Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/6SHuayDCb_08mqBJTOUzFTsfjuw.roa
File: 6SHuayDCb_08mqBJTOUzFTsfjuw.roa (raw, json)
Hash identifier: l0vui4Z61D+6w4eHGOqnX6EDthpEADIAOWmuDi43beU=
Subject key identifier: E9:21:EE:6B:20:C2:6F:FD:3C:9A:A0:49:4C:E5:33:15:3B:1F:8E:EC
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019A34FAAA2D65A715EF86B87E31144BFCB2
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/6SHuayDCb_08mqBJTOUzFTsfjuw.roa
Signing time: Thu 30 Oct 2025 11:57:14 +0000
ROA not before: Thu 30 Oct 2025 11:57:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 80.174.252.0/23 maxlen: 23
80.174.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:fa:aa:2d:65:a7:15:ef:86:b8:7e:31:14:4b:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 30 11:57:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e921ee6b20c26ffd3c9aa0494ce533153b1f8eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:04:c8:30:f5:45:9f:27:31:cb:7e:01:ba:
4b:03:12:58:47:d7:7f:b1:a7:db:af:ff:99:cb:41:
28:0a:93:64:f4:d5:64:1c:7c:a5:7f:7a:d8:19:4e:
08:ac:cf:ba:f4:00:e4:3d:7c:11:7c:9f:a6:98:08:
b3:bc:6b:8d:49:4a:5d:83:2e:65:13:28:6a:9b:53:
d1:5e:f1:4b:8d:70:94:61:54:07:5f:75:91:4c:9a:
af:e6:78:6a:3f:4a:b9:37:8b:45:f1:1d:9f:d3:e0:
36:87:3b:78:f7:5c:ae:92:9d:4d:b7:fa:8d:93:db:
a6:8d:ee:3e:43:06:63:51:b1:70:79:c8:9a:ef:b9:
ed:6a:9c:38:8e:84:05:55:91:3b:bf:b2:4c:00:9c:
d3:d6:de:14:26:61:a5:c8:8a:da:04:ac:cf:f4:ae:
b7:b4:34:bc:8d:2b:a8:62:5d:2d:4b:7f:bf:30:b8:
f8:c0:db:26:d1:4c:62:90:60:9f:bd:be:a8:64:ab:
40:b8:cd:f8:17:31:96:ac:7f:00:fa:c7:18:56:88:
2e:4a:5f:72:68:0c:11:9f:6f:28:7e:10:bf:1c:0c:
c5:49:5e:8c:14:cb:f5:13:4a:ff:d3:f4:e5:fd:33:
c3:45:71:ed:89:cc:97:85:7c:9e:7c:63:e5:05:62:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:EE:6B:20:C2:6F:FD:3C:9A:A0:49:4C:E5:33:15:3B:1F:8E:EC
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/6SHuayDCb_08mqBJTOUzFTsfjuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.252.0-80.174.254.255
Signature Algorithm: sha256WithRSAEncryption
2e:a6:a5:b3:10:4e:c7:7b:d2:c9:27:fd:66:9f:81:3b:d0:ec:
4e:55:83:87:76:e2:e7:28:f9:af:64:9c:8a:c9:79:be:15:dc:
ab:ca:71:00:96:e4:5e:19:85:b4:d0:1c:b7:6a:4f:29:b6:05:
78:05:9c:a8:d5:d3:7c:c3:ec:c1:23:d3:ef:a2:00:a4:72:69:
2a:72:2a:fe:7e:28:71:28:11:d0:42:93:d9:fe:55:d4:cf:08:
a4:6e:6a:59:ca:6a:fc:b2:c9:d9:40:3f:4a:a5:33:82:e5:3f:
ca:e5:43:bb:b6:1f:fa:25:e5:85:41:d0:c7:f5:d9:2f:2a:0e:
3c:03:d5:87:97:08:6a:6d:a9:ed:45:29:5f:a5:2d:94:0c:f4:
65:ce:a5:51:65:d0:cd:8b:8a:85:9a:14:0e:d3:99:27:92:63:
af:50:06:4a:7d:35:db:84:5a:6e:da:50:66:c8:82:da:7c:db:
02:99:2f:6e:cf:cc:fc:14:cd:41:8e:57:a8:06:e6:1c:69:55:
1b:a6:6a:aa:47:25:ab:82:21:98:92:17:b7:96:f3:0d:bf:42:
20:d5:8e:7e:e7:58:51:69:77:bb:5e:c2:46:58:4c:db:ef:52:
a6:9f:82:75:66:dd:05:47:40:32:24:a9:64:d5:d0:f7:33:bb:
06:7a:41:7c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZo0+qotZacV74a4fjEUS/yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjUxMDMwMTE1NzE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTIxZWU2YjIwYzI2ZmZkM2M5YWEwNDk0Y2U1MzMxNTNiMWY4ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20IEyDD1RZ8nMct+AbpLAxJYR9d/
safbr/+Zy0EoCpNk9NVkHHylf3rYGU4IrM+69ADkPXwRfJ+mmAizvGuNSUpdgy5l
Eyhqm1PRXvFLjXCUYVQHX3WRTJqv5nhqP0q5N4tF8R2f0+A2hzt491yukp1Nt/qN
k9umje4+QwZjUbFwecia77ntapw4joQFVZE7v7JMAJzT1t4UJmGlyIraBKzP9K63
tDS8jSuoYl0tS3+/MLj4wNsm0UxikGCfvb6oZKtAuM34FzGWrH8A+scYVoguSl9y
aAwRn28ofhC/HAzFSV6MFMv1E0r/0/Tl/TPDRXHticyXhXyefGPlBWLeMQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOkh7msgwm/9PJqgSUzlMxU7H47sMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvNlNIdWF5RENiXzA4bXFCSlRPVXpGVHNmanV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJQrvwD
BABQrv4wDQYJKoZIhvcNAQELBQADggEBAC6mpbMQTsd70skn/WafgTvQ7E5Vg4d2
4uco+a9knIrJeb4V3KvKcQCW5F4ZhbTQHLdqTym2BXgFnKjV03zD7MEj0++iAKRy
aSpyKv5+KHEoEdBCk9n+VdTPCKRualnKavyyydlAP0qlM4LlP8rlQ7u2H/ol5YVB
0Mf12S8qDjwD1YeXCGptqe1FKV+lLZQM9GXOpVFl0M2LioWaFA7TmSeSY69QBkp9
NduEWm7aUGbIgtp82wKZL27PzPwUzUGOV6gG5hxpVRumaqpHJauCIZiSF7eW8w2/
QiDVjn7nWFFpd7tewkZYTNvvUqafgnVm3QVHQDIkqWTV0PczuwZ6QXw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:25 2025 by rpki-client