Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/5KnxkGLZoDnpgGUpqxmysgAsAkU.roa
File: 5KnxkGLZoDnpgGUpqxmysgAsAkU.roa (raw, json)
Hash identifier: n+IoX7kJHJkkF/9WFvqcSFByGCnIIqQVF7iQS/o3IcE=
Subject key identifier: E4:A9:F1:90:62:D9:A0:39:E9:80:65:29:AB:19:B2:B2:00:2C:02:45
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A19B8D80EE31603DA2192902D018E2069A
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/5KnxkGLZoDnpgGUpqxmysgAsAkU.roa
Signing time: Mon 02 Nov 2026 09:18:24 +0000
ROA not before: Mon 02 Nov 2026 09:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 80.174.108.0/23 maxlen: 24
80.174.119.0/24 maxlen: 24
80.174.120.0/24 maxlen: 24
80.174.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:8d:80:ee:31:60:3d:a2:19:29:02:d0:18:e2:06:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 2 09:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4a9f19062d9a039e9806529ab19b2b2002c0245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:ae:c8:07:c5:94:6d:55:ca:5c:62:72:df:
ed:d1:04:cb:4b:2f:19:3d:a7:7e:c6:a6:bb:5d:2c:
81:7e:72:04:29:72:85:0d:64:8c:39:00:c2:fd:b2:
8d:3b:4f:8e:cc:d2:b6:7a:e2:c8:8b:e2:ef:1a:e2:
02:bd:33:8d:4f:2f:07:a5:b0:1f:41:d3:ad:50:47:
e8:29:6d:68:cd:83:3e:ff:8e:fe:15:50:52:95:fb:
a3:1c:4b:22:64:61:57:1d:bb:41:2e:07:01:5f:a0:
9b:82:c3:32:e7:ec:b1:31:e7:b7:3b:1b:d0:a0:10:
6b:0f:1e:87:32:27:c6:fe:16:ad:05:ce:3c:36:77:
72:d2:0c:77:c5:76:af:38:fb:a1:58:04:6a:51:c6:
a5:68:c7:df:9c:89:7f:ac:88:0f:96:cd:57:22:6d:
cc:91:b1:c7:39:2f:79:3a:bd:9c:6a:e7:1f:5c:4e:
bb:8f:bf:4d:a9:09:a2:8d:d8:c3:b7:04:00:a4:08:
8f:c7:c8:28:5b:85:7f:14:82:7c:da:4d:9b:3e:56:
55:65:e3:54:28:db:fe:3e:11:d6:88:42:15:28:41:
09:e4:c4:d4:79:c5:5f:e7:72:27:36:3c:72:dc:22:
20:ce:cd:49:45:4e:d1:f0:35:02:44:83:03:e5:e8:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:F1:90:62:D9:A0:39:E9:80:65:29:AB:19:B2:B2:00:2C:02:45
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/5KnxkGLZoDnpgGUpqxmysgAsAkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.108.0/23
80.174.119.0-80.174.120.255
80.174.127.0/24
Signature Algorithm: sha256WithRSAEncryption
94:51:95:5a:d0:90:5c:22:f5:19:1e:2f:98:6b:20:84:77:17:
e5:ae:d8:6e:9d:d7:a0:f9:8d:61:34:fd:9a:84:72:f8:0e:e6:
23:ff:7b:a2:cf:6c:09:f2:5f:62:83:2d:3c:64:e8:b6:ec:15:
00:f9:39:3f:08:5d:89:55:c2:02:ef:5d:42:ca:e6:8d:1c:d3:
00:c6:a8:93:48:c0:2d:fb:24:2d:11:bb:85:fa:e6:f2:21:d0:
32:84:8b:2e:97:0b:ef:ce:ba:e3:8a:b5:04:3e:0a:13:31:c5:
b0:cf:d8:a5:7b:d4:04:33:1c:dc:63:4b:55:44:56:ed:f9:40:
ad:e2:af:d9:f5:9c:d6:09:d7:22:27:f3:a1:06:cb:1f:a0:09:
43:29:9f:ce:84:c5:7d:2e:6f:b7:79:a1:96:85:6d:1d:b6:e6:
80:a2:75:6b:bf:03:a3:2a:ad:87:32:55:5e:f0:87:39:32:32:
06:28:61:70:e9:72:56:c4:bc:c1:78:66:93:dd:05:f2:69:e4:
dc:04:20:5b:9e:e4:e9:80:d4:cf:d1:46:98:42:c8:a5:5e:e2:
a9:51:b7:5b:2c:fd:d4:ca:52:f4:9e:36:f5:71:bd:c8:62:8a:
3c:e2:a2:45:70:d5:c1:85:a2:78:78:ce:be:dc:0c:c5:b1:03:
94:5c:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:38:46 2026 by rpki-client