Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/W8RLhMRyvdfsKzFleWXe_i4i7JE.roa
File: W8RLhMRyvdfsKzFleWXe_i4i7JE.roa (raw, json)
Hash identifier: tJ8yRnMqQTHOLrrRT7uxmUewK9qaLT5zqMo4qVvP0fw=
Subject key identifier: 5B:C4:4B:84:C4:72:BD:D7:EC:2B:31:65:79:65:DE:FE:2E:22:EC:91
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198CD0A59A27AC2F887BA41D7F31741378A
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/W8RLhMRyvdfsKzFleWXe_i4i7JE.roa
Signing time: Thu 21 Aug 2025 14:31:04 +0000
ROA not before: Thu 21 Aug 2025 14:31:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 46.236.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:0a:59:a2:7a:c2:f8:87:ba:41:d7:f3:17:41:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 21 14:31:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc44b84c472bdd7ec2b31657965defe2e22ec91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:ce:fb:00:fb:a8:15:58:70:03:ce:9c:26:
2b:1b:93:30:55:a8:2f:7f:9e:e9:2c:16:9d:26:16:
3b:39:7c:5e:7f:81:85:f8:40:a5:76:a2:ce:7e:cc:
04:92:6e:c1:ba:f6:2c:11:f2:1e:04:1c:45:ca:dc:
25:43:03:02:46:9b:de:42:79:cb:5b:dc:79:d5:f6:
14:53:22:48:13:80:7c:fb:2e:bf:0c:b4:5f:c6:5a:
10:1d:b4:ad:43:91:61:7a:09:34:89:7a:28:ad:10:
08:4f:46:28:40:1b:56:d5:b0:35:98:62:45:09:5d:
86:01:44:79:a1:18:0a:df:56:5d:ed:2c:e0:cf:95:
53:f4:76:b1:47:81:3a:f2:c0:c7:7f:c9:c7:7f:8f:
15:ff:58:af:89:65:09:ed:8a:88:76:3d:ce:d2:1d:
3c:32:84:f8:ea:4d:1f:11:22:53:d7:74:3c:fa:b0:
a1:2c:cd:bd:3b:38:75:ae:d3:06:e6:d8:ec:1a:42:
a6:f0:5d:10:0e:fa:dc:33:41:1b:09:e4:d0:91:b1:
27:89:c0:a4:ae:fd:39:71:71:7e:1d:40:9b:fe:6b:
01:1a:80:fc:e4:38:8e:3d:f9:57:eb:7d:ed:b9:2b:
a9:e0:d1:13:f1:fa:7b:a5:dc:e1:cf:20:3a:9c:82:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C4:4B:84:C4:72:BD:D7:EC:2B:31:65:79:65:DE:FE:2E:22:EC:91
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/W8RLhMRyvdfsKzFleWXe_i4i7JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/24
Signature Algorithm: sha256WithRSAEncryption
44:86:49:c0:bb:64:03:04:ae:5a:c6:5b:b9:31:0d:95:97:3b:
fa:89:3c:71:57:0f:f5:6e:17:2b:28:30:5b:eb:5a:af:ce:f4:
a3:2e:89:88:ed:da:56:82:92:60:9d:0a:f2:ae:26:ef:6f:6c:
cc:25:4f:0e:7f:3f:89:4a:57:ee:ed:c3:2a:64:b0:82:b4:51:
b3:01:ac:20:3a:9b:3b:ea:56:e9:dd:de:ee:73:7e:33:c0:52:
da:40:42:c4:b4:d0:30:71:5a:92:29:cf:49:54:bd:f9:92:ed:
5c:4d:28:b1:64:d0:35:9e:67:8e:fa:72:de:6e:f6:e3:13:c1:
ab:59:a3:51:bd:f0:df:40:d8:48:ff:ff:fd:b0:36:40:c3:57:
00:34:e6:d5:79:60:05:85:8e:db:00:26:b5:df:99:fd:2d:18:
86:bb:9c:ea:a8:3f:cf:1d:a5:70:3a:c2:7f:e5:86:8d:8f:e5:
cf:38:20:3a:59:44:11:3a:7e:79:b6:27:53:76:53:8e:8a:31:
e6:f3:7e:27:55:e6:d7:14:d5:a5:37:7a:df:52:2b:03:4b:86:
0d:60:9d:c3:6a:c0:da:84:65:f0:60:85:53:a0:a1:ac:ef:7b:
22:ed:23:d3:b3:31:12:c1:63:39:78:a2:1f:e4:c0:ba:81:f4:
d9:86:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:15 2025 by rpki-client