Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/C-SMFze3RzlLtWPvBdr7w-4urxo.roa
File: C-SMFze3RzlLtWPvBdr7w-4urxo.roa (raw, json)
Hash identifier: cDS/pYKVQavmuCU9pzpsswLRxfcBlggoVQcvuHLDXX4=
Subject key identifier: 0B:E4:8C:17:37:B7:47:39:4B:B5:63:EF:05:DA:FB:C3:EE:2E:AF:1A
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A17CBAE5ECC93000E6E48767A7B8A784C1
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/C-SMFze3RzlLtWPvBdr7w-4urxo.roa
Signing time: Tue 27 Oct 2026 09:39:45 +0000
ROA not before: Tue 27 Oct 2026 09:39:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 80.174.135.0/24 maxlen: 24
80.174.203.0/24 maxlen: 24
80.174.204.0/24 maxlen: 24
93.95.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ba:e5:ec:c9:30:00:e6:e4:87:67:a7:b8:a7:84:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 27 09:39:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be48c1737b747394bb563ef05dafbc3ee2eaf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:8a:ae:5e:a2:60:81:f4:cf:27:bc:78:6e:
58:43:2a:a1:14:ef:8d:f2:b9:82:b5:3b:da:2e:98:
b9:f4:8a:2d:bf:ba:71:71:44:d7:c3:1a:fc:a4:0b:
9a:39:1d:a3:21:c7:d0:29:f2:04:31:cd:f4:c9:f4:
b7:f8:08:24:91:c7:bf:68:d9:be:9f:a8:f9:5f:e7:
5d:56:47:f5:dc:7e:08:ef:a4:25:53:a4:25:7e:54:
55:57:30:a6:3f:02:38:3c:10:c3:34:99:e5:ed:9b:
4f:7b:eb:5d:f2:73:0c:b1:cc:92:1b:d4:48:3e:fb:
d2:9a:1e:49:16:6e:30:1c:2b:f0:dc:d7:85:e3:2c:
dc:83:d0:41:27:13:e0:a1:d4:85:ef:37:ce:39:b1:
37:95:3e:fb:17:5b:cd:ca:e5:5c:36:0b:60:e6:af:
03:49:6c:55:84:30:bf:f2:7a:b7:f0:53:31:8b:13:
cd:37:fb:16:8c:5e:e1:f8:e2:6c:58:3f:05:72:66:
a1:13:e6:92:8b:d8:ce:93:c4:2d:6d:ce:44:22:bd:
b8:38:56:39:fa:30:ae:17:6d:da:d3:e8:c0:eb:14:
02:96:81:56:0f:46:75:b3:41:cd:4f:33:d0:02:6c:
af:ec:eb:0e:5d:c8:f3:0d:27:10:a7:6f:41:17:b3:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:8C:17:37:B7:47:39:4B:B5:63:EF:05:DA:FB:C3:EE:2E:AF:1A
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/C-SMFze3RzlLtWPvBdr7w-4urxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.135.0/24
80.174.203.0-80.174.204.255
93.95.23.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a9:39:98:19:38:64:59:8e:97:eb:59:61:41:09:75:98:70:
9c:bc:c9:02:55:03:0a:cd:e0:6e:79:35:9e:38:27:98:a5:05:
90:14:a6:bd:43:43:ad:ad:26:ca:1a:2d:9e:5b:07:21:aa:63:
bb:ad:c1:5e:62:39:66:f3:2b:4f:50:00:a5:b7:52:55:9c:b6:
5b:dd:9c:49:62:dc:41:43:60:5a:1e:78:4a:73:53:1b:bf:7c:
4d:be:1a:77:d8:e2:a4:72:bc:be:1d:27:68:fb:90:b1:4a:37:
87:d3:62:06:1d:7f:4e:5f:41:2f:60:3a:c2:d4:c5:3f:18:85:
8e:41:8d:a8:ef:4e:89:ea:48:a2:0d:97:1d:8c:41:62:8b:30:
ef:40:ef:df:0b:5f:1b:f3:b9:fb:e1:83:86:6e:e8:40:c3:75:
e5:90:00:cf:84:95:bf:e0:c1:ae:3b:f2:02:dd:f8:a4:60:b7:
cb:5c:b8:6d:2c:12:59:0d:15:6c:86:80:fa:c4:6d:38:4b:c4:
e0:07:c3:7c:38:94:bf:d6:0c:af:34:d3:2e:ce:21:9b:eb:08:
1e:9f:f1:63:2e:a4:ed:2a:74:ab:55:b5:5f:6e:be:43:da:6a:
31:fe:ef:0e:70:f5:95:d7:97:d1:c7:75:c8:92:67:1f:0c:8e:
dc:40:14:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:12:26 2026 by rpki-client