Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ViKQAjbjoPYnrdJgXbxuRJZ2JQ0.roa
File: ViKQAjbjoPYnrdJgXbxuRJZ2JQ0.roa (raw, json)
Hash identifier: sWcoLNpiycy3qZmgDh7RC3B1pLSPMX74VG0McMDKWD4=
Subject key identifier: 56:22:90:02:36:E3:A0:F6:27:AD:D2:60:5D:BC:6E:44:96:76:25:0D
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019A25047F53ABE8DC0C00AE01AC737A9712
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ViKQAjbjoPYnrdJgXbxuRJZ2JQ0.roa
Signing time: Mon 27 Oct 2025 09:34:02 +0000
ROA not before: Mon 27 Oct 2025 09:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 80.174.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:04:7f:53:ab:e8:dc:0c:00:ae:01:ac:73:7a:97:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 27 09:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5622900236e3a0f627add2605dbc6e449676250d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:a4:22:88:ec:d2:f4:2e:db:38:bf:c4:42:
c0:a8:b7:81:70:4e:85:cb:96:8e:08:9f:43:33:0d:
da:61:6a:0f:0d:83:9b:8c:e8:44:c6:cd:17:96:28:
5d:73:81:90:ec:bf:04:f9:c0:cd:11:45:d5:6e:bb:
ba:9b:fe:cb:fc:d7:4a:de:5a:18:ad:78:d6:3d:7d:
b2:a0:40:a0:d2:d1:38:5c:46:ce:79:86:30:29:3f:
38:5f:e5:59:cd:28:62:3b:24:d5:94:80:19:89:9b:
77:23:5e:5d:77:ec:11:d6:ce:d9:c2:02:b8:b8:a0:
90:e2:f9:cb:84:5e:cb:80:4a:25:c3:23:4c:81:8c:
f2:91:84:bd:6c:bb:b2:dc:16:d6:65:95:39:f0:02:
57:b0:7c:1a:87:ad:c4:6d:bf:89:d9:ae:c3:5f:38:
a6:19:82:1d:bf:d6:9f:1d:e7:2b:2c:24:80:b4:e9:
5e:b9:f3:49:6f:e1:63:47:5a:7d:8e:79:52:1d:5f:
a5:2f:f4:89:d4:b3:7f:79:e3:3e:38:79:15:e0:e7:
06:6e:37:a2:5b:62:43:ed:01:48:75:89:96:68:0d:
d5:54:f4:4a:90:5d:1e:11:42:87:9e:56:c8:fb:a2:
9f:0b:cd:ba:5d:dc:4c:09:79:8d:8d:54:6a:d6:cf:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:90:02:36:E3:A0:F6:27:AD:D2:60:5D:BC:6E:44:96:76:25:0D
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ViKQAjbjoPYnrdJgXbxuRJZ2JQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.255.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c4:73:cf:48:de:a7:0e:a2:c8:6f:65:53:82:2a:05:31:40:
f7:51:ce:d1:df:90:71:f2:c9:8f:56:81:28:5e:7b:0b:e3:3b:
b6:f8:97:51:f8:0d:25:81:37:86:2c:f0:e4:5d:d8:fe:ae:a5:
ca:31:b2:7f:4c:21:e6:a1:32:be:42:4e:2d:dc:12:d6:8e:41:
bd:3c:55:27:9a:cf:3e:0d:ba:41:10:68:e1:fa:2a:55:41:4b:
c6:4a:6c:27:09:52:de:68:24:d7:a5:4f:7b:65:75:e2:24:bb:
2d:66:17:00:a3:b0:6d:30:db:2c:7e:bf:f3:ae:df:1d:ed:c2:
f0:96:31:97:b9:d9:d9:b2:e7:b6:12:bb:55:8a:d5:44:70:43:
6b:2c:e1:f6:e5:ff:74:a6:a6:f3:ca:e5:63:a3:00:c5:77:23:
88:a1:9d:02:70:67:f1:f0:bc:7b:10:ac:44:14:09:51:4b:16:
06:8c:62:e3:42:95:a5:54:8e:9e:62:81:1a:12:8d:08:15:8f:
9b:c1:f5:2c:ac:08:05:bc:73:a5:00:56:b4:af:f6:e5:62:5c:
18:d4:ec:b2:90:d9:0b:e1:5a:b9:52:10:95:77:a8:b5:f5:9c:
c3:4f:6b:26:58:cf:34:34:80:c7:30:fc:40:34:22:fb:d8:fe:
4a:49:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:21 2025 by rpki-client