Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/FWGPVLEYEL9z4Y0F4eDwul13f-I.roa
File: FWGPVLEYEL9z4Y0F4eDwul13f-I.roa (raw, json)
Hash identifier: 9eGAAs0Yq9GvDXlZXDaYYQ2cxOO7RGn2Ur7YsWYhLdM=
Subject key identifier: 15:61:8F:54:B1:18:10:BF:73:E1:8D:05:E1:E0:F0:BA:5D:77:7F:E2
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A05BD7EC7B647AE573C99CFA02A6B4B54F
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/FWGPVLEYEL9z4Y0F4eDwul13f-I.roa
Signing time: Tue 01 Sep 2026 07:21:12 +0000
ROA not before: Tue 01 Sep 2026 07:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 80.174.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:d7:ec:7b:64:7a:e5:73:c9:9c:fa:02:a6:b4:b5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 1 07:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15618f54b11810bf73e18d05e1e0f0ba5d777fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:fc:39:2d:a2:10:5a:be:10:7d:42:a9:a1:
94:07:9f:97:83:99:be:d9:e8:f0:25:c3:c9:e4:44:
67:ef:e1:50:e1:c8:26:6a:29:43:82:c3:4c:3e:7d:
4d:d6:80:c1:c5:f5:76:d0:00:65:5b:32:3b:eb:ab:
50:27:77:f2:f0:48:da:f2:93:4e:9a:df:ef:a5:df:
9c:7e:68:b1:97:22:ab:b2:23:ce:12:15:d2:b9:3a:
25:83:ac:eb:3d:f0:9d:fd:17:1b:1c:ac:a0:c5:0c:
86:6f:df:d9:dd:39:51:a6:5e:08:56:47:8d:8b:0e:
e4:0f:54:7a:a1:6b:ae:a7:a0:df:37:93:74:3f:c0:
1f:99:f5:51:54:9f:63:ed:3d:fe:f7:c6:a4:3b:02:
2d:f2:87:e3:0e:5f:5e:7f:46:65:c5:bc:1c:e8:0d:
10:7d:d5:e3:68:82:6e:13:72:c5:e4:5e:8c:54:40:
7b:6b:a6:2f:5d:21:9e:f2:ce:9f:04:c8:0f:d5:81:
3e:49:4a:e0:aa:3e:8a:b9:0a:cf:60:c2:43:52:f7:
9f:aa:71:f2:28:93:bf:d8:d6:cd:ed:13:f3:cb:ae:
bc:65:ea:41:5a:b2:74:57:ef:ad:67:82:c3:30:65:
0c:0e:d1:8f:aa:3c:8d:98:35:63:d2:5d:36:6b:f0:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:61:8F:54:B1:18:10:BF:73:E1:8D:05:E1:E0:F0:BA:5D:77:7F:E2
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/FWGPVLEYEL9z4Y0F4eDwul13f-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.116.0/24
Signature Algorithm: sha256WithRSAEncryption
82:95:28:fa:78:29:81:7a:4e:f8:5c:7e:c5:bd:26:51:05:ff:
7d:cb:0f:7b:a5:d4:9e:d2:82:f3:6a:e9:46:13:bc:91:8d:9d:
f9:04:97:5d:d0:0b:75:a3:6f:54:32:0e:0b:57:92:97:46:27:
29:a5:d3:23:9a:47:9c:1e:3b:18:ff:71:00:76:c4:65:59:e3:
d7:70:82:20:1c:24:98:7b:44:53:a7:8a:3b:70:c4:89:09:c0:
ff:f7:63:60:f8:31:1f:e2:dc:dc:33:a2:3e:84:a1:93:04:b1:
7b:a5:54:48:40:32:bc:8b:6f:11:56:be:31:50:36:e9:3b:bd:
9b:2a:be:5b:bc:ec:8b:92:58:8c:a4:96:d3:14:8b:9e:f3:15:
db:59:0d:f4:d4:3c:09:72:4f:42:4c:b8:53:37:0d:2e:8e:70:
92:95:5a:b3:db:e1:98:c5:67:a8:a5:84:df:79:3a:78:06:24:
34:58:41:37:11:f2:b4:f1:12:fe:6f:94:a5:58:7b:36:16:e4:
a3:54:cd:04:93:57:49:a9:00:d4:15:3c:d0:a6:3d:96:3e:78:
cf:c7:95:53:8d:11:db:64:ae:7b:f8:a3:7a:53:c9:3b:d7:49:
f2:25:01:df:92:39:ef:6b:24:c6:80:3c:cb:ea:fc:5e:42:07:
28:21:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:03:16 2026 by rpki-client