Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Uyf8BW6okoJAVLHrtu765BEkRs0.roa
File: Uyf8BW6okoJAVLHrtu765BEkRs0.roa (raw, json)
Hash identifier: c4LgAXtXLtmW6VfqTLzcqe7MRprete7qKxWBELBgOpE=
Subject key identifier: 53:27:FC:05:6E:A8:92:82:40:54:B1:EB:B6:EE:FA:E4:11:24:46:CD
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A12F1D1AAF55FA298CB298B691FA58E861
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Uyf8BW6okoJAVLHrtu765BEkRs0.roa
Signing time: Mon 12 Oct 2026 07:56:38 +0000
ROA not before: Mon 12 Oct 2026 07:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399138
IP address blocks: 80.174.148.0/22 maxlen: 22
80.174.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:1d:1a:af:55:fa:29:8c:b2:98:b6:91:fa:58:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 12 07:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5327fc056ea892824054b1ebb6eefae4112446cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:d9:6e:b5:7b:62:16:98:8b:a8:9b:7e:fc:
b9:26:d7:f1:34:31:28:62:61:b9:02:a6:b1:ad:27:
c2:54:60:48:56:2e:78:32:dc:2c:7e:bc:05:e1:ec:
34:2a:79:2b:31:9b:66:85:36:21:8b:f7:b2:73:bc:
33:d7:c7:1e:98:a5:7f:80:3a:25:c6:42:f0:a9:88:
aa:74:f7:14:21:20:91:c6:7a:9b:d1:7e:8a:47:52:
fc:de:b5:4a:1f:6a:65:6d:f7:32:17:a8:d9:41:11:
59:1c:ff:b3:dc:78:92:32:da:47:ee:f9:4b:a9:21:
d2:26:4e:5c:ca:39:52:a4:09:a8:2f:b7:38:d4:ee:
01:ba:61:b1:fc:ff:7d:8f:b1:c8:2f:92:04:c6:2c:
3b:e3:64:b8:21:00:59:ab:2a:c5:49:8b:ee:b5:db:
5b:d3:ed:a8:f0:1e:4e:60:e0:b0:83:a0:b3:68:ac:
52:5d:60:76:6d:fa:d0:5d:24:26:10:b4:c3:eb:50:
6a:85:60:8c:4e:03:4f:54:1e:0b:20:a5:c0:eb:cb:
ef:f5:ac:ec:73:80:c2:7d:76:ab:cd:15:2b:c1:7f:
93:66:31:fd:73:24:df:9d:d2:4f:73:bf:cd:37:66:
8c:84:e6:aa:87:fd:df:64:da:6c:9c:3b:14:1d:73:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:FC:05:6E:A8:92:82:40:54:B1:EB:B6:EE:FA:E4:11:24:46:CD
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Uyf8BW6okoJAVLHrtu765BEkRs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.148.0/22
80.174.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:90:ad:47:2d:0d:89:e7:6d:d2:b0:af:10:41:5b:14:58:e1:
ce:2b:4a:e1:64:79:90:81:b9:34:00:7e:cc:01:85:58:22:e0:
6d:f6:eb:5c:3e:b9:ec:19:9a:da:65:a0:09:9c:84:ac:dc:9f:
a5:c5:1d:9f:a2:c8:5f:a1:8b:0d:5c:9f:86:4b:7c:a4:8a:87:
91:0e:b3:c3:d2:32:8a:84:66:50:b6:d4:40:c2:22:ae:6e:42:
cb:28:8e:79:4a:83:0a:7e:24:ba:3c:48:e1:2c:e5:68:c2:13:
42:d0:97:61:d1:67:76:76:2c:b8:af:a5:96:7f:b9:d6:b3:cc:
26:25:ad:1a:32:3a:e1:77:db:c9:97:04:a8:e7:79:56:99:c8:
33:0e:5c:d8:69:8b:c9:da:6a:fd:54:63:14:7a:08:71:a2:69:
8c:09:6f:d1:9e:8a:21:5b:06:75:fd:25:8b:45:67:4d:39:e1:
5a:e0:56:1f:31:e6:02:bb:f8:d7:96:85:d1:c4:2b:74:62:38:
17:44:bd:13:4a:10:68:fd:74:2e:38:15:3d:39:17:d5:b8:6c:
ee:88:2b:f4:cd:1f:df:3a:30:a3:0b:ba:24:9a:c7:67:af:ff:
4e:2b:ed:7c:78:d2:be:5c:70:65:98:44:39:dc:23:9d:5f:64:
94:d0:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 16:11:15 2026 by rpki-client