Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/80ILhoqGZSBKNX5Iy2cNCAyJb74.roa
File: 80ILhoqGZSBKNX5Iy2cNCAyJb74.roa (raw, json)
Hash identifier: k6RMwpsO22pGIm9dpIOntkuacDWIQ01zOqnH6Be8QXU=
Subject key identifier: F3:42:0B:86:8A:86:65:20:4A:35:7E:48:CB:67:0D:08:0C:89:6F:BE
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019F9EE5E47625A5F6AF4C53D0C242D19A22
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/80ILhoqGZSBKNX5Iy2cNCAyJb74.roa
Signing time: Sun 26 Jul 2026 14:48:14 +0000
ROA not before: Sun 26 Jul 2026 14:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.29.210.0/24 maxlen: 24
213.255.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:e5:e4:76:25:a5:f6:af:4c:53:d0:c2:42:d1:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jul 26 14:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3420b868a8665204a357e48cb670d080c896fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:04:db:74:7e:f1:1f:93:d9:61:60:23:5f:
7a:00:1e:50:4e:e8:c3:d9:a6:65:d5:09:ea:26:b2:
30:25:41:1a:0f:03:4b:14:d5:a2:63:48:5b:fb:bb:
b1:4c:53:f8:6e:03:32:d3:e8:fa:a9:d8:97:52:59:
06:86:94:f7:b0:9e:1d:3a:6d:b7:3a:2c:41:84:f0:
ba:a6:c5:50:9f:43:01:ea:b4:07:27:30:7d:37:e6:
72:ba:c7:a0:32:b8:92:cd:54:1c:17:a7:75:e3:d2:
f0:eb:ad:b4:94:c7:ec:5b:cd:a1:85:ec:87:b1:a2:
ac:26:c7:4f:55:03:73:42:80:ad:89:ec:04:31:ac:
22:9d:8e:58:e1:7c:4a:ad:ab:6e:87:fd:0b:bd:5a:
86:0a:72:92:6b:ac:d1:c7:6d:32:e1:be:5b:8e:db:
eb:33:06:7a:85:51:1e:70:60:7d:39:1c:75:fa:f8:
b8:97:03:55:e9:1f:a6:38:18:83:97:4c:f9:3e:8a:
a0:92:e3:d5:ce:da:2c:0b:f3:6f:4b:ea:98:33:dc:
4a:82:bd:00:75:a7:41:ff:b6:17:6d:c3:4a:09:76:
f7:ca:ef:a2:4b:81:8e:85:99:c2:68:31:5d:98:89:
e8:be:fe:ff:11:d0:b3:48:95:63:da:85:c2:b4:a2:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:42:0B:86:8A:86:65:20:4A:35:7E:48:CB:67:0D:08:0C:89:6F:BE
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/80ILhoqGZSBKNX5Iy2cNCAyJb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.210.0/24
213.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:f7:59:74:a8:dd:95:9f:1a:07:c8:95:b5:64:2f:b7:22:
a7:1b:b7:ee:ab:f3:6b:66:80:1d:cb:e1:8d:14:3e:56:12:2d:
94:a3:77:28:d7:a0:d1:aa:59:ea:02:f1:ea:37:e9:cf:47:85:
57:af:5f:aa:a7:31:73:e2:65:b7:20:a5:fd:7c:92:1d:37:92:
dc:2c:43:47:3f:b7:ec:52:1c:3f:99:0a:7a:a7:82:70:37:6c:
e9:2d:45:b6:d9:64:c1:23:ee:29:26:12:3d:8a:a7:ba:9a:4f:
35:c4:07:f8:00:75:f6:ba:8b:d8:02:b3:50:34:21:4f:7d:c0:
d9:6d:41:f8:9e:bd:4f:9b:a8:6a:ef:ce:92:6f:3d:d7:10:17:
a5:1e:bb:99:d0:ee:a1:79:01:e7:34:c1:32:cc:04:c1:d0:cc:
75:fc:07:32:52:d8:02:7e:9c:46:b3:0e:19:f4:e5:cc:c3:63:
eb:54:4f:eb:07:09:62:54:04:ae:e4:f9:63:0c:89:a9:5a:51:
44:01:59:9b:9d:04:a4:65:00:0a:8a:82:b4:e3:01:80:45:c3:
b5:87:b7:c0:9f:8d:b0:d0:51:de:fe:6f:bc:69:7f:22:aa:53:
eb:08:d4:4d:f8:0d:80:69:1d:d3:bb:c2:c7:67:b5:e5:14:bd:
8d:7a:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:38 2026 by rpki-client