Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PFWhMbgBZhaqPNHfYgXnGPOOXnE.roa
File: PFWhMbgBZhaqPNHfYgXnGPOOXnE.roa (raw, json)
Hash identifier: PwiWxCoxdlxNo5gJm4d2PKlnfjYXDp7nO0zHi1Y+/u0=
Subject key identifier: 3C:55:A1:31:B8:01:66:16:AA:3C:D1:DF:62:05:E7:18:F3:8E:5E:71
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019EB22D468B13923FD95605AA2ED1F77EE2
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PFWhMbgBZhaqPNHfYgXnGPOOXnE.roa
Signing time: Wed 10 Jun 2026 15:36:11 +0000
ROA not before: Wed 10 Jun 2026 15:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 80.174.108.0/23 maxlen: 23
80.174.127.0/24 maxlen: 24
80.174.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:2d:46:8b:13:92:3f:d9:56:05:aa:2e:d1:f7:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 10 15:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c55a131b8016616aa3cd1df6205e718f38e5e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:6c:05:01:6e:26:03:3e:06:c6:d3:b3:ab:
ce:f6:c0:ce:13:02:36:ec:65:c0:4b:01:0e:0e:f6:
93:13:84:68:df:21:80:68:1c:94:e2:98:29:a2:ac:
42:5b:cc:56:f8:2c:94:27:60:81:a0:c6:1f:2c:2a:
37:c8:b2:00:d1:e3:10:ef:14:46:bf:3d:c7:e6:0a:
9e:f9:43:29:c5:81:89:85:9c:ce:54:8f:b5:4c:2f:
15:74:e6:59:60:85:75:6d:29:61:71:16:39:2b:2b:
9d:f9:7e:e1:e6:72:8f:71:60:ba:f5:68:1e:ca:13:
ab:d9:a8:35:20:cc:50:f9:13:df:2a:fe:34:8f:80:
92:58:39:4c:b3:67:6b:a7:02:f1:04:d4:2f:41:c5:
15:46:32:84:55:61:57:d9:46:01:b3:f4:5b:73:e0:
71:e2:44:16:4a:19:3f:e3:58:82:ad:ea:98:40:fc:
bc:e9:19:d9:f9:5e:b9:ce:ff:59:88:57:5e:d2:d4:
ad:d2:f5:18:b7:e8:39:72:a6:e9:70:5d:77:c7:31:
19:d5:a0:a2:cd:2c:9b:2e:a4:4e:b2:a4:12:c3:67:
56:87:b3:26:9b:ea:74:69:fb:77:9c:4d:8a:c6:83:
fd:e8:9c:3c:65:93:f0:12:a0:70:81:59:cd:6d:46:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:A1:31:B8:01:66:16:AA:3C:D1:DF:62:05:E7:18:F3:8E:5E:71
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PFWhMbgBZhaqPNHfYgXnGPOOXnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.108.0/23
80.174.127.0/24
80.174.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ad:8a:88:17:d7:f2:bd:48:92:da:57:27:f9:d9:da:da:aa:
a2:3b:1e:e3:2a:1e:68:44:20:14:65:4a:b1:1c:c4:3e:13:e8:
34:b4:50:3b:02:30:bb:20:71:c9:17:27:14:0b:d5:e7:9e:6c:
49:b8:bf:c4:34:97:eb:de:18:60:99:9a:3f:00:e8:73:9b:79:
e8:c7:e5:d1:3f:84:59:8a:06:b9:b6:56:6a:cc:de:e9:30:94:
48:42:82:5d:54:74:47:d3:95:a4:d1:6c:87:ea:62:c4:e4:07:
11:b0:77:29:49:1e:2d:26:86:fd:27:5e:28:f9:3d:60:79:e0:
7d:55:4f:f3:84:47:be:37:dd:16:d6:14:9f:ed:b0:c0:eb:9c:
0f:8b:88:6b:14:f6:d8:9f:53:d6:12:9e:6b:d9:36:35:3b:d5:
db:e6:53:3c:b2:8b:af:7b:05:91:c0:9b:be:53:f8:5e:5c:d2:
6f:0b:d1:10:fd:9b:ef:6f:8f:79:c7:b8:47:be:14:87:08:be:
65:4d:38:0d:17:6a:39:a7:11:33:9a:5c:41:c4:98:f5:01:f0:
1e:0c:ce:a4:8e:d1:9b:03:95:cd:8d:24:79:1c:e6:ba:63:4d:
70:e7:ce:9e:f0:c9:a9:d3:09:ce:83:85:5a:77:d5:89:75:9f:
65:0b:2e:66
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6yLUaLE5I/2VYFqi7R937iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwNjEwMTUzNjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzU1YTEzMWI4MDE2NjE2YWEzY2QxZGY2MjA1ZTcxOGYzOGU1ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj9sBQFuJgM+BsbTs6vO9sDOEwI2
7GXASwEODvaTE4Ro3yGAaByU4pgpoqxCW8xW+CyUJ2CBoMYfLCo3yLIA0eMQ7xRG
vz3H5gqe+UMpxYGJhZzOVI+1TC8VdOZZYIV1bSlhcRY5Kyud+X7h5nKPcWC69Wge
yhOr2ag1IMxQ+RPfKv40j4CSWDlMs2drpwLxBNQvQcUVRjKEVWFX2UYBs/Rbc+Bx
4kQWShk/41iCreqYQPy86RnZ+V65zv9ZiFde0tSt0vUYt+g5cqbpcF13xzEZ1aCi
zSybLqROsqQSw2dWh7Mmm+p0aft3nE2KxoP96Jw8ZZPwEqBwgVnNbUZZ8QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDxVoTG4AWYWqjzR32IF5xjzjl5xMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvUEZXaE1iZ0JaaGFxUE5IZllnWG5HUE9PWG5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUK5sAwQA
UK5/AwQAUK76MA0GCSqGSIb3DQEBCwUAA4IBAQAOrYqIF9fyvUiS2lcn+dna2qqi
Ox7jKh5oRCAUZUqxHMQ+E+g0tFA7AjC7IHHJFycUC9XnnmxJuL/ENJfr3hhgmZo/
AOhzm3nox+XRP4RZiga5tlZqzN7pMJRIQoJdVHRH05Wk0WyH6mLE5AcRsHcpSR4t
Job9J14o+T1geeB9VU/zhEe+N90W1hSf7bDA65wPi4hrFPbYn1PWEp5r2TY1O9Xb
5lM8souvewWRwJu+U/heXNJvC9EQ/Zvvb495x7hHvhSHCL5lTTgNF2o5pxEzmlxB
xJj1AfAeDM6kjtGbA5XNjSR5HOa6Y01w586e8Mmp0wnOg4Vad9WJdZ9lCy5m
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:48 2026 by rpki-client