Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/BZNhKyxirQTqrZz2sO676oJbfs8.roa
File: BZNhKyxirQTqrZz2sO676oJbfs8.roa (raw, json)
Hash identifier: K1sB+sB0TQMkuzZgyUSkLdCVB0PSz/nPyYq4zr2kBhA=
Subject key identifier: 05:93:61:2B:2C:62:AD:04:EA:AD:9C:F6:B0:EE:BB:EA:82:5B:7E:CF
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A146B0317E3DD41A07B1F58ED155823A4E
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/BZNhKyxirQTqrZz2sO676oJbfs8.roa
Signing time: Fri 16 Oct 2026 21:48:34 +0000
ROA not before: Fri 16 Oct 2026 21:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 80.174.113.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
80.174.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:b0:31:7e:3d:d4:1a:07:b1:f5:8e:d1:55:82:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 16 21:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0593612b2c62ad04eaad9cf6b0eebbea825b7ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:fc:24:53:fe:05:cf:9f:e6:50:f2:79:d6:
06:72:11:0c:d7:b4:2a:55:d5:b9:8f:76:d3:4d:7d:
20:94:65:02:0f:a6:84:f0:bb:7b:30:04:5f:26:84:
da:ce:a0:c9:db:d4:aa:30:d9:20:f6:54:f6:3f:70:
01:1d:46:bc:d6:b1:be:45:98:1b:b5:0f:7c:80:fe:
a3:ba:e0:be:2c:93:7a:26:75:63:cb:84:05:b5:a0:
68:c4:94:69:34:85:3a:14:93:3e:31:11:63:37:12:
5b:2b:a1:43:dc:bc:0c:85:21:b1:1e:2b:db:3a:7a:
9d:97:8a:5c:2a:ef:85:67:a1:52:ed:88:a9:bc:94:
03:41:a2:a8:b6:52:f5:4e:3a:41:6c:37:89:ed:8d:
d4:76:1a:2e:ad:24:dd:bd:f5:f9:8f:f0:42:2b:49:
17:74:4a:ce:bc:99:d5:80:35:d3:57:da:ac:8f:8c:
28:74:1d:29:1c:06:21:d9:c3:5c:80:04:33:9b:a6:
7e:d2:e9:b6:5c:06:90:fb:47:c6:bb:05:99:d7:3e:
a3:e1:bd:f1:d3:b9:f7:ca:08:d1:97:fa:97:55:40:
a9:35:af:81:87:91:92:f0:78:52:e2:53:5a:95:ea:
16:e9:6f:93:e5:a4:2f:a9:88:c0:d7:eb:82:cf:4e:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:61:2B:2C:62:AD:04:EA:AD:9C:F6:B0:EE:BB:EA:82:5B:7E:CF
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/BZNhKyxirQTqrZz2sO676oJbfs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.113.0/24
80.174.121.0-80.174.122.255
Signature Algorithm: sha256WithRSAEncryption
1a:c8:5e:9c:3d:03:ea:59:fd:e0:f2:e6:3a:5f:b7:e2:5b:fd:
df:06:a7:88:32:06:42:bc:db:88:73:c8:29:2d:27:3f:04:9c:
d1:f2:38:98:b6:70:a0:a9:12:66:c4:7d:5a:1d:e5:48:d8:86:
6b:79:b9:56:3c:11:d8:19:96:61:bf:a7:c3:a4:eb:d9:8d:9e:
46:a5:96:31:62:e7:61:a2:98:b4:c3:70:16:0f:b9:82:cc:0f:
05:4d:25:4f:2b:e3:fb:f8:bc:7a:66:53:55:1c:93:2d:2e:4d:
a0:30:1f:57:a7:5b:d2:1a:4b:32:8c:ec:50:87:fe:ae:81:3b:
f1:ac:99:79:50:ea:90:1a:db:22:41:01:96:fb:24:55:e6:10:
c4:f0:82:c0:d0:f2:a4:a4:99:e8:d9:f2:f2:ae:40:59:bf:c1:
ef:0c:d7:92:4d:45:97:44:23:11:c9:51:db:29:b3:a9:2b:c6:
f2:09:2c:98:c1:68:77:07:bc:ef:3f:85:ff:a5:b8:03:c3:1a:
9e:6b:b7:91:d6:10:fc:74:69:7a:a4:45:4b:12:bc:71:9e:05:
ac:37:89:91:4a:99:b1:dd:e6:10:4e:22:cd:48:92:a0:f1:f3:
03:41:12:cc:a8:8d:35:cf:38:a1:44:cb:5d:73:79:9d:ea:3a:
06:32:f6:85
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaFGsDF+PdQaB7H1jtFVgjpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYxMDE2MjE0ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTkzNjEyYjJjNjJhZDA0ZWFhZDljZjZiMGVlYmJlYTgyNWI3ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oL8JFP+Bc+f5lDyedYGchEM17Qq
VdW5j3bTTX0glGUCD6aE8Lt7MARfJoTazqDJ29SqMNkg9lT2P3ABHUa81rG+RZgb
tQ98gP6juuC+LJN6JnVjy4QFtaBoxJRpNIU6FJM+MRFjNxJbK6FD3LwMhSGxHivb
Onqdl4pcKu+FZ6FS7YipvJQDQaKotlL1TjpBbDeJ7Y3UdhourSTdvfX5j/BCK0kX
dErOvJnVgDXTV9qsj4wodB0pHAYh2cNcgAQzm6Z+0um2XAaQ+0fGuwWZ1z6j4b3x
07n3ygjRl/qXVUCpNa+Bh5GS8HhS4lNaleoW6W+T5aQvqYjA1+uCz04rewIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAWTYSssYq0E6q2c9rDuu+qCW37PMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvQlpOaEt5eGlyUVRxclp6MnNPNjc2b0piZnM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUK5xMAwD
BABQrnkDBABQrnowDQYJKoZIhvcNAQELBQADggEBABrIXpw9A+pZ/eDy5jpft+Jb
/d8Gp4gyBkK824hzyCktJz8EnNHyOJi2cKCpEmbEfVod5UjYhmt5uVY8EdgZlmG/
p8Ok69mNnkalljFi52GimLTDcBYPuYLMDwVNJU8r4/v4vHpmU1Ucky0uTaAwH1en
W9IaSzKM7FCH/q6BO/GsmXlQ6pAa2yJBAZb7JFXmEMTwgsDQ8qSkmejZ8vKuQFm/
we8M15JNRZdEIxHJUdsps6krxvIJLJjBaHcHvO8/hf+luAPDGp5rt5HWEPx0aXqk
RUsSvHGeBaw3iZFKmbHd5hBOIs1IkqDx8wNBEsyojTXPOKFEy11zeZ3qOgYy9oU=
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:56:35 2026 by rpki-client