Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Ci1HRR1T1vCZLHSaKTAAz_CUAxk.roa
File: Ci1HRR1T1vCZLHSaKTAAz_CUAxk.roa (raw, json)
Hash identifier: /Op8Zu83YdPANx3qD99A65tF36SZGHxy+IgrsvHIHY0=
Subject key identifier: 0A:2D:47:45:1D:53:D6:F0:99:2C:74:9A:29:30:00:CF:F0:94:03:19
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FD186BC008854BC9951F95923460C9E48
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Ci1HRR1T1vCZLHSaKTAAz_CUAxk.roa
Signing time: Wed 05 Aug 2026 10:44:55 +0000
ROA not before: Wed 05 Aug 2026 10:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 80.174.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:86:bc:00:88:54:bc:99:51:f9:59:23:46:0c:9e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 5 10:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a2d47451d53d6f0992c749a293000cff0940319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:96:e1:9c:11:cb:02:4f:73:b7:cc:18:82:
d3:f0:93:06:15:4f:3f:a8:a4:c9:18:9b:9c:06:c7:
63:cc:4b:20:d0:75:c1:dd:a9:f5:41:20:da:cc:c3:
61:3f:f9:2b:57:d6:14:39:59:69:e9:f7:6d:e8:02:
c5:f5:4e:e8:fd:4d:ef:44:ed:bd:23:6e:25:a8:0f:
fb:c7:e7:7d:b7:1e:bb:09:ce:b6:02:a2:a7:48:5d:
df:e8:0f:a8:5a:13:6f:bc:7c:0b:f1:f9:b3:85:5b:
f5:de:28:bd:c9:ca:85:98:89:46:df:2e:b2:3a:91:
3c:4a:bc:1a:43:ef:3b:a6:be:96:e1:d5:ff:37:4b:
2d:dd:23:23:53:50:e0:bd:29:86:5b:3b:a3:48:12:
6e:57:5a:27:4b:5a:da:a2:9d:76:8e:79:55:e0:51:
19:54:8d:87:e6:bf:c4:e2:59:d9:cc:77:50:14:38:
fe:a4:b9:19:c7:e9:c7:15:f4:7c:f0:44:ff:8d:ad:
6e:ad:aa:ab:d4:46:0f:42:69:61:7f:bc:dc:5e:2b:
0e:b3:26:5c:f4:98:2e:12:d8:c3:b0:84:7b:11:55:
c2:77:69:5e:b3:c0:da:de:c8:c5:1d:cd:36:06:b8:
b7:ab:c0:77:ce:b5:32:d6:6f:e2:d6:70:aa:c0:df:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:47:45:1D:53:D6:F0:99:2C:74:9A:29:30:00:CF:F0:94:03:19
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Ci1HRR1T1vCZLHSaKTAAz_CUAxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.126.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6a:cf:0f:0a:0c:ba:66:9d:09:8b:a0:6b:eb:72:e8:a8:86:
18:15:e2:38:32:2b:c0:31:91:eb:00:ba:a2:bb:d9:86:33:db:
24:9a:21:26:ce:d1:ee:2a:ae:b4:d6:f4:bd:a1:3b:7f:2c:c3:
ae:24:f0:e0:6e:b0:94:10:d8:4a:d5:d3:a9:3c:94:03:ba:f4:
11:35:3a:08:63:b6:f3:d5:96:97:30:ec:44:95:e1:d5:9b:0a:
91:a8:03:32:60:a5:51:d4:5c:ea:9a:0c:6e:09:2b:6d:ae:73:
43:74:d9:e7:1d:61:1f:2e:06:b8:e0:64:f5:24:ee:01:d3:3d:
30:cd:98:14:ec:4e:17:02:d1:de:e4:59:99:bc:a2:fc:f9:d6:
9f:1d:ea:0b:3d:2e:75:7d:cb:4e:f2:38:9e:fd:fb:5c:2f:9f:
8a:a9:29:eb:b8:1b:6c:83:ad:9e:70:47:a0:9d:2b:b7:bf:3d:
e4:76:5a:8e:d4:0e:68:38:94:f4:27:40:fb:61:49:61:02:cc:
b0:7a:03:3c:ba:7b:d3:07:dd:19:ab:22:d5:87:9f:a2:ea:5f:
e7:83:20:70:10:86:24:a7:4b:96:99:de:ca:91:f0:cd:2c:77:
7a:78:af:4e:e8:bb:6a:8b:4a:5c:27:bd:6a:46:87:0e:bb:af:
f6:6c:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:22:46 2026 by rpki-client