Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/8fw-hYkolDEKJ1ctrBbs1PHS39s.roa
File: 8fw-hYkolDEKJ1ctrBbs1PHS39s.roa (raw, json)
Hash identifier: XMuARJljMXs1kizk5ea5ttatqj4ZMgxKjO1p6vsjrO8=
Subject key identifier: F1:FC:3E:85:89:28:94:31:0A:27:57:2D:AC:16:EC:D4:F1:D2:DF:DB
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019A27445DA6A47289AD379E82C3E7561093
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/8fw-hYkolDEKJ1ctrBbs1PHS39s.roa
Signing time: Mon 27 Oct 2025 20:03:03 +0000
ROA not before: Mon 27 Oct 2025 20:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215811
IP address blocks: 45.8.125.0/24 maxlen: 24
45.8.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:44:5d:a6:a4:72:89:ad:37:9e:82:c3:e7:56:10:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Oct 27 20:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1fc3e85892894310a27572dac16ecd4f1d2dfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:98:18:bf:ed:c4:a4:f4:62:16:35:2e:96:
a7:52:ad:38:ab:e7:bb:e2:f7:a4:62:6e:d6:3c:a7:
94:3a:bf:3e:2d:06:22:81:da:c9:b7:1c:64:1e:10:
c4:f6:fc:b7:43:6e:86:42:8c:6f:65:4b:58:82:fd:
fc:ff:c0:e3:86:2b:13:33:0d:a1:68:57:4d:92:37:
2b:c9:ba:d4:3c:0c:0f:b6:e6:ac:90:15:21:38:ca:
a1:7d:67:86:e5:89:f2:b4:d2:e3:60:30:5a:b5:95:
5e:26:ce:65:3e:6e:d6:f4:5c:36:c6:bd:52:6d:df:
e7:5e:f4:6c:17:b5:e2:8a:dd:bc:04:32:d9:14:17:
15:e9:2d:93:2d:81:81:61:f3:75:07:6f:bd:ba:32:
b3:08:ee:6e:33:e8:8c:19:d0:6a:43:dd:b6:dc:90:
be:2a:c5:67:7c:a8:d0:8f:e5:39:43:a4:1e:55:93:
2b:e9:a3:f2:e4:a5:a9:1c:f3:6a:59:fc:e3:4b:9b:
30:6d:1f:15:1a:18:33:3b:7f:4d:6d:d9:b4:d4:73:
57:6e:f3:de:23:ba:53:56:e3:91:4d:d9:63:69:32:
2d:50:72:e0:d5:f4:7b:40:d4:f2:48:b4:75:e5:ea:
42:2e:34:81:89:51:28:2d:03:60:cd:62:b0:8c:1f:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FC:3E:85:89:28:94:31:0A:27:57:2D:AC:16:EC:D4:F1:D2:DF:DB
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/8fw-hYkolDEKJ1ctrBbs1PHS39s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.125.0/24
45.8.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c8:f3:25:8f:64:6b:74:95:83:a3:90:6f:10:d0:4b:3e:a2:
0a:11:db:79:b9:77:d7:62:b3:0a:0f:b5:a0:10:0a:b0:ea:89:
98:e0:ef:9d:40:5b:f0:21:48:33:61:c5:62:50:de:30:96:30:
2e:e1:25:da:56:3e:93:9a:e8:b8:4a:af:ac:47:fa:58:91:77:
63:4d:11:77:ee:78:e7:04:9d:f2:3d:3b:ec:15:8b:7a:89:77:
37:ac:f6:59:4d:29:8d:f3:57:71:d8:6b:7d:57:c4:bf:68:58:
d3:e6:6e:73:36:56:d4:ec:78:dc:8e:20:4e:eb:f3:75:fa:23:
eb:88:e3:fa:9e:af:09:e5:c4:71:99:cf:c5:e9:33:94:f1:8d:
8f:4c:57:c0:2c:d5:de:a1:2f:cd:a3:1c:90:6a:af:b3:cf:ba:
89:a1:d6:99:ef:45:85:e7:66:0e:b0:82:ec:48:94:91:8a:8b:
50:7f:1e:a7:1f:ad:b5:cb:95:02:cd:99:a0:83:17:0f:60:49:
82:bc:3e:be:87:e7:0e:28:e4:b8:c5:c8:d6:13:0e:7c:46:32:
d5:db:91:43:ab:cc:cc:4e:6e:c3:43:39:cc:1e:c2:c8:cf:b2:
e8:a5:f8:9d:1d:92:45:d2:ce:5b:dd:d7:77:a3:15:06:b2:e5:
81:b4:7f:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZonRF2mpHKJrTeegsPnVhCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx
MDQwZTcwHhcNMjUxMDI3MjAwMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWZjM2U4NTg5Mjg5NDMxMGEyNzU3MmRhYzE2ZWNkNGYxZDJkZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K2YGL/txKT0YhY1LpanUq04q+e7
4vekYm7WPKeUOr8+LQYigdrJtxxkHhDE9vy3Q26GQoxvZUtYgv38/8DjhisTMw2h
aFdNkjcrybrUPAwPtuaskBUhOMqhfWeG5YnytNLjYDBatZVeJs5lPm7W9Fw2xr1S
bd/nXvRsF7Xiit28BDLZFBcV6S2TLYGBYfN1B2+9ujKzCO5uM+iMGdBqQ9223JC+
KsVnfKjQj+U5Q6QeVZMr6aPy5KWpHPNqWfzjS5swbR8VGhgzO39Nbdm01HNXbvPe
I7pTVuORTdljaTItUHLg1fR7QNTySLR15epCLjSBiVEoLQNgzWKwjB/XvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPH8PoWJKJQxCidXLawW7NTx0t/bMB8GA1UdIwQY
MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt
NmJiNGZlZTg1NzM1LzEvOGZ3LWhZa29sREVLSjFjdHJCYnMxUEhTMzlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1
LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQh9AwQA
LQh/MA0GCSqGSIb3DQEBCwUAA4IBAQBvyPMlj2RrdJWDo5BvENBLPqIKEdt5uXfX
YrMKD7WgEAqw6omY4O+dQFvwIUgzYcViUN4wljAu4SXaVj6Tmui4Sq+sR/pYkXdj
TRF37njnBJ3yPTvsFYt6iXc3rPZZTSmN81dx2Gt9V8S/aFjT5m5zNlbU7HjcjiBO
6/N1+iPriOP6nq8J5cRxmc/F6TOU8Y2PTFfALNXeoS/NoxyQaq+zz7qJodaZ70WF
52YOsILsSJSRiotQfx6nH621y5UCzZmggxcPYEmCvD6+h+cOKOS4xcjWEw58RjLV
25FDq8zMTm7DQznMHsLIz7LopfidHZJF0s5b3dd3oxUGsuWBtH8k
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:02 2025 by rpki-client