Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa
File: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (raw, json)
Hash identifier: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=
Subject key identifier: 31:6F:B6:B3:C7:30:0C:C3:DB:49:02:D5:A6:04:3B:5D:FA:02:1D:EE
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0197B293D6CC46F5C23675205B54D16BAD33
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa
Signing time: Fri 27 Jun 2025 18:08:42 +0000
ROA not before: Fri 27 Jun 2025 18:08:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 78.159.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:93:d6:cc:46:f5:c2:36:75:20:5b:54:d1:6b:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 27 18:08:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=316fb6b3c7300cc3db4902d5a6043b5dfa021dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:12:12:ae:fd:ee:0b:76:d8:38:38:66:c0:
f0:87:3c:e5:1f:4b:10:01:2f:df:e9:d9:f1:bd:13:
30:8c:20:b9:c5:90:ca:4a:1f:26:bc:4b:91:86:ad:
4d:5f:90:23:a7:21:fa:40:2d:18:b0:4f:c8:d4:60:
dc:ff:c6:5e:be:5d:a4:f7:8a:3d:cc:ab:52:4e:ae:
6c:be:13:e1:31:e7:25:d0:d3:cc:cb:83:2e:d6:24:
f9:76:f8:32:31:1a:d3:fa:80:66:09:d9:30:96:9b:
62:09:8f:a7:32:c8:af:55:9d:80:5e:4e:9e:fb:fd:
69:a2:a7:4e:25:96:ad:80:6f:14:b8:0b:9e:6c:82:
4a:06:12:88:42:7a:c9:cc:ce:97:dd:b9:fc:b1:7a:
36:a1:0e:51:ae:9b:8a:32:66:ad:eb:45:5d:43:ee:
c9:88:14:d1:6b:dc:0c:4c:4c:24:31:03:f0:5a:e3:
05:44:73:cb:18:c9:e1:e5:30:f1:39:3c:0b:e4:f3:
a6:17:c6:06:08:48:4c:09:09:8d:8c:7e:c4:67:5d:
35:a4:3c:40:af:c7:76:ee:0e:35:f2:33:6b:a7:35:
93:1c:ac:4a:ff:28:1b:0b:c4:21:af:c3:66:9e:09:
c8:f9:ec:27:e2:f7:16:82:c4:d4:bd:92:4e:9a:63:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:B6:B3:C7:30:0C:C3:DB:49:02:D5:A6:04:3B:5D:FA:02:1D:EE
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.130.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a0:eb:51:74:da:4b:d4:bb:19:98:2f:45:c5:3f:c1:1b:b2:
0c:c9:1b:c4:ea:c7:a3:79:6f:65:b5:d7:f0:8a:3e:67:e1:94:
3d:c8:47:97:94:56:8e:19:0d:d8:78:9b:d2:95:98:08:91:b9:
b1:de:e3:95:e8:c4:f3:7c:c0:10:6b:ec:a8:53:88:5d:15:7e:
bb:1e:a3:db:f1:68:21:20:82:db:12:00:9e:c6:3a:ad:d4:ab:
a6:f9:6b:a8:2c:cb:a8:2d:0d:81:6f:33:ad:37:1f:4a:bc:92:
97:ff:99:ab:54:c4:61:03:40:ff:ab:4b:64:54:ba:e5:6e:05:
83:5a:ca:77:43:d2:e4:b8:7e:a9:96:0a:25:87:93:0d:d7:8e:
59:68:b7:29:b2:82:d7:17:b0:46:3d:26:7e:94:fb:63:f1:aa:
2f:66:cf:27:11:ad:a8:8c:c0:58:bd:23:bc:10:81:fc:64:26:
72:2f:34:d5:5d:38:74:f4:98:56:a4:d1:bc:db:ac:4c:8a:29:
df:6e:0e:b3:de:35:b7:33:67:b0:88:7c:f5:71:3e:06:f3:bb:
33:d6:ee:b0:bb:e8:f3:ab:73:c4:6a:72:fe:c7:71:ae:48:17:
bf:d8:bb:ca:65:4e:94:53:4e:f2:cb:3d:39:1c:77:b7:5d:fb:
33:71:0c:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeyk9bMRvXCNnUgW1TRa60zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjUwNjI3MTgwODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTZmYjZiM2M3MzAwY2MzZGI0OTAyZDVhNjA0M2I1ZGZhMDIxZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCYSEq797gt22Dg4ZsDwhzzlH0sQ
AS/f6dnxvRMwjCC5xZDKSh8mvEuRhq1NX5AjpyH6QC0YsE/I1GDc/8Zevl2k94o9
zKtSTq5svhPhMecl0NPMy4Mu1iT5dvgyMRrT+oBmCdkwlptiCY+nMsivVZ2AXk6e
+/1poqdOJZatgG8UuAuebIJKBhKIQnrJzM6X3bn8sXo2oQ5RrpuKMmat60VdQ+7J
iBTRa9wMTEwkMQPwWuMFRHPLGMnh5TDxOTwL5POmF8YGCEhMCQmNjH7EZ101pDxA
r8d27g418jNrpzWTHKxK/ygbC8Qhr8NmngnI+ewn4vcWgsTUvZJOmmPunwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDFvtrPHMAzD20kC1aYEO136Ah3uMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvTVctMnM4Y3dETVBiU1FMVnBnUTdYZm9DSGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp+CMA0G
CSqGSIb3DQEBCwUAA4IBAQBgoOtRdNpL1LsZmC9FxT/BG7IMyRvE6sejeW9ltdfw
ij5n4ZQ9yEeXlFaOGQ3YeJvSlZgIkbmx3uOV6MTzfMAQa+yoU4hdFX67HqPb8Wgh
IILbEgCexjqt1Kum+WuoLMuoLQ2BbzOtNx9KvJKX/5mrVMRhA0D/q0tkVLrlbgWD
Wsp3Q9LkuH6plgolh5MN145ZaLcpsoLXF7BGPSZ+lPtj8aovZs8nEa2ojMBYvSO8
EIH8ZCZyLzTVXTh09JhWpNG826xMiinfbg6z3jW3M2ewiHz1cT4G87sz1u6wu+jz
q3PEanL+x3GuSBe/2LvKZU6UU07yyz05HHe3XfszcQzM
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:56:47 2025 by rpki-client