Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8w2_DWht4dlB8GRNKifVwFzPkwc.roa
File: 8w2_DWht4dlB8GRNKifVwFzPkwc.roa (raw, json)
Hash identifier: 8V/hqmzeFxMyxZoGapmFE4nPEEcjQ1lZMmncOZN5brM=
Subject key identifier: F3:0D:BF:0D:68:6D:E1:D9:41:F0:64:4D:2A:27:D5:C0:5C:CF:93:07
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FB7F68CF1A46B8B498CC632EEDA8FA86C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8w2_DWht4dlB8GRNKifVwFzPkwc.roa
Signing time: Fri 31 Jul 2026 11:36:56 +0000
ROA not before: Fri 31 Jul 2026 11:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 45.136.174.0/24 maxlen: 24
194.35.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:f6:8c:f1:a4:6b:8b:49:8c:c6:32:ee:da:8f:a8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 11:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f30dbf0d686de1d941f0644d2a27d5c05ccf9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:94:03:e8:43:c5:f2:55:fc:81:77:8b:7d:
54:47:2f:19:df:2d:b3:61:ad:40:bf:38:f7:d7:ca:
44:4e:75:2b:76:2d:78:e9:fb:ce:9c:8f:6f:ac:4a:
ce:df:b5:07:e1:5a:01:69:b7:3b:d7:70:59:17:28:
3e:56:ef:d3:f5:da:5b:06:52:8b:94:f5:0c:91:e0:
13:6e:cf:6c:46:ed:83:02:ca:5e:a8:08:e7:72:23:
a1:51:dc:f7:f5:a0:75:ab:9e:d0:96:72:0c:a7:28:
18:64:2e:eb:c8:7e:ed:c9:4c:38:12:e1:bc:d1:66:
70:ac:6e:55:b9:c6:3f:a6:38:dd:02:3d:ab:68:71:
5e:81:60:81:74:c3:f9:1e:c0:79:70:4e:be:71:90:
f3:a8:c5:6f:6b:cf:f1:45:92:f5:77:66:ed:05:19:
03:6c:db:53:de:b1:86:3a:15:7a:de:82:6a:c6:96:
44:e9:6b:65:ed:20:f3:14:dd:d3:f1:60:53:47:b4:
3c:af:4a:b1:67:c8:91:f0:8a:45:17:9c:dc:af:c4:
3c:a4:59:8d:3d:8e:56:71:c2:4e:97:33:f0:9a:8e:
54:95:8a:d0:0b:ce:6e:5e:7d:3f:dc:03:45:61:4e:
67:dd:f0:39:8d:bf:30:d3:48:85:98:77:6f:05:74:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0D:BF:0D:68:6D:E1:D9:41:F0:64:4D:2A:27:D5:C0:5C:CF:93:07
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8w2_DWht4dlB8GRNKifVwFzPkwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.174.0/24
194.35.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:43:d4:c3:cf:67:39:d7:b8:2b:14:77:95:7d:c9:bb:eb:78:
6d:7b:21:5e:b3:c8:ad:3a:e2:4a:bc:77:5f:55:75:a4:0a:a6:
c3:33:bc:b6:94:da:0f:cb:0a:57:28:ff:0a:b2:26:2d:25:67:
67:5e:13:53:22:39:41:62:be:be:9a:1f:83:59:98:0f:f0:ef:
22:18:06:de:d7:9c:de:79:64:0c:68:fa:f4:b4:91:17:49:f0:
38:5d:fc:79:4f:c4:ea:6f:e8:b8:52:f9:9f:62:6a:a5:cc:9c:
3d:d4:93:4a:2a:32:f0:4d:bc:6e:96:06:1a:c5:3d:42:a8:9a:
5a:cf:29:ae:d4:c7:ad:aa:f1:81:49:da:25:f6:e0:57:a1:cf:
1a:45:63:09:73:33:fd:7e:db:0f:95:4e:1a:84:12:91:53:01:
27:87:67:96:50:f9:7b:18:bd:84:eb:83:13:87:85:a1:a3:a9:
62:21:1f:16:9e:ce:c2:35:66:29:c5:04:1f:be:7e:78:9e:93:
f5:a0:c8:96:d1:d3:74:13:11:17:3f:60:ca:c7:f6:d5:e5:50:
d8:1d:12:9e:39:4e:41:ca:03:c0:41:3c:c4:9a:f4:d5:d3:7f:
99:31:a9:31:c2:c8:de:58:45:24:d6:e9:9d:da:72:ee:8c:a3:
64:23:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:42 2026 by rpki-client