Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/NSzWrjRXn4HjfrL5mu4iDEF2ZKM.roa
File: NSzWrjRXn4HjfrL5mu4iDEF2ZKM.roa (raw, json)
Hash identifier: 68u8eq1g4Qd3vK6iv6ViZSMZ7p+lDJUxXvgGZjFl+cA=
Subject key identifier: 35:2C:D6:AE:34:57:9F:81:E3:7E:B2:F9:9A:EE:22:0C:41:76:64:A3
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019A4F93464888C41D8093B9B67367E1A5BC
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/NSzWrjRXn4HjfrL5mu4iDEF2ZKM.roa
Signing time: Tue 04 Nov 2025 15:54:03 +0000
ROA not before: Tue 04 Nov 2025 15:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 80.174.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:93:46:48:88:c4:1d:80:93:b9:b6:73:67:e1:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 4 15:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=352cd6ae34579f81e37eb2f99aee220c417664a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:95:1f:0f:c7:04:72:f4:2a:f4:ff:51:d8:
8b:f9:ec:ce:91:ff:f7:33:6f:e9:8c:e1:6c:a1:48:
48:42:0f:14:1f:fa:cc:f2:8d:b6:51:fe:1b:d2:85:
1f:75:91:2f:84:a1:46:7d:59:e2:44:6d:21:12:1e:
31:df:04:a4:30:73:cd:e7:91:87:e5:d8:15:dc:b3:
36:1d:7f:15:9c:e7:e6:66:02:24:2f:19:e2:a4:be:
ac:67:f0:66:90:db:6c:cf:1e:cd:ee:05:2d:93:4b:
1f:bc:a6:ce:f8:a1:e3:a8:1b:a9:6d:54:0b:ef:c7:
9e:01:ef:0a:df:73:ba:de:85:a1:23:46:e4:ce:46:
93:ce:10:41:2c:f8:9c:53:1c:3b:b9:c0:e8:a9:6f:
32:ea:47:87:83:07:20:a1:8f:39:39:44:5c:ea:3e:
6c:fb:a2:3d:d6:27:87:30:26:85:61:20:d2:42:79:
7c:9d:4f:d0:37:d1:56:c8:1c:1e:a9:e4:e0:f3:91:
31:78:d5:73:e5:32:11:d0:97:09:5f:f7:57:90:44:
ba:ec:b1:56:f8:04:9d:f8:90:27:05:5b:fd:0f:67:
5d:98:5b:85:90:e6:f3:c1:15:76:86:4c:61:3b:cd:
a6:b8:4c:c1:1a:36:fe:7a:ce:f8:e2:55:0b:96:08:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2C:D6:AE:34:57:9F:81:E3:7E:B2:F9:9A:EE:22:0C:41:76:64:A3
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/NSzWrjRXn4HjfrL5mu4iDEF2ZKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.112.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4e:a6:f0:1f:3b:1a:ee:ab:00:c3:f7:07:17:04:99:9e:33:
be:a2:3d:6e:c9:34:d5:05:8c:bd:12:9a:44:21:42:83:f3:12:
a3:87:7f:2b:3c:ad:6e:b7:1a:51:15:43:74:4d:d5:34:9f:33:
e7:9f:ce:92:38:83:dd:30:d6:6d:3f:ec:8e:f7:d6:12:a7:08:
d4:46:fe:dc:96:a3:bb:2d:9d:a6:99:be:21:15:89:ff:6e:ad:
7f:35:a2:db:11:02:57:ca:b0:fe:c6:65:9b:7f:2c:3c:fa:9d:
54:42:4b:26:b8:8c:f5:2b:e2:c0:3a:70:74:4c:a4:e8:fb:6e:
e3:a6:f8:8b:f7:2d:08:81:de:c2:53:ca:34:43:86:62:13:df:
64:c8:00:a1:04:24:f5:4c:ed:5b:90:d5:34:1f:35:13:50:44:
ab:06:18:08:85:96:1e:0c:3a:43:f1:50:7f:b1:8e:d2:ca:90:
61:46:cf:26:bb:1b:97:6d:3c:2c:ea:64:17:e4:7d:76:4e:98:
03:57:b6:13:0c:6d:2c:0d:1f:89:23:22:cc:b9:13:27:41:37:
6e:ab:ac:19:18:1d:f6:7f:13:b8:f1:74:8e:ec:67:82:61:96:
0e:bf:a5:78:35:e5:b6:db:19:a5:4e:65:20:c4:8e:fa:af:24:
1a:ce:6b:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpPk0ZIiMQdgJO5tnNn4aW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjUxMTA0MTU1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTJjZDZhZTM0NTc5ZjgxZTM3ZWIyZjk5YWVlMjIwYzQxNzY2NGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY+VHw/HBHL0KvT/UdiL+ezOkf/3
M2/pjOFsoUhIQg8UH/rM8o22Uf4b0oUfdZEvhKFGfVniRG0hEh4x3wSkMHPN55GH
5dgV3LM2HX8VnOfmZgIkLxnipL6sZ/BmkNtszx7N7gUtk0sfvKbO+KHjqBupbVQL
78eeAe8K33O63oWhI0bkzkaTzhBBLPicUxw7ucDoqW8y6keHgwcgoY85OURc6j5s
+6I91ieHMCaFYSDSQnl8nU/QN9FWyBweqeTg85ExeNVz5TIR0JcJX/dXkES67LFW
+ASd+JAnBVv9D2ddmFuFkObzwRV2hkxhO82muEzBGjb+es744lULlgjqrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUs1q40V5+B436y+ZruIgxBdmSjMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvTlN6V3JqUlhuNEhqZnJMNW11NGlERUYyWktNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK5wMA0G
CSqGSIb3DQEBCwUAA4IBAQBpTqbwHzsa7qsAw/cHFwSZnjO+oj1uyTTVBYy9EppE
IUKD8xKjh38rPK1utxpRFUN0TdU0nzPnn86SOIPdMNZtP+yO99YSpwjURv7clqO7
LZ2mmb4hFYn/bq1/NaLbEQJXyrD+xmWbfyw8+p1UQksmuIz1K+LAOnB0TKTo+27j
pviL9y0Igd7CU8o0Q4ZiE99kyAChBCT1TO1bkNU0HzUTUESrBhgIhZYeDDpD8VB/
sY7SypBhRs8muxuXbTws6mQX5H12TpgDV7YTDG0sDR+JIyLMuRMnQTduq6wZGB32
fxO48XSO7GeCYZYOv6V4NeW22xmlTmUgxI76ryQazmvr
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:39:56 2025 by rpki-client