
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/warGeR8KF_Qduq42XjiOHRQiVOo.roa
File: warGeR8KF_Qduq42XjiOHRQiVOo.roa (raw, json)
Hash identifier: rRr5EdH0nhSwX6FyG7IpMNhRuhDpGs/F3/vvkFXiG7w=
Subject key identifier: C1:AA:C6:79:1F:0A:17:F4:1D:BA:AE:36:5E:38:8E:1D:14:22:54:EA
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 019880C28BEC7F42AC954CF746038ED9A3A9
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/warGeR8KF_Qduq42XjiOHRQiVOo.roa
Signing time: Wed 06 Aug 2025 19:01:29 +0000
ROA not before: Wed 06 Aug 2025 19:01:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207900
IP address blocks: 185.160.184.0/24 maxlen: 24
185.160.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:8b:ec:7f:42:ac:95:4c:f7:46:03:8e:d9:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Aug 6 19:01:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1aac6791f0a17f41dbaae365e388e1d142254ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:0b:34:bb:69:32:f8:1f:21:fa:4c:f3:b7:
a3:d4:4f:d6:6d:d1:ca:05:28:4d:57:ab:ff:c8:49:
ef:64:b6:3d:b4:79:f8:8d:20:77:46:c6:47:9d:91:
02:92:91:43:b0:9e:ff:e5:51:4c:7e:e4:c3:aa:84:
b3:d0:20:b5:f3:60:a0:d6:4b:44:30:8b:ad:78:7e:
f4:0a:96:ff:84:9c:19:78:6c:d1:bd:12:f1:22:f1:
8e:9c:e6:e4:c4:76:75:24:a1:21:17:70:db:0a:7d:
f1:04:6d:e1:79:c9:4a:65:1d:d4:d7:f9:49:44:38:
7c:1e:a0:c8:3f:f6:97:9b:a0:a3:d6:b9:63:28:99:
e8:01:6e:8d:d0:be:ec:5c:3e:70:d0:fd:ff:4c:60:
0a:f8:83:94:40:3e:55:ba:8b:87:2e:fe:8c:74:6d:
b2:1f:66:e1:b6:36:95:b8:1a:3f:98:88:96:48:26:
e4:13:6e:bf:49:c9:bd:48:f2:6f:40:5e:31:01:55:
27:b4:07:0a:ad:52:ea:89:10:c3:20:47:93:7e:61:
4b:6f:3f:5a:b8:7d:ca:cb:c1:12:16:d7:ed:d7:88:
82:bf:b6:d2:50:05:3c:68:15:23:79:3a:97:9b:b8:
83:b7:9b:57:52:c6:0b:45:49:43:8f:ca:67:ec:8c:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:C6:79:1F:0A:17:F4:1D:BA:AE:36:5E:38:8E:1D:14:22:54:EA
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/warGeR8KF_Qduq42XjiOHRQiVOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.184.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:12:1c:eb:33:53:38:98:4a:d2:7d:6e:d5:9e:71:09:19:de:
d0:b6:06:8a:b6:9f:b3:57:a3:97:e7:db:f3:7e:58:d3:6e:22:
b2:73:71:a3:d3:25:45:01:4c:50:cf:2e:4c:56:74:e0:44:72:
ee:68:ba:d2:c0:d9:fb:7c:4c:ac:79:e9:dc:98:cd:4e:25:23:
9e:07:1f:fa:3b:8f:4a:be:3f:70:9d:39:fb:4d:76:7c:cc:74:
e2:71:96:8d:1a:36:7b:fa:e5:3f:0b:a2:8b:ee:33:5e:d6:87:
fe:52:1d:7c:6d:ea:ab:a4:99:1a:0a:2c:38:ac:bf:8c:f2:14:
1d:c6:d6:d8:15:42:0b:2e:25:7e:22:66:6f:8e:e4:d5:c0:62:
09:a8:f9:85:6a:0e:77:d2:3f:c2:15:89:ff:f9:ad:05:9c:be:
f8:32:94:79:52:42:9b:be:ea:a9:c5:bc:7a:11:fa:1b:3b:9c:
82:1c:6d:b6:02:c7:c5:b2:ae:c0:35:e0:02:e9:1e:08:c2:ad:
2d:4e:11:b6:e2:96:d4:9f:d7:dc:d7:71:52:bb:7b:d3:87:d3:
a3:03:43:5b:46:fb:c0:45:e1:00:ad:b8:98:e5:a0:b5:c2:fd:
90:99:ca:56:ad:3c:12:83:c5:f9:d4:53:43:46:d9:3f:83:e3:
23:76:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:44:02 2025 by rpki-client