b:c5:6a:16:53:19:3d:e2:cd:82:50:c5:23:3c:b3:
ef:5b:a3:54:84:f6:98:be:46:6e:ef:e3:15:b6:9b:
0c:a3:ea:1c:ee:85:71:61:de:aa:6f:2f:d7:2f:73:
7b:38:ae:3f:c3:fe:cf:96:a1:0c:3e:7b:35:f2:c5:
c4:80:bc:36:3a:30:58:c0:c0:b3:10:48:7d:b7:c7:
d8:93:69:92:5a:7d:70:f3:24:a5:a5:5c:3b:56:34:
14:bd:95:58:80:4e:e0:56:6c:70:6a:8c:bd:4d:2b:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:CB:00:1F:24:BD:3B:5C:CD:9C:4F:23:5E:7F:FF:EF:6C:AA:D4
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/w8_LAB8kvTtczZxPI15__-9sqtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.219.0/24
194.77.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2f:4e:45:fc:35:f4:3c:22:40:ef:09:72:d0:e4:16:df:00:
a9:35:21:74:5c:28:1a:b1:a5:ea:c8:c2:c8:2f:7e:21:db:38:
4a:75:4f:af:16:97:83:c3:39:87:a3:0a:f4:3f:82:4c:13:2f:
e5:88:23:1d:28:ae:36:71:a9:a5:44:d9:64:e4:73:05:4c:49:
e4:4b:43:02:dc:ff:23:a8:44:60:1a:e2:5c:60:7b:f4:9e:d2:
56:97:02:4c:a8:2f:7d:6f:c9:19:79:4d:34:8f:ce:3a:d9:00:
5e:d8:a2:0b:95:da:ad:33:50:8c:d1:2b:05:72:21:30:65:e8:
02:71:78:99:ac:31:17:0e:ad:8a:3b:83:d6:f5:c3:d9:ac:d8:
87:ea:2c:5e:c3:c7:b8:e2:ce:08:03:46:34:7e:4a:e1:0a:01:
97:bf:92:9d:c7:bb:54:f6:67:51:b8:01:0e:43:e7:64:e1:19:
28:a6:ae:30:80:6a:33:8f:e5:d6:76:71:38:b8:84:31:b3:85:
8a:ee:94:5a:d7:81:6b:87:04:79:5b:7f:4b:24:8c:67:b0:e4:
af:8e:2a:71:49:6a:f7:2b:bc:10:15:cf:ed:9b:4a:5c:bb:15:
b8:d2:c8:a7:8b:68:3e:af:eb:f6:58:2f:d7:a1:a7:b2:3d:02:
a1:37:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:08:16 2026 by rpki-client