Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JDpgbDP3ZVlaaAg9RZmB7_K2p5g.roa
File: JDpgbDP3ZVlaaAg9RZmB7_K2p5g.roa (raw, json)
Hash identifier: TZQzM+v+cQ3PtbjCXkTdxt6XlCUxvw6e1kYaz42nPhM=
Subject key identifier: 24:3A:60:6C:33:F7:65:59:5A:68:08:3D:45:99:81:EF:F2:B6:A7:98
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019E465070D690C8EDCDFD936C746B3DA453
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JDpgbDP3ZVlaaAg9RZmB7_K2p5g.roa
Signing time: Wed 20 May 2026 16:55:37 +0000
ROA not before: Wed 20 May 2026 16:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61597
IP address blocks: 80.174.168.0/22 maxlen: 22
80.174.172.0/22 maxlen: 22
80.174.180.0/22 maxlen: 22
80.174.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 08:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:50:70:d6:90:c8:ed:cd:fd:93:6c:74:6b:3d:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: May 20 16:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=243a606c33f765595a68083d459981eff2b6a798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:1d:b4:6a:4f:36:96:b3:73:3b:e8:09:3d:
60:7a:3a:89:03:b9:0f:57:6c:f5:03:34:46:51:21:
9b:65:c6:00:20:79:21:7f:92:85:9c:3e:58:97:03:
34:49:ff:e7:99:09:f2:3f:b6:50:46:fc:59:5c:0a:
4c:5a:0e:33:6b:6c:1a:19:f6:5a:c9:ad:4d:e0:4c:
10:c3:70:f4:3d:8c:62:58:1d:00:98:2e:25:86:ac:
fb:7a:aa:c3:53:c5:7b:1e:f7:2e:da:73:9e:e0:8f:
21:64:ac:2e:22:17:9a:52:9d:9d:35:67:64:e7:cb:
57:0e:58:8a:03:86:25:fd:8b:eb:ff:06:5c:71:48:
f3:79:ca:b9:e3:9c:0f:a0:34:e9:9f:99:02:84:57:
93:ca:26:88:58:6b:29:e7:f5:a1:1f:97:09:7b:bb:
6f:f0:61:b8:4e:86:63:ac:5f:e8:cf:0f:8a:de:c3:
21:30:b6:ab:ca:35:75:19:e0:91:77:af:86:21:c9:
be:9d:ee:99:4d:a2:57:0f:34:6e:ef:a6:13:61:a9:
8a:08:ac:80:a3:df:73:74:0d:80:55:ee:12:33:50:
53:06:61:e9:7a:03:9c:2e:73:90:b0:38:f2:e2:9f:
43:a7:db:72:0c:f0:cc:73:9f:76:66:76:0c:8d:3b:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:60:6C:33:F7:65:59:5A:68:08:3D:45:99:81:EF:F2:B6:A7:98
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JDpgbDP3ZVlaaAg9RZmB7_K2p5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.168.0/21
80.174.180.0/22
80.174.188.0/22
Signature Algorithm: sha256WithRSAEncryption
28:15:22:67:67:d6:f6:5b:93:81:e3:19:da:d7:53:64:b6:0b:
d9:90:27:74:91:d3:1b:71:51:62:82:1c:83:88:56:b5:c7:5c:
d6:29:13:5c:70:cf:fe:79:b2:5b:55:8a:1c:de:3d:ba:9b:c2:
58:a6:f4:39:35:5c:6b:6a:df:4f:cc:a4:da:59:86:d6:95:be:
25:e1:6a:38:d9:ea:0e:e4:c3:61:95:77:c0:7b:1f:75:1a:bc:
13:cd:87:62:92:83:63:b8:06:00:a8:fd:47:03:47:10:d2:d5:
0b:5d:83:5f:d4:1c:9a:80:f7:65:6d:f4:e0:ab:5a:f3:7c:26:
b2:ed:e2:44:5a:33:c0:c8:63:8e:35:39:6d:f3:f5:39:3a:bf:
25:2d:b9:24:5d:b1:85:26:59:fc:11:79:37:b8:62:fe:36:45:
81:de:a6:ee:e3:72:bf:56:43:fb:8b:00:91:a6:6d:c2:54:c2:
4f:3a:e1:12:cc:1c:29:85:b7:14:59:67:9c:d4:85:b4:0a:26:
71:dd:8e:75:cb:d9:8e:22:5d:fb:79:99:a0:70:87:98:89:59:
84:94:b0:65:d9:77:94:00:59:e3:5a:2b:73:ad:a0:9d:33:86:
42:4e:82:04:47:0c:f8:10:8d:fc:2e:b9:71:92:5c:63:96:ac:
88:12:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:28:05 2026 by rpki-client