Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa
File: D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa (raw, json)
Hash identifier: KpStMvfGgVTFEiCM6FyPOYlWTDixlJh6LN27+Q9VRF0=
Subject key identifier: 0F:B5:99:E1:4D:6A:12:6E:EC:EE:88:E2:53:40:C6:AB:B7:F8:CD:79
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019E9178C00EFE561566873B0CB8D63E3AF9
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa
Signing time: Thu 04 Jun 2026 07:11:10 +0000
ROA not before: Thu 04 Jun 2026 07:11:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 80.174.117.0/24 maxlen: 24
80.174.124.0/24 maxlen: 24
80.174.125.0/24 maxlen: 24
80.174.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:78:c0:0e:fe:56:15:66:87:3b:0c:b8:d6:3e:3a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 4 07:11:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb599e14d6a126eecee88e25340c6abb7f8cd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:ae:18:bf:bd:d8:5f:47:a3:17:6c:75:e4:
7d:7d:57:4e:fb:20:bb:96:0c:43:6a:1e:b1:3a:d1:
b9:0e:00:31:28:32:f5:6f:a3:d5:cd:c2:d6:d2:be:
f7:89:9a:87:75:b5:48:c6:87:19:55:af:64:83:24:
24:5f:a4:64:2d:cd:4f:a3:fa:60:70:d9:41:4d:02:
29:ba:cd:87:db:60:5e:79:9f:a9:a0:98:e9:db:f6:
32:2d:e1:9d:ba:a0:3b:e1:8e:c1:ac:f2:5a:c1:fb:
ab:07:b5:e9:c8:1a:09:17:14:e2:3e:3d:fa:3e:a9:
42:8b:90:66:c8:ef:da:66:23:9e:b5:9a:57:88:bc:
a2:5c:c4:d3:3f:ee:ac:ce:0d:63:1c:f4:cc:80:a2:
43:ef:47:9a:5f:d8:45:5d:b3:b5:db:13:75:df:1d:
86:2d:e5:93:38:0f:10:33:a6:a1:8d:3f:6a:74:02:
be:dc:a7:cf:1f:32:c3:02:be:6e:d5:a1:bb:66:30:
fa:d5:29:c4:3a:02:f4:64:e5:a3:09:fb:65:f6:2d:
6d:70:03:ea:19:64:e1:f0:d6:03:3f:2c:fe:9e:b0:
85:d4:f5:54:ff:96:75:97:3e:29:69:f1:df:5b:54:
fa:b0:12:a3:73:ec:14:a0:be:a5:0d:9d:6e:98:b2:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B5:99:E1:4D:6A:12:6E:EC:EE:88:E2:53:40:C6:AB:B7:F8:CD:79
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.117.0/24
80.174.124.0-80.174.126.255
Signature Algorithm: sha256WithRSAEncryption
bb:38:12:5b:fe:2b:f1:26:20:93:bf:06:85:97:d3:67:2d:41:
85:a5:a2:a4:02:34:2b:e1:79:5d:48:58:8a:77:f1:c1:8b:f5:
9a:2a:87:7c:a5:a7:67:5a:d9:32:e8:32:3a:aa:9e:07:45:39:
32:f8:e2:d3:72:c6:9a:af:57:7b:4e:ed:c6:63:4c:3c:d5:d5:
37:0e:5d:fa:d3:0b:2b:84:56:f5:d0:da:8c:ab:7c:18:0e:2b:
c5:f4:a7:af:c9:29:9a:52:03:5c:9e:3b:1a:cd:5f:f1:6e:39:
89:b7:fd:63:f0:f9:6c:65:c5:b3:ea:18:28:ce:d1:ec:f1:81:
a9:8e:5d:56:63:c5:c6:f1:ca:79:54:74:e7:ca:e5:48:41:95:
b6:ec:24:e5:11:ac:85:50:a8:a8:01:f4:4f:d1:01:72:df:a9:
85:2a:ab:53:82:e5:ef:a1:47:8f:b6:1b:21:e3:b2:70:e2:6c:
92:53:26:64:48:a0:b0:0b:b7:9b:fa:f2:3b:55:4f:db:56:eb:
29:7f:79:af:7a:b2:43:f3:ca:8d:15:30:2f:9b:f8:f3:7c:4b:
68:c2:fc:94:13:2e:f1:98:95:32:71:3e:aa:88:f3:17:61:31:
d8:f3:70:5d:f1:24:30:92:4a:47:14:76:9e:e5:1c:f8:6d:a2:
42:94:b4:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:47 2026 by rpki-client