Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PxSCzUoZfMbgHF03TRX3bgmfA-o.roa
File: PxSCzUoZfMbgHF03TRX3bgmfA-o.roa (raw, json)
Hash identifier: THAG3AXxHvAjxWFgeXw9fJRZJAX/p5TBpKYxAMpdazc=
Subject key identifier: 3F:14:82:CD:4A:19:7C:C6:E0:1C:5D:37:4D:15:F7:6E:09:9F:03:EA
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A05BD7EC13595DA8010CCA4C86893E1784
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PxSCzUoZfMbgHF03TRX3bgmfA-o.roa
Signing time: Tue 01 Sep 2026 07:21:12 +0000
ROA not before: Tue 01 Sep 2026 07:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.32.0/19 maxlen: 19
80.174.64.0/19 maxlen: 19
80.174.96.0/21 maxlen: 21
80.174.104.0/22 maxlen: 22
80.174.113.0/24 maxlen: 24
80.174.118.0/24 maxlen: 24
80.174.119.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:d7:ec:13:59:5d:a8:01:0c:ca:4c:86:89:3e:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 1 07:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f1482cd4a197cc6e01c5d374d15f76e099f03ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:86:69:da:ed:03:a2:81:16:de:1c:52:b9:
ce:65:ac:8c:04:78:63:ca:c3:cf:d3:f8:46:3b:41:
3e:5f:62:22:29:0d:1c:c5:40:f0:32:60:12:a8:2c:
b0:96:0e:af:0e:ff:15:7f:b3:3e:80:ff:4a:e1:b2:
36:2e:48:29:b0:81:fd:6e:85:ae:61:44:42:e7:4d:
45:b0:32:9b:aa:e3:9f:08:38:98:d1:cb:38:b7:eb:
15:96:4b:14:30:b0:6f:c9:86:8f:c9:1c:e1:7c:71:
53:f4:4a:44:60:34:ef:71:1a:07:a3:73:f3:a1:e8:
c7:31:b5:d4:f1:25:8e:fa:68:05:22:3c:2e:15:ef:
a1:34:1a:5b:6e:ff:0a:b0:3c:6c:14:29:b6:85:a8:
c1:34:6f:7b:68:75:5d:4c:c4:e5:90:e1:e0:8a:64:
29:1c:21:80:32:11:4e:41:ae:ed:fc:a7:54:ea:7a:
a8:d7:13:df:d9:ba:cc:75:97:6b:a2:56:dc:07:4a:
f0:bd:27:4b:7c:7d:f7:9f:26:9e:f0:34:41:8a:33:
70:27:61:7f:13:00:e9:d2:e1:d0:ad:9d:ff:7b:b8:
8d:bf:83:03:6e:c1:fe:fa:30:8c:fb:66:22:9b:9e:
4f:cb:b0:db:ee:05:b1:0a:91:fd:46:9d:47:b8:54:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:14:82:CD:4A:19:7C:C6:E0:1C:5D:37:4D:15:F7:6E:09:9F:03:EA
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PxSCzUoZfMbgHF03TRX3bgmfA-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.32.0-80.174.107.255
80.174.113.0/24
80.174.118.0/23
80.174.121.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e3:7c:98:61:af:d5:47:08:ca:cf:a9:18:38:b7:97:de:90:
b7:26:1a:91:30:68:a0:25:e0:71:67:ff:f4:e7:a5:be:42:f6:
3a:16:c0:3a:23:47:58:ee:eb:e5:58:df:8f:39:2e:56:4b:c0:
ec:a3:a7:06:b9:8d:9e:0d:f2:d7:a0:ff:b6:af:d5:62:2d:71:
46:49:6d:5a:e5:85:00:2a:e6:21:35:00:2e:3c:26:65:5b:00:
ae:f6:58:a2:62:59:d7:cd:62:07:65:1e:30:a8:11:2e:8a:d6:
be:fa:b0:97:cd:30:48:be:94:ba:db:7e:81:c6:37:a7:e8:7e:
e7:e8:af:28:88:52:ac:11:5e:e9:f4:56:6c:e5:1a:94:5c:bc:
ed:50:2c:2e:32:0c:db:e8:fc:0b:02:18:9e:c9:47:6d:c8:fb:
60:4d:3f:fc:c8:60:5d:8c:3f:cd:ec:b6:13:1a:10:84:d7:ec:
9c:62:f5:fe:15:29:d8:bd:1b:cb:1e:b5:6d:7f:ad:01:ae:36:
93:26:c5:a9:81:93:6b:c9:6c:58:83:6f:c4:ab:0e:86:44:d8:
dc:86:8c:14:5c:8f:73:32:24:b2:c9:68:70:3d:77:8b:d3:1b:
8e:16:80:71:e1:29:90:a0:9f:bb:47:86:da:cf:a2:47:d9:3e:
fb:e4:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:55:59 2026 by rpki-client