Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/LjKK1f-65vQB4rIsaCQyQiYCPTs.roa
File: LjKK1f-65vQB4rIsaCQyQiYCPTs.roa (raw, json)
Hash identifier: vTaQ/XVp2KXj/UG8Xo77u6qkGmXJXRq95DuI4ylz2eo=
Subject key identifier: 2E:32:8A:D5:FF:BA:E6:F4:01:E2:B2:2C:68:24:32:42:26:02:3D:3B
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A0820EC1E3FEF162247CA61B02BBE41974
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/LjKK1f-65vQB4rIsaCQyQiYCPTs.roa
Signing time: Tue 08 Sep 2026 17:26:40 +0000
ROA not before: Tue 08 Sep 2026 17:26:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 80.174.202.0/24 maxlen: 24
80.174.203.0/24 maxlen: 24
80.174.204.0/24 maxlen: 24
80.174.205.0/24 maxlen: 24
80.174.206.0/24 maxlen: 24
80.174.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:0e:c1:e3:fe:f1:62:24:7c:a6:1b:02:bb:e4:19:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 8 17:26:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e328ad5ffbae6f401e2b22c6824324226023d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:2c:f6:d5:40:1e:ef:7e:18:7a:8e:37:73:
3d:6c:14:c8:f3:7b:ab:8d:90:cf:d5:b1:f7:06:8b:
55:1f:bd:85:f7:ce:88:cb:f2:16:9c:e9:3a:33:d3:
92:62:45:0b:00:7f:8a:9b:ef:3d:5c:1d:9c:12:4d:
46:79:3e:d8:f0:e2:5a:b8:e1:94:92:93:1c:89:d9:
31:df:c6:81:6b:c8:85:39:bd:35:32:ac:e9:d6:3f:
b9:09:93:ff:f9:a5:a3:f4:ce:80:d9:9c:c2:67:2f:
02:76:31:9a:0c:07:57:f0:60:97:96:8c:b2:99:23:
1d:6b:78:a5:94:12:c9:8b:c9:7f:2b:02:04:f5:b5:
37:6d:87:a8:55:58:3a:c9:02:ac:15:d5:8e:00:01:
30:f8:02:c0:7f:d0:dd:94:94:7c:41:91:6c:a2:4f:
4a:04:fe:ff:fd:86:a0:09:89:70:69:61:87:2c:6f:
c7:63:28:41:79:94:47:87:28:d5:75:ca:d1:bc:00:
2d:15:92:ce:55:79:1b:4e:67:0e:bc:13:8d:62:62:
b4:60:2c:c3:30:32:47:0e:52:64:cd:84:15:e9:88:
25:8e:fb:98:8f:13:7c:b4:b0:b7:c9:df:87:99:7a:
39:3f:21:ae:10:42:86:0d:c1:39:78:fe:19:04:3d:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:8A:D5:FF:BA:E6:F4:01:E2:B2:2C:68:24:32:42:26:02:3D:3B
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/LjKK1f-65vQB4rIsaCQyQiYCPTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.202.0-80.174.207.255
Signature Algorithm: sha256WithRSAEncryption
04:f3:82:67:3f:af:19:49:08:ed:58:52:f2:8c:8e:47:7f:5e:
90:40:6b:4f:3e:93:e7:80:be:96:3e:f8:35:9d:7a:94:6f:53:
8b:3a:7c:65:7e:6b:82:8c:b4:30:2d:0d:e5:8a:a6:56:79:89:
59:82:15:84:a2:c5:05:69:97:8f:7a:c2:7f:96:ff:0c:00:91:
e6:30:76:cc:b7:25:8d:6f:38:14:cd:e8:9e:9f:49:cd:a4:4b:
8a:87:f0:a9:0c:f0:b2:a7:fc:a3:2a:90:45:cb:62:5e:30:ac:
e6:89:60:2e:85:6f:44:69:e6:87:a3:a6:f5:47:36:3d:66:08:
ee:62:8d:a1:6c:0b:e6:86:ee:17:a8:a9:7f:60:fa:47:1b:d3:
5a:c8:d1:59:98:89:27:aa:db:eb:89:1e:72:ae:5b:54:34:79:
5d:dc:74:91:ff:f7:5e:27:83:26:18:1b:5f:a4:e1:f5:1d:91:
f6:67:9e:da:a9:31:94:bf:a4:c0:c6:c5:9e:da:56:ad:34:88:
fd:39:60:a6:be:91:0c:eb:3a:47:da:bd:19:9c:28:36:cc:23:
d2:ad:0b:28:1a:89:14:1f:71:e2:d5:d8:8e:f6:7c:c1:9a:15:
94:a7:22:ab:96:ae:0e:af:c1:ff:96:d0:40:c5:72:bb:48:6b:
2a:39:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:56:08 2026 by rpki-client