Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/rW7-6NupdhvBIHV8A5wSjh3luAg.roa
File: rW7-6NupdhvBIHV8A5wSjh3luAg.roa (raw, json)
Hash identifier: A2+/8GiMxVE2wyrWfz1tRKisaABeISiCTPE5FDDlOvk=
Subject key identifier: AD:6E:FE:E8:DB:A9:76:1B:C1:20:75:7C:03:9C:12:8E:1D:E5:B8:08
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A0C32B41DC13F38A3D018086BDB4CC7C0A
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/rW7-6NupdhvBIHV8A5wSjh3luAg.roa
Signing time: Mon 21 Sep 2026 08:53:07 +0000
ROA not before: Mon 21 Sep 2026 08:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.32.0/19 maxlen: 19
80.174.64.0/19 maxlen: 19
80.174.96.0/21 maxlen: 21
80.174.104.0/22 maxlen: 22
80.174.113.0/24 maxlen: 24
80.174.119.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:2b:41:dc:13:f3:8a:3d:01:80:86:bd:b4:cc:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 21 08:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad6efee8dba9761bc120757c039c128e1de5b808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:62:09:8f:fa:27:5b:50:cf:0e:92:f2:93:
d9:69:75:4b:6e:ea:b5:5c:23:f6:9f:55:30:0f:98:
77:63:a0:9c:70:3d:f9:b6:cc:48:06:2b:29:9d:fc:
42:cf:58:0e:0d:77:ad:4d:ab:a8:bb:dd:fd:c6:bd:
da:b2:9b:ce:e5:5b:b1:f5:df:c9:c5:86:01:bb:6f:
65:7a:0d:75:ba:42:71:d3:5a:38:81:51:7d:06:a4:
5a:ab:03:6b:85:3d:e2:ee:64:0d:94:00:85:a9:fc:
9b:42:77:30:e2:2f:c4:6b:af:ed:81:e1:3c:12:96:
85:b0:97:3e:c9:26:00:2e:21:09:b3:b0:69:be:80:
aa:7f:a1:f1:19:54:03:14:1e:24:bf:17:ea:63:ad:
60:91:7e:6b:0e:f4:5f:ce:dd:16:84:90:ac:b8:96:
40:0c:80:69:ef:42:2e:4c:fd:b4:36:3a:57:4f:6c:
7b:f1:5a:f9:6a:02:21:5f:51:7e:be:b1:0b:f1:53:
e4:e3:1e:ac:3c:0b:61:3d:b8:91:73:9c:32:fa:a9:
81:02:54:f0:b7:ad:3d:64:ca:a7:be:02:4f:8a:a2:
e7:a8:0f:a8:b4:1c:b4:9b:6c:ef:8e:02:23:7c:db:
1f:d1:94:25:08:fe:e7:df:90:3d:86:cc:e6:71:f1:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6E:FE:E8:DB:A9:76:1B:C1:20:75:7C:03:9C:12:8E:1D:E5:B8:08
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/rW7-6NupdhvBIHV8A5wSjh3luAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.32.0-80.174.107.255
80.174.113.0/24
80.174.119.0/24
80.174.121.0/24
Signature Algorithm: sha256WithRSAEncryption
12:78:2d:2a:93:bc:b2:e3:84:a0:e0:c8:cf:13:87:74:57:8d:
07:e8:9c:eb:ed:22:3c:ea:8b:1d:1e:45:8a:3e:a4:5e:2a:2d:
b7:8b:0b:64:b1:17:c0:8e:7b:13:8c:dc:e2:5f:a0:07:0c:e5:
b0:a3:25:21:67:5c:9a:b1:97:a2:e5:3b:8a:09:dc:81:fc:b0:
b9:d8:d0:1f:42:f5:20:cc:23:68:3d:81:25:24:fb:52:3c:3c:
a1:21:bb:17:17:68:96:59:95:63:71:bb:c3:72:29:6f:a9:8c:
4c:c8:aa:02:59:f4:37:31:f9:ba:78:e3:9d:37:d7:d1:92:66:
a0:2b:ba:b4:c5:4e:77:b7:c1:25:a7:14:e8:4c:28:e6:87:d8:
8c:ef:91:63:25:6a:26:bf:6d:27:ca:71:74:2e:52:70:67:4f:
84:4d:69:f4:91:8e:90:bf:62:f0:4c:b8:eb:b9:14:4e:d5:ac:
a7:9b:48:83:39:19:81:5c:7b:2a:46:e9:ae:1e:ce:84:b4:58:
ce:ab:b2:f5:68:e5:28:44:13:0a:b8:cb:7d:34:c0:b8:da:39:
7e:1d:39:8d:df:e6:ad:03:27:fc:02:42:31:7b:a7:86:90:29:
da:c4:6f:2e:c9:50:4f:cc:7c:44:af:b3:94:cc:39:d4:19:71:
10:48:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:28 2026 by rpki-client