Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/kcCZM38l6ytFTSCCRGE4xZmb_5M.roa
File: kcCZM38l6ytFTSCCRGE4xZmb_5M.roa (raw, json)
Hash identifier: vdyTwvLkPGrGBvR3sd98RK3Nag8A+19y2RgUseY1tS8=
Subject key identifier: 91:C0:99:33:7F:25:EB:2B:45:4D:20:82:44:61:38:C5:99:9B:FF:93
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01A0AAB7305A96CACAF28113183860845A03
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/kcCZM38l6ytFTSCCRGE4xZmb_5M.roa
Signing time: Wed 16 Sep 2026 14:55:27 +0000
ROA not before: Wed 16 Sep 2026 14:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198130
IP address blocks: 80.173.146.0/24 maxlen: 24
80.173.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:b7:30:5a:96:ca:ca:f2:81:13:18:38:60:84:5a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Sep 16 14:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91c099337f25eb2b454d2082446138c5999bff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:39:2b:c2:0a:50:b8:0b:f5:bf:2f:06:1f:
24:69:86:32:0c:5b:59:ba:fb:a9:47:65:4d:29:5a:
ce:06:ec:6f:3b:24:c6:e3:ad:b5:a3:29:12:26:36:
76:7b:8a:f8:cc:c4:4c:9a:9b:a2:76:5c:f2:95:6a:
d9:fc:c5:ee:de:06:66:2b:07:2c:f6:50:cb:c2:69:
bf:1e:87:0a:68:f6:f6:b4:ff:be:08:5a:3f:69:46:
93:ad:26:2d:54:4b:6b:d1:18:6d:3c:51:f8:9e:33:
83:cd:97:91:8c:41:15:ec:d8:f9:f7:03:01:21:ac:
cc:4b:66:bb:83:f6:69:ad:0e:2c:92:61:3d:1d:55:
75:d7:54:04:41:d4:37:c1:dd:9a:a2:24:96:33:ca:
0d:8b:62:40:19:0f:be:bc:d7:fe:f5:11:b2:0f:3c:
13:de:21:f8:a5:61:cc:e7:cb:f4:42:f4:9f:c4:3a:
02:ab:75:ae:aa:64:a3:51:a2:31:6e:08:d3:0a:8c:
92:af:0c:7e:57:e3:13:dd:10:d1:f1:ab:83:f8:f4:
6d:44:7f:5c:2c:53:a8:97:a2:56:45:d6:3a:36:cb:
2b:43:f0:ee:fd:b0:54:60:d6:3b:1d:48:fa:b8:ae:
6d:27:45:03:5b:31:d6:29:23:a8:a6:cb:f4:ec:7d:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:99:33:7F:25:EB:2B:45:4D:20:82:44:61:38:C5:99:9B:FF:93
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/kcCZM38l6ytFTSCCRGE4xZmb_5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.146.0/23
Signature Algorithm: sha256WithRSAEncryption
06:d9:7e:43:38:78:0c:5c:f5:a1:00:fd:b9:dc:2c:e0:45:18:
70:0f:e0:73:46:3f:4e:9d:20:d5:5f:9d:cb:5b:a4:14:85:0b:
98:1d:ff:e7:53:ba:73:82:03:dd:49:bb:39:de:b0:a8:6b:ec:
37:7c:b9:84:48:2c:b5:6f:66:44:5a:6a:71:0a:17:1c:0b:a3:
97:e0:a2:fb:9c:58:f6:4f:c4:34:10:bc:cb:55:06:71:ac:e4:
e8:4a:9d:ed:9e:fa:62:7b:28:4a:cc:c6:de:a4:3c:f3:54:ce:
37:a0:77:77:75:de:5d:90:81:21:ad:b9:4a:af:0a:e0:c7:5e:
37:4f:31:00:3c:a2:a2:7e:75:d2:8e:26:65:1b:f3:4a:73:2f:
ef:d2:41:8d:cd:51:f5:28:09:43:db:b4:d5:e1:6d:17:d4:5a:
b9:53:45:e3:1f:30:b0:25:c8:e0:4b:88:fa:a6:ba:46:7c:42:
81:2e:0e:72:39:78:5b:ba:bb:46:13:36:c8:e7:81:b5:91:57:
ca:28:4b:c2:d0:e1:9a:67:fa:30:25:34:88:76:1b:c4:77:b4:
18:2e:a9:f5:ff:ec:b5:a9:d3:20:48:55:d2:4f:9f:20:08:f6:
d9:6a:17:78:a2:40:ab:62:fc:24:17:39:c8:7a:26:e9:99:39:
d8:c2:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:56:37 2026 by rpki-client