Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/RArElwhZ2L2Zlj0l8O2N8bOSric.roa
File: RArElwhZ2L2Zlj0l8O2N8bOSric.roa (raw, json)
Hash identifier: 4r5JtsLOAT3pIVx8q/4/irh2e8gGrH4iwTU+5S/pCGo=
Subject key identifier: 44:0A:C4:97:08:59:D8:BD:99:96:3D:25:F0:ED:8D:F1:B3:92:AE:27
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01A0AAB55C32BC658F905C01EC06B67DF86D
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/RArElwhZ2L2Zlj0l8O2N8bOSric.roa
Signing time: Wed 16 Sep 2026 14:53:27 +0000
ROA not before: Wed 16 Sep 2026 14:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210751
IP address blocks: 80.173.144.0/24 maxlen: 24
80.173.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:b5:5c:32:bc:65:8f:90:5c:01:ec:06:b6:7d:f8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Sep 16 14:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=440ac4970859d8bd99963d25f0ed8df1b392ae27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:8a:2a:68:56:66:e5:37:bd:b3:7a:36:be:
1e:2f:d6:62:ec:a0:33:39:81:5e:c5:dc:f9:bf:db:
62:9c:97:b4:fe:69:4b:51:a8:9b:02:82:33:52:bb:
ba:f5:59:ac:a9:7f:dc:86:a8:8c:76:2a:e2:0e:b5:
e9:46:89:7f:67:3e:c0:d9:c4:2e:79:96:5d:e9:fa:
01:9f:3e:e5:9a:f6:dc:88:56:07:7b:93:c9:09:16:
63:82:94:f6:73:61:97:fc:c3:8c:ed:e0:29:71:68:
ff:2c:29:45:79:11:a5:5c:a9:25:bd:3e:17:c8:39:
33:7f:db:c8:3b:4b:37:b9:c1:5b:b1:3f:cf:c7:bd:
9e:41:91:f0:04:d5:7e:31:2b:0f:f5:b9:04:d2:f0:
6c:72:d7:e4:07:91:08:81:50:22:86:d3:aa:1f:c7:
37:6f:19:bb:4f:3e:aa:b6:5a:be:06:cf:86:6f:e7:
b7:31:d3:e6:4f:de:db:55:74:9f:94:fa:61:39:4d:
cd:01:52:7b:e9:f0:e6:38:9c:5c:37:f6:30:0d:e8:
a5:27:e0:18:aa:8d:43:0e:e5:27:2c:fc:e7:43:b2:
82:10:91:cd:c9:e2:d3:cc:83:69:50:e0:25:fd:a2:
81:37:88:5a:aa:a8:e5:dc:22:17:e1:55:38:ce:8c:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:C4:97:08:59:D8:BD:99:96:3D:25:F0:ED:8D:F1:B3:92:AE:27
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/RArElwhZ2L2Zlj0l8O2N8bOSric.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.144.0/23
Signature Algorithm: sha256WithRSAEncryption
39:19:aa:65:42:4a:f7:f8:d4:1e:6a:2b:d3:64:8c:be:3e:98:
4e:5f:75:0d:89:43:ca:70:b5:45:6c:1c:81:d3:84:7c:a9:49:
c4:87:f6:8d:e9:e5:4b:bd:04:1a:29:1d:94:5b:66:c0:fb:c8:
97:8c:5f:16:6b:71:d6:d6:be:1d:90:93:64:56:27:b8:5d:93:
02:e0:74:46:88:3e:12:65:1b:30:af:da:21:fd:cd:fc:4c:86:
71:85:77:a7:eb:28:3f:c2:a0:54:9f:95:28:7b:ef:ba:e9:90:
b1:68:f3:00:e1:60:6c:d4:e6:cc:b3:4a:55:39:03:0e:f2:71:
9d:b6:4d:cb:a7:16:22:ae:7c:39:da:09:af:fe:31:47:4b:52:
77:5d:ee:76:75:0d:7c:e2:4e:6f:99:da:8c:5c:81:0d:cb:b7:
79:50:92:30:d1:39:07:78:d3:ca:7b:4d:30:3b:a4:c4:f0:ad:
0a:9b:29:b2:32:21:84:44:9f:39:b8:fd:0f:09:ba:24:6a:e7:
a8:2d:35:59:1a:19:33:e4:a8:17:88:ca:0b:ab:f9:ea:e4:0f:
eb:22:96:68:77:ad:60:38:e4:eb:b3:3d:88:b4:7e:8c:12:d3:
4d:24:2d:84:a0:bc:0c:f9:78:e0:ee:8b:36:96:10:dd:a3:98:
12:2f:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:56 2026 by rpki-client