Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0BgZTv7QXJlAZiTUHRagH3BQkp0.roa
File: 0BgZTv7QXJlAZiTUHRagH3BQkp0.roa (raw, json)
Hash identifier: 1Mi6r34YcOgbA3mJxnRLp1QOHS59HC92Y/0BpqQFJkY=
Subject key identifier: D0:18:19:4E:FE:D0:5C:99:40:66:24:D4:1D:16:A0:1F:70:50:92:9D
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F4C241FE81E2FDBC3A78F03187DC5E790
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0BgZTv7QXJlAZiTUHRagH3BQkp0.roa
Signing time: Fri 10 Jul 2026 13:07:43 +0000
ROA not before: Fri 10 Jul 2026 13:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.174.136.0/22 maxlen: 22
80.174.140.0/22 maxlen: 22
103.228.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:24:1f:e8:1e:2f:db:c3:a7:8f:03:18:7d:c5:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 10 13:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d018194efed05c99406624d41d16a01f7050929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:24:5e:94:14:ee:76:81:d9:f9:ad:f2:89:
06:b7:3f:7b:11:00:e4:22:0b:21:c2:a5:b8:07:0e:
21:6a:a6:cd:ca:7b:96:13:07:4a:23:09:df:2a:e9:
bd:49:d3:0d:b9:c4:74:4c:28:67:6d:db:19:43:39:
bd:3b:48:b1:6c:e7:82:f3:ca:eb:db:9e:0d:e7:16:
d2:1c:99:90:79:7e:34:cf:b2:73:4c:5e:38:a0:8d:
0d:94:25:b9:b6:e7:c5:aa:b5:08:35:e9:ad:35:85:
b0:3e:a1:9c:f7:e8:28:18:0a:e1:ba:4b:2e:00:f0:
88:27:86:38:76:b5:91:05:a5:2f:a1:4c:af:63:c5:
a4:d2:38:4e:65:85:4f:c4:d5:a3:0d:cb:6e:9b:13:
b1:b7:a6:06:e3:8d:cd:76:20:9c:dc:2c:79:71:e2:
f3:8f:9e:27:cd:d5:b9:8a:6d:1e:eb:2c:83:2c:61:
25:1b:19:b6:ea:d5:ea:44:4e:69:08:17:6f:37:17:
a3:d5:8c:dc:e9:a3:05:0b:cf:2d:77:81:a7:59:5f:
10:fe:4e:53:58:e5:af:93:9c:f1:e1:0b:3a:53:87:
8e:ae:27:72:17:cf:09:a6:8f:2a:02:38:e8:67:37:
f2:c2:74:ad:67:77:fc:e6:3d:a7:e2:1b:06:36:18:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:19:4E:FE:D0:5C:99:40:66:24:D4:1D:16:A0:1F:70:50:92:9D
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0BgZTv7QXJlAZiTUHRagH3BQkp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.136.0/21
103.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:3a:9c:75:d5:c1:90:ef:15:8a:ef:83:06:bd:80:f3:cb:60:
0e:63:18:97:e0:7b:4d:c4:82:63:f3:2f:84:ba:54:5f:af:41:
54:2d:48:bf:fe:c7:3d:c0:8c:69:a1:6a:e4:77:b2:ad:a9:cc:
20:6c:41:d3:d8:e4:39:65:e3:6f:51:9b:dc:35:8a:da:e3:99:
1b:d3:54:69:79:d3:83:ea:f8:11:c6:86:ca:a8:73:29:ba:0b:
80:46:4f:cc:fe:03:ca:dd:9f:e9:56:09:71:8b:86:ee:ed:f0:
c2:f0:0e:d8:29:0c:b3:fc:27:25:aa:b9:99:28:fe:5f:91:b8:
37:33:d7:da:66:22:84:74:6d:46:38:66:a7:b3:e4:3f:bb:d1:
4d:b0:79:65:fc:06:84:1a:19:51:2e:2c:90:aa:70:f6:30:0a:
42:d1:e3:e9:0a:07:dc:01:01:6f:e0:21:b4:f8:f0:8f:b1:db:
05:f2:83:3f:cc:c6:24:55:b4:75:70:75:30:c3:82:d7:34:16:
ad:91:82:c5:1b:9d:f3:34:e6:00:95:55:6e:6c:af:26:7e:94:
58:aa:03:1b:f8:ef:f4:c9:64:4b:8e:fb:77:ab:59:a8:32:98:
21:04:09:56:de:25:fc:15:a2:d0:7b:00:af:ff:c6:fb:eb:1c:
b6:38:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:53:18 2026 by rpki-client