Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/AHMvJ_ViXTrtXxW44kDvKAu8sns.roa
File: AHMvJ_ViXTrtXxW44kDvKAu8sns.roa (raw, json)
Hash identifier: kHqX8sH8Smi9vKz7s99HUVnta/2J+a33ZKyIK2lDpzw=
Subject key identifier: 00:73:2F:27:F5:62:5D:3A:ED:5F:15:B8:E2:40:EF:28:0B:BC:B2:7B
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FC793BC3F1E139FD92B321DCA590B28D5
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/AHMvJ_ViXTrtXxW44kDvKAu8sns.roa
Signing time: Mon 03 Aug 2026 12:22:55 +0000
ROA not before: Mon 03 Aug 2026 12:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146871
IP address blocks: 80.174.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:93:bc:3f:1e:13:9f:d9:2b:32:1d:ca:59:0b:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 3 12:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00732f27f5625d3aed5f15b8e240ef280bbcb27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:7e:58:af:a0:74:f4:bf:29:c0:bc:d6:91:
a2:76:0b:e9:9d:31:ad:50:84:29:5d:29:5a:55:b4:
be:5f:5d:50:c2:9d:53:56:e0:14:ab:1a:f9:b0:16:
62:c8:65:e8:48:d6:2c:90:44:89:ed:b2:3f:ae:fc:
0d:0c:24:53:e9:85:1e:9c:5d:0e:ed:df:3d:e7:c0:
bc:1b:80:7f:13:fc:11:03:2f:d3:ad:92:d0:3c:17:
e7:b9:2c:3b:4c:fa:48:34:ad:a8:23:dd:b9:42:23:
fa:fa:0b:fa:3a:eb:52:5c:b4:91:44:22:43:6b:f8:
be:96:4c:02:bd:85:c9:72:74:37:fc:66:0e:8e:12:
9c:1f:78:ec:1b:c8:5a:6c:ba:06:f6:10:d7:04:be:
4f:a0:85:7a:8d:ab:c3:a8:15:7b:06:76:8c:96:95:
37:9e:73:f5:66:6e:e3:d4:7f:4b:34:ce:f9:47:b4:
e5:d2:79:82:cd:ac:10:44:4a:fa:16:99:db:a1:16:
8f:39:d5:3a:ce:12:58:c3:11:f0:6c:8a:e7:f8:80:
ae:24:cf:87:79:0b:d5:14:50:26:0a:40:95:95:bd:
00:48:d3:92:35:26:25:70:99:92:ad:aa:c6:a3:29:
29:4c:c5:85:11:38:27:ad:ed:ba:f4:56:3c:5b:87:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:73:2F:27:F5:62:5D:3A:ED:5F:15:B8:E2:40:EF:28:0B:BC:B2:7B
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/AHMvJ_ViXTrtXxW44kDvKAu8sns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.118.0/24
Signature Algorithm: sha256WithRSAEncryption
47:16:f5:c0:83:79:b3:aa:7e:e4:46:c3:22:ce:ae:b5:35:37:
78:4f:64:9a:c6:fe:f4:1c:4d:64:ee:00:89:ef:3f:a9:95:a6:
e7:f1:25:b9:67:e2:5b:13:4f:5a:2d:dc:1a:83:34:90:68:88:
a8:f4:21:25:30:22:41:ba:cb:07:30:f0:5b:9d:7b:68:62:11:
f9:0e:be:49:53:03:ab:7a:d7:f9:40:22:26:1a:e6:99:30:b7:
12:ee:f6:47:b7:03:eb:d2:3e:8d:95:ea:54:8f:69:ba:a4:0c:
74:62:27:65:da:75:60:88:b1:5e:1f:ef:e0:f2:f2:00:cc:c9:
d3:af:9d:77:bb:10:e5:62:fc:9a:eb:b0:6a:5a:47:4a:0d:80:
45:41:0f:fe:96:c7:3d:6b:65:0b:f9:db:5e:31:6e:d3:f0:98:
0f:dd:ad:f2:9c:73:c4:04:d2:9f:a6:df:61:58:69:79:24:bf:
da:7d:38:a2:10:b3:c5:cb:cc:7d:0f:f9:f1:96:9c:e8:d1:a6:
bd:ee:f1:c1:75:39:b6:0e:b6:a8:9f:fb:14:f2:dc:05:c5:53:
a5:e1:bb:aa:72:fb:80:3b:7a:eb:ae:ea:bb:95:d4:15:f8:eb:
f1:e7:7d:77:cf:ba:74:20:a2:fe:f9:2f:c5:0d:1e:59:df:c6:
9c:4e:ac:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:22 2026 by rpki-client