Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/T9ZGE0G233R_qdEjhBn94SE5GLs.roa
File: T9ZGE0G233R_qdEjhBn94SE5GLs.roa (raw, json)
Hash identifier: +c2x1vFZGE/W3PbJsVdRsUD53ErIQh3JJCqxhyMvMlY=
Subject key identifier: 4F:D6:46:13:41:B6:DF:74:7F:A9:D1:23:84:19:FD:E1:21:39:18:BB
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A143C9B3720C8C35BBBBA69FA85AE2CAFF
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/T9ZGE0G233R_qdEjhBn94SE5GLs.roa
Signing time: Fri 16 Oct 2026 08:17:34 +0000
ROA not before: Fri 16 Oct 2026 08:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 80.174.172.0/22 maxlen: 22
80.174.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:c9:b3:72:0c:8c:35:bb:bb:a6:9f:a8:5a:e2:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 16 08:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd6461341b6df747fa9d1238419fde1213918bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:8d:26:8b:95:f4:2e:82:f1:ff:23:d8:a1:
ee:fa:aa:78:17:1e:d9:69:dc:b5:5f:c9:26:f8:a1:
32:c7:55:d4:70:14:71:15:51:6b:1f:60:c7:a7:fc:
b1:38:1a:86:0b:d0:69:29:2a:1c:21:56:4f:c6:27:
e6:d0:1f:30:34:49:68:2a:c1:ee:8a:17:ba:6d:72:
40:1f:08:c7:b4:75:9e:e4:a0:1c:6f:e3:88:e8:94:
f9:a5:da:36:71:ef:c0:14:0a:ca:ba:1d:e4:86:ab:
ed:95:4a:05:42:fa:5c:d8:52:49:35:6c:34:52:ca:
5f:c0:b6:86:ff:d1:32:99:b3:69:2c:90:73:b4:30:
e3:58:77:46:37:45:8b:11:40:e1:40:17:d9:b5:0b:
84:6c:0c:19:d8:9c:5b:53:2c:24:95:8a:da:52:bd:
69:34:a9:97:de:6c:64:f4:5c:a6:9b:44:39:f2:a5:
ca:0e:23:98:f6:56:6e:22:c8:79:71:5a:00:86:8d:
af:f0:7a:7b:16:79:2c:ee:39:2f:72:d4:b4:19:30:
7a:5c:6e:a0:bc:d8:97:f7:4c:22:cd:f6:ad:33:56:
3d:fa:70:3d:7e:b7:bc:ce:3f:3e:ec:d1:d6:3c:23:
4b:78:59:50:56:51:ec:da:70:7c:35:53:27:ce:32:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D6:46:13:41:B6:DF:74:7F:A9:D1:23:84:19:FD:E1:21:39:18:BB
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/T9ZGE0G233R_qdEjhBn94SE5GLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.172.0/22
80.174.188.0/22
Signature Algorithm: sha256WithRSAEncryption
40:7e:7d:a3:70:91:13:80:4d:fa:97:41:27:6c:c7:76:06:26:
ea:91:ab:83:ad:a3:89:05:2f:37:e6:4e:1c:9d:5f:6d:4d:1f:
5d:0c:a3:71:2d:b8:d1:85:a9:db:f0:dc:9d:6f:9d:c2:33:64:
e5:7b:8f:81:7b:31:b2:ab:6f:d3:8b:0e:b4:7d:da:66:09:c2:
12:a1:3c:fc:b8:1d:0c:ed:c7:ee:16:a2:f3:81:6b:91:d0:06:
fa:d3:b7:42:2d:64:92:e1:48:d0:33:da:f5:e9:c8:0b:75:5b:
94:9d:48:81:e6:20:4b:15:30:90:8b:fa:7c:c1:69:22:ec:1a:
e0:2a:d9:9c:eb:b2:05:ee:89:5b:8a:3c:6c:4d:65:49:97:cf:
78:76:f0:05:f0:49:7a:41:04:b3:da:9c:91:5b:f1:dc:7d:4f:
10:c8:31:e9:a8:b5:4a:ad:ae:39:63:95:56:12:17:5b:a4:d0:
75:51:b5:ec:eb:57:0b:2a:6c:bc:a6:b5:79:f6:17:a7:2c:1d:
66:52:03:3b:53:a8:95:3f:77:b2:e4:d6:55:4f:7d:fe:c3:8f:
5a:f3:23:5e:ff:a6:73:51:30:05:82:e2:aa:5a:11:c5:ea:a0:
8f:53:58:9d:e7:42:80:56:f9:70:68:0b:9d:25:1a:e4:8c:f1:
5a:8b:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:16:55 2026 by rpki-client