Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/w2eNl0WGsEDhm9XgV1gEBG-4AH8.roa
File: w2eNl0WGsEDhm9XgV1gEBG-4AH8.roa (raw, json)
Hash identifier: jZsGNeJdOP+t97XsZ9zClYui9dmEYa9VQyioy6r4uI8=
Subject key identifier: C3:67:8D:97:45:86:B0:40:E1:9B:D5:E0:57:58:04:04:6F:B8:00:7F
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019A6F81A0924BC4DB9310E1C379F6450FAE
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/w2eNl0WGsEDhm9XgV1gEBG-4AH8.roa
Signing time: Mon 10 Nov 2025 20:42:37 +0000
ROA not before: Mon 10 Nov 2025 20:42:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 80.174.125.0/24 maxlen: 24
80.174.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6f:81:a0:92:4b:c4:db:93:10:e1:c3:79:f6:45:0f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 10 20:42:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3678d974586b040e19bd5e0575804046fb8007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:05:a2:64:5f:89:31:14:21:f5:3f:ca:21:
89:33:da:37:9b:73:d3:20:64:da:c7:de:f9:5b:72:
81:fe:0d:dd:f4:ca:f5:16:47:d8:7d:49:ac:cf:5c:
f1:88:9c:0f:34:8d:b2:da:40:e7:77:33:30:6a:b9:
1d:79:48:02:04:00:a1:00:88:cf:b5:3d:a9:82:6d:
e8:bb:d5:52:89:52:bb:a0:34:e3:8e:39:f4:5a:bb:
2a:02:dd:41:b7:e2:23:74:b9:3a:86:8e:c5:2f:d2:
9f:cb:d7:1a:f6:21:5c:dd:80:3d:a9:c5:8f:58:7c:
3a:8e:9b:aa:41:57:54:9c:1c:67:11:0d:2a:43:ce:
60:85:59:79:69:5c:e5:3b:0a:8f:65:c5:13:3a:3b:
f7:50:8f:b0:0a:c7:ee:e9:9c:39:84:89:81:1a:47:
a1:b0:f8:f4:2d:ea:14:09:5e:d9:6a:f0:bb:14:6f:
e4:40:db:22:57:67:67:2a:44:d1:87:9b:66:2f:c6:
82:50:be:0f:da:67:46:0d:39:64:b9:74:65:cb:ad:
46:b2:81:81:8f:36:52:15:64:25:d3:d9:96:1d:1b:
4c:60:b6:40:ce:72:55:16:a4:1f:89:80:9a:24:37:
1c:6b:27:15:6c:5f:80:3b:d4:dd:9b:e9:e3:ac:bf:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:67:8D:97:45:86:B0:40:E1:9B:D5:E0:57:58:04:04:6F:B8:00:7F
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/w2eNl0WGsEDhm9XgV1gEBG-4AH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.125.0-80.174.126.255
Signature Algorithm: sha256WithRSAEncryption
c8:f2:28:d3:22:f7:5f:2c:68:96:f7:b8:31:7f:ce:de:10:c2:
31:53:22:f6:fc:5e:31:2d:db:b4:a5:b3:e3:36:d4:78:81:f5:
74:13:7b:19:46:04:fe:ab:00:0e:b9:3c:87:4b:1c:22:b5:84:
5c:83:1f:fe:e4:51:e0:2f:33:9a:a8:de:db:c7:1f:27:5c:1b:
7d:76:61:58:61:bb:1b:ac:3f:36:f0:1d:11:10:f4:f1:82:3f:
f4:b5:96:86:c6:c7:0e:e2:5c:c7:5c:1a:54:69:0c:2d:d7:db:
b8:0e:42:0a:5a:54:be:db:27:43:25:81:53:45:61:75:c0:30:
87:c4:4a:63:83:78:91:a6:4e:54:e6:21:02:7b:96:f8:09:73:
74:26:df:e2:0a:cb:de:1d:ee:45:68:7f:08:fe:11:73:93:20:
e2:c9:28:bb:80:2b:08:3c:d5:70:7e:17:c7:6e:9a:54:92:cf:
68:62:b8:07:89:8d:a1:3c:af:cd:16:ef:a9:4e:53:47:e3:b6:
68:f2:c5:22:d0:a9:14:32:1d:5a:a3:ad:7a:5a:77:e5:4f:cd:
7b:e4:4c:5d:85:74:2b:2f:ce:91:50:37:d3:5e:07:ec:c1:0b:
10:0c:42:9e:fb:ff:23:62:c3:bb:94:bb:00:9e:ba:95:b1:a4:
8c:60:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:22:40 2025 by rpki-client