Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa
File: JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa (raw, json)
Hash identifier: LnpktCIb6RF6zzxK4zr5D3vSGTrAo2pAVOT0PFiTHVI=
Subject key identifier: 26:8A:8A:9B:CB:0C:03:75:2E:F1:B7:EF:42:A7:8A:77:36:3A:8E:8A
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019CDE271C8F11C8EF7E6D1C4F0BCAF911EB
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa
Signing time: Wed 11 Mar 2026 18:27:11 +0000
ROA not before: Wed 11 Mar 2026 18:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 80.174.192.0/22 maxlen: 22
80.174.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:27:1c:8f:11:c8:ef:7e:6d:1c:4f:0b:ca:f9:11:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Mar 11 18:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=268a8a9bcb0c03752ef1b7ef42a78a77363a8e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:66:f8:1e:ed:eb:cf:58:21:10:c2:ae:f1:
10:59:51:39:e0:0c:73:da:2f:16:a4:b4:0c:c2:0c:
9a:4e:9f:13:05:30:24:97:f1:fb:c5:e8:7f:1c:51:
ad:15:9b:05:92:0b:ec:3d:ec:00:7e:df:bc:95:6f:
2a:87:d3:78:dc:20:0c:22:83:98:f0:60:7c:39:70:
27:7a:f7:87:f3:3e:24:f8:02:00:d7:05:49:84:b8:
e7:e6:55:fd:5b:e6:1d:e2:bb:8e:a7:27:4e:be:08:
30:ba:af:96:15:d3:22:dd:a4:e3:e1:53:03:85:c7:
c3:e3:11:ed:25:bf:1a:8c:67:e6:49:53:f3:5b:56:
ea:be:0b:a7:24:b5:48:92:3d:5b:60:d9:f8:30:b5:
8a:59:88:63:8f:9d:d2:d1:ff:e3:a2:5e:59:d3:58:
7d:89:0b:93:a0:6b:b1:73:b5:16:d6:69:27:bd:c4:
a3:83:38:5e:28:77:b1:c2:a5:ea:4d:ac:16:62:8e:
b5:80:0e:19:fb:41:b0:cf:dd:ff:3b:a5:04:e0:67:
7f:23:1f:34:1c:7e:9c:f7:70:ef:8c:9d:e6:25:bb:
47:f3:84:c9:20:e4:bd:c9:ce:cb:e2:70:64:df:00:
38:f6:b9:f5:41:95:84:8f:56:b6:50:89:f3:b7:61:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:8A:9B:CB:0C:03:75:2E:F1:B7:EF:42:A7:8A:77:36:3A:8E:8A
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.192.0/22
80.174.208.0/22
Signature Algorithm: sha256WithRSAEncryption
50:72:58:97:74:63:15:ca:96:a5:f2:cd:68:27:a0:0b:4e:2c:
fb:3e:c2:14:94:de:7e:9a:88:1b:a1:be:8e:02:48:02:c1:99:
1b:d6:5f:41:bf:0f:71:c1:70:21:08:5d:8a:ab:4d:19:ca:1b:
26:aa:78:09:31:c9:49:d8:16:f7:61:ef:90:c4:8b:fd:9d:a0:
19:a9:e7:0e:fc:77:68:4a:cb:69:40:13:b0:81:5e:7b:ca:57:
12:04:10:99:9b:92:02:78:2b:37:ac:d2:7d:15:1e:d9:4a:7e:
44:00:bd:8c:69:33:76:1d:c5:1e:62:d0:a2:f1:fa:c2:64:89:
83:75:d7:0f:9a:da:97:5e:0a:dd:a3:f5:8c:5b:12:81:c6:83:
ed:61:20:9c:6b:06:cf:19:2e:36:7a:84:28:d4:2b:d1:ec:e5:
74:e5:79:32:e6:b2:02:57:d0:db:4f:46:5c:b8:99:39:fc:4a:
7a:1a:71:07:8d:61:70:88:71:51:3f:f8:0a:5e:91:3a:21:7c:
46:42:6e:32:c1:58:60:79:a6:2d:56:da:98:85:54:a7:49:c0:
57:4c:9c:9f:73:df:aa:9c:d6:93:ce:11:79:52:58:53:25:2b:
bc:9d:29:b9:4e:4a:de:be:ff:64:49:c5:75:80:0b:e3:c5:70:
6c:27:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:05:55 2026 by rpki-client