Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PZU4IIeyEkNUYzUo959cxHqGiME.roa
File: PZU4IIeyEkNUYzUo959cxHqGiME.roa (raw, json)
Hash identifier: 4kKemKUnTaECIacGpN+OjJhGEQ9cruITFABLowf6IMg=
Subject key identifier: 3D:95:38:20:87:B2:12:43:54:63:35:28:F7:9F:5C:C4:7A:86:88:C1
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019D3F7EF442780860ED0450E82A1E081C3B
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PZU4IIeyEkNUYzUo959cxHqGiME.roa
Signing time: Mon 30 Mar 2026 16:06:17 +0000
ROA not before: Mon 30 Mar 2026 16:06:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 80.174.96.0/21 maxlen: 24
80.174.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:7e:f4:42:78:08:60:ed:04:50:e8:2a:1e:08:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Mar 30 16:06:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d95382087b2124354633528f79f5cc47a8688c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:03:6c:2b:fb:91:07:a1:09:a4:ff:ae:e8:
67:7e:eb:43:15:f7:65:10:14:af:32:65:73:01:54:
26:a1:8a:bb:79:ed:9e:fd:5f:8f:c8:42:19:ff:7f:
db:a1:22:d0:2c:c8:b4:9a:62:66:2b:7b:3c:b9:62:
89:39:84:4d:49:06:11:36:79:93:2c:c9:60:25:6a:
a1:4e:f0:0f:39:6e:fc:01:4e:3e:fd:bf:ea:94:b1:
73:b3:c1:f5:57:b6:69:55:63:b0:39:6f:11:15:d8:
53:11:96:2c:89:07:44:83:15:76:c6:cf:b0:88:20:
a6:6b:4b:e1:f9:62:9a:e7:c9:78:48:b8:31:94:cc:
d0:1c:c1:92:06:a8:3f:cf:4c:d6:2f:af:2b:77:6d:
16:cf:c7:a5:f8:8b:3d:e3:45:01:45:57:b0:01:5b:
7c:c3:5c:fd:be:ab:8b:18:d2:cd:0e:da:98:ed:78:
b7:49:49:aa:89:87:c6:1b:7a:22:c8:cd:60:2c:ff:
c2:d3:d2:6c:9e:a2:d1:04:19:43:f2:59:f7:02:8c:
4f:1d:b6:bb:33:55:82:99:8b:3e:25:18:bf:c2:01:
df:89:a2:80:67:fc:87:40:09:99:c8:bf:8e:8b:e7:
21:5b:69:56:11:04:dc:5d:c0:c9:c6:b7:9a:c8:62:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:38:20:87:B2:12:43:54:63:35:28:F7:9F:5C:C4:7A:86:88:C1
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PZU4IIeyEkNUYzUo959cxHqGiME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.96.0-80.174.107.255
Signature Algorithm: sha256WithRSAEncryption
8d:a1:17:2a:44:50:2c:5c:fd:8d:80:51:14:3d:7a:a4:85:2f:
7f:31:75:3e:7b:22:53:87:9b:0b:f1:1d:d4:8a:48:ee:a7:b6:
6d:ab:ce:59:27:a9:7f:d9:9a:73:df:17:e9:e3:56:82:77:98:
c3:eb:a8:80:8e:7c:81:72:64:06:5b:ea:ab:37:b9:f1:1d:e6:
e6:8a:6c:c9:f4:c3:1c:32:d2:0e:5b:d7:31:fc:68:4f:7f:7c:
39:75:41:60:dc:fe:91:7c:05:88:d8:62:01:00:d7:a0:30:99:
dc:c1:4b:1e:99:3c:fe:e6:a4:77:2f:0c:26:43:2a:07:6e:c8:
cd:81:89:a6:96:43:a4:66:b0:02:5a:8d:fd:43:f0:7a:8b:ba:
33:61:f6:31:a1:b4:1a:27:f1:b4:59:3c:3a:3e:93:6d:45:ca:
9d:8f:2f:9a:2f:73:9f:65:5f:3b:1e:6a:5e:91:20:6c:69:98:
19:d5:6e:6e:26:af:5f:b1:c5:34:b4:51:2d:e8:91:a4:3c:d4:
78:5b:32:e1:a8:31:33:e3:80:6e:b3:00:ef:85:9a:e3:14:d0:
f4:9f:a8:51:b4:bc:1b:bd:0e:14:ee:51:2f:f8:c6:d1:44:81:
0b:d2:88:96:a6:8b:0a:28:65:8f:4f:3e:06:21:fd:b5:80:3f:
51:42:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:21 2026 by rpki-client