Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/5NzLvjTCAwPBbm9B0T3-oZZ4vK0.roa
File: 5NzLvjTCAwPBbm9B0T3-oZZ4vK0.roa (raw, json)
Hash identifier: Xvhi68GWWiX6YDidy2IZkngnduuw3azk/RZYBfpvIL4=
Subject key identifier: E4:DC:CB:BE:34:C2:03:03:C1:6E:6F:41:D1:3D:FE:A1:96:78:BC:AD
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A0C32B42E62B092B4DFE056D3521FFA570
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/5NzLvjTCAwPBbm9B0T3-oZZ4vK0.roa
Signing time: Mon 21 Sep 2026 08:53:07 +0000
ROA not before: Mon 21 Sep 2026 08:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30088
IP address blocks: 80.174.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:2b:42:e6:2b:09:2b:4d:fe:05:6d:35:21:ff:a5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 21 08:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4dccbbe34c20303c16e6f41d13dfea19678bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:28:71:9e:48:6d:07:b4:07:11:1a:98:27:
7b:34:e6:a7:83:ca:57:c5:23:43:8f:69:d3:fb:2e:
76:c3:a7:56:4e:2a:64:6a:82:20:53:b9:8d:fa:d0:
75:c9:3c:5f:d0:34:b4:b2:7a:90:90:3e:40:e3:15:
ea:3d:09:4d:36:18:61:51:d7:b4:b6:0a:cc:bd:6c:
ef:e9:0a:18:2b:07:17:ba:23:68:6d:9a:4f:c3:90:
9e:0a:34:1f:a0:e4:74:0c:ce:df:ca:25:58:20:ed:
1b:3d:de:51:8a:d1:b0:e5:99:e2:39:7d:9e:df:f6:
8f:62:3c:d5:58:45:b9:c0:c7:b0:38:86:4f:fb:d0:
5d:26:dd:b6:40:a2:f2:37:08:67:3d:32:e8:66:6f:
0d:73:09:bc:e7:16:3f:6b:a9:e5:ba:ba:39:bc:82:
74:20:47:52:36:e1:e7:01:89:85:73:52:af:ca:1c:
62:92:34:c6:6e:6a:02:8e:f2:98:d3:ef:99:04:c7:
a8:00:17:b3:68:a6:f1:a8:97:db:a2:69:cd:12:f3:
f7:97:43:70:59:3c:ba:bd:e5:bf:a3:dd:91:d7:12:
44:8a:75:d1:72:1c:7e:bc:ac:77:6b:a9:4b:39:16:
c6:6b:f4:84:8d:8c:d6:b9:6c:64:9c:0a:96:9b:b3:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:CB:BE:34:C2:03:03:C1:6E:6F:41:D1:3D:FE:A1:96:78:BC:AD
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/5NzLvjTCAwPBbm9B0T3-oZZ4vK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.118.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6f:85:ec:64:8d:a8:b5:61:c9:14:63:d3:0f:74:34:d3:03:
58:77:9d:ec:79:23:fe:99:88:4a:1f:8f:41:32:a6:31:e3:33:
2c:24:8f:03:ea:3a:4e:5b:2e:ee:65:2c:ba:43:d5:fe:71:94:
20:ca:34:aa:be:d5:a4:8b:d6:71:c1:b3:7e:e9:f4:98:bb:35:
4d:7c:f1:c5:c8:85:95:f5:a4:c0:70:25:47:27:cf:12:05:fe:
14:e3:84:2c:71:61:96:55:13:43:e5:a2:11:ae:7f:3e:63:7f:
08:9e:f6:03:47:e8:31:1d:b6:59:26:f2:7a:25:00:0c:9c:08:
88:d4:89:80:e3:28:a9:a7:6c:f8:91:11:ff:ca:d6:2c:02:05:
2d:45:a7:da:4c:ee:3c:1f:27:76:f1:29:0e:a5:f0:3f:dc:a8:
6f:81:73:d9:a9:be:f9:8b:94:4e:37:cc:1f:11:fa:fd:56:46:
db:79:86:41:8a:a5:6a:5c:03:ff:8e:5c:05:00:a4:4a:61:85:
42:50:b0:f0:ae:73:12:11:e6:b3:8d:35:13:52:b0:52:ba:8c:
51:0e:b6:32:2a:3c:dc:21:b9:f0:ed:17:22:0d:b8:30:fd:f6:
63:06:5e:81:3c:57:83:5a:21:48:1b:00:24:94:a7:22:80:dc:
e0:1b:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:25 2026 by rpki-client