Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa
File: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (raw, json)
Hash identifier: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=
Subject key identifier: 5B:C3:D7:70:CC:AB:99:F4:52:A9:83:85:96:94:F2:41:09:E2:E4:58
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019B7F150B15FD713A323CF8530A31D8CEF4
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa
Signing time: Fri 02 Jan 2026 14:20:44 +0000
ROA not before: Fri 02 Jan 2026 14:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207869
IP address blocks: 91.230.82.0/24 maxlen: 24
91.230.134.0/24 maxlen: 24
91.230.143.0/24 maxlen: 24
91.230.147.0/24 maxlen: 24
2a0f:70c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:0b:15:fd:71:3a:32:3c:f8:53:0a:31:d8:ce:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Jan 2 14:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bc3d770ccab99f452a983859694f24109e2e458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:77:58:50:53:72:a3:ac:04:82:87:56:19:
1f:5a:c2:7d:e3:7b:f8:87:fb:59:5c:b4:fa:71:51:
e7:73:81:30:76:7c:86:c6:7b:ff:64:e0:81:7a:55:
0d:be:9e:bf:c0:d1:82:d7:25:30:f1:31:6c:79:a8:
ab:e7:b4:34:01:d7:82:77:ae:d3:45:59:ad:67:18:
5c:2f:1f:15:a2:66:04:75:1c:5b:ec:13:60:dd:3a:
e0:ef:6f:56:b2:6e:1e:35:fa:b1:58:74:5e:ed:7c:
c3:28:87:77:79:c8:fe:79:40:de:d3:27:53:c9:32:
2a:50:ec:83:be:77:90:0e:e2:e7:aa:67:e7:80:19:
eb:17:1d:89:36:12:a1:e0:b9:95:01:cc:de:3d:c2:
82:e0:da:3c:e2:e9:1b:8b:0d:bd:44:2c:24:58:dc:
cd:38:d4:e4:4c:14:a1:3e:d0:74:bb:db:2e:e0:75:
90:8d:43:25:a5:63:68:3f:30:13:7c:48:e4:03:21:
53:ec:2c:d6:b2:6f:40:15:a8:a1:5b:9a:d3:8b:6d:
ac:51:44:0c:67:18:0d:97:0a:14:1c:11:52:44:40:
97:57:e1:d0:ab:f2:06:cd:0f:1c:1f:3c:f0:24:49:
d1:f4:2d:1e:f2:4f:09:a8:8f:f8:90:82:90:d3:0b:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:D7:70:CC:AB:99:F4:52:A9:83:85:96:94:F2:41:09:E2:E4:58
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.82.0/24
91.230.134.0/24
91.230.143.0/24
91.230.147.0/24
IPv6:
2a0f:70c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
21:3f:12:d0:79:96:fc:a8:5b:2e:d2:d7:38:b4:1f:b3:e5:76:
57:1c:56:37:63:80:0b:1c:30:c2:96:e9:65:a6:21:74:7f:57:
73:63:7f:b4:15:53:a5:ae:3c:05:4e:9b:0e:c0:d2:71:d8:e7:
27:8a:cb:e2:98:47:f5:23:61:bb:26:bf:05:7f:fc:bc:5a:75:
ab:fe:20:07:60:be:59:88:8f:72:5a:6b:cf:8d:31:4e:0d:44:
47:c6:c5:aa:60:30:8d:b7:75:75:69:a2:f9:20:d6:32:f2:f8:
13:6a:01:89:2b:56:6f:f0:25:9f:4d:9f:97:56:fa:56:ab:e6:
9e:96:99:04:fc:41:ce:41:20:5e:2b:ca:f3:50:28:df:ba:43:
d3:9e:a6:4a:6e:e9:e0:a6:b1:f0:cd:c1:55:ce:93:77:e8:00:
d1:7f:8c:1a:c5:e3:0d:25:ba:06:0a:86:cb:bc:58:5f:07:fb:
61:30:1d:5d:0f:62:1e:29:2f:7d:e1:93:0a:48:ee:2d:68:82:
f5:a5:e6:84:e6:76:d3:63:66:f0:e5:b0:5e:17:58:e6:22:c6:
5a:65:3f:a9:90:cf:22:b0:0a:46:88:b2:e0:2e:ec:ec:e3:ea:
38:50:3a:5a:8f:a4:93:cb:91:16:0a:ff:e5:3d:88:25:44:ad:
88:66:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:19 2026 by rpki-client