Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa
File: CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa (raw, json)
Hash identifier: wDvPNmhM7GcOMSdAsmrbJDDVqrwM6YWhHFV4n7fPWuI=
Subject key identifier: 09:13:E0:05:E4:57:02:A4:66:4E:04:ED:7E:C9:A2:21:9A:2C:05:A4
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019C6C567B607C23C19607C166E654F841CB
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa
Signing time: Tue 17 Feb 2026 16:02:12 +0000
ROA not before: Tue 17 Feb 2026 16:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.174.136.0/22 maxlen: 22
103.228.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:56:7b:60:7c:23:c1:96:07:c1:66:e6:54:f8:41:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Feb 17 16:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0913e005e45702a4664e04ed7ec9a2219a2c05a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:9c:8f:72:26:a3:43:f4:38:6d:39:f1:dd:
88:7d:52:96:f0:36:00:07:a2:ed:bb:8d:e3:57:85:
39:ec:75:6a:47:11:97:6f:5e:b4:4e:7c:d0:af:48:
58:91:8d:29:74:a6:e1:50:b0:9b:90:f0:51:bb:ff:
d4:6d:2d:b0:aa:bd:cd:a5:5d:64:a1:c7:71:28:08:
ae:d7:8e:a9:30:94:ae:cc:bc:b6:37:8b:b8:d8:9b:
b1:f8:89:2c:9a:6d:07:05:c7:d9:d9:02:18:31:97:
82:86:5f:9b:c9:aa:d6:b2:cf:29:6c:55:f1:1f:75:
d3:41:73:48:b6:4a:53:e6:61:33:7f:f0:f9:8f:71:
29:f1:65:d3:bb:8c:5a:09:7c:68:dd:c3:0b:36:52:
25:13:66:30:46:81:13:79:75:4a:dc:b0:0a:84:71:
d4:f1:4f:80:b2:c7:b5:b2:2d:48:94:43:37:ed:e4:
29:0f:61:5e:f1:9a:35:85:74:2d:0a:78:59:6a:0d:
c0:6d:dd:9e:c4:5e:f0:11:48:09:af:e0:00:39:60:
78:fb:6a:92:4f:b8:cb:82:88:0f:c2:29:4a:c9:3f:
3d:25:ac:95:60:4a:69:56:98:e5:7e:49:6d:df:e8:
91:3a:a0:d6:66:54:8d:92:42:4d:b5:8a:4b:82:eb:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:13:E0:05:E4:57:02:A4:66:4E:04:ED:7E:C9:A2:21:9A:2C:05:A4
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.136.0/22
103.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7c:1e:90:a8:24:5a:25:04:13:0c:17:82:6a:55:54:a3:5b:
00:74:a6:c2:0a:60:96:b1:6f:c8:47:48:e1:9f:3f:a3:fc:90:
ed:df:7c:83:1b:e5:c5:28:c1:70:bc:1f:a7:22:12:22:be:4a:
26:fa:de:b6:65:4b:af:3e:5e:64:a3:cc:92:fa:a0:33:10:ea:
2d:1f:a1:01:8a:f4:d0:fb:b1:6b:55:2d:d0:96:59:a5:b4:6f:
dc:34:bb:38:60:88:25:25:c8:9a:2d:50:3e:6a:91:e8:41:72:
d7:94:bc:f2:3d:87:11:ec:c4:a3:1f:18:f5:58:04:66:9c:fc:
2e:6d:57:90:73:4b:7a:4b:dc:ea:10:d6:72:43:4c:2f:d7:2b:
8e:59:15:9f:d3:25:50:cb:08:b8:6d:45:d2:c9:cd:a7:31:f0:
1f:8d:b8:94:56:86:95:48:93:02:7b:49:cb:09:65:07:71:fa:
94:fc:b3:7e:51:5d:f8:23:fd:ac:cf:1c:ea:4c:fc:a5:64:ca:
c0:cc:b7:af:51:e4:e5:00:fd:c0:49:10:c8:88:c3:46:ef:ba:
76:67:33:b6:08:0d:14:ce:92:1b:7d:24:db:8f:03:0a:88:c4:
bc:7a:22:ec:57:fb:73:9b:ff:ee:86:29:c2:a8:e9:9c:0c:7b:
c6:20:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:33 2026 by rpki-client