Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/_sxN__19ZJD-wDLf4-2wxc5ndzI.roa
File: _sxN__19ZJD-wDLf4-2wxc5ndzI.roa (raw, json)
Hash identifier: cDLlnQNW3AtBhQs73FYFH7LRcTVmcIP6AmZwXbvRoBQ=
Subject key identifier: FE:CC:4D:FF:FD:7D:64:90:FE:C0:32:DF:E3:ED:B0:C5:CE:67:77:32
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F1F5F8E17D3AE0F9EBB0D3CF5587A2F9F
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/_sxN__19ZJD-wDLf4-2wxc5ndzI.roa
Signing time: Wed 01 Jul 2026 20:29:43 +0000
ROA not before: Wed 01 Jul 2026 20:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42689
IP address blocks: 80.174.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:5f:8e:17:d3:ae:0f:9e:bb:0d:3c:f5:58:7a:2f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 1 20:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fecc4dfffd7d6490fec032dfe3edb0c5ce677732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:70:ad:4b:04:e3:5b:63:1f:0a:a2:b9:8e:
bd:af:9c:f6:c4:2c:ce:88:fc:e8:f6:ad:1d:4c:b5:
a3:1f:85:11:cb:01:98:59:d3:19:b9:15:95:83:86:
9a:1d:97:51:0f:cd:73:e7:2a:b0:93:42:46:71:ea:
c9:c3:a8:b1:f0:37:c4:c3:13:f1:4f:db:77:b4:bb:
a5:3a:6e:9b:0b:59:a8:bb:54:16:d6:6d:eb:b1:6a:
a7:e2:0f:f9:28:df:d9:23:df:09:86:e3:fd:69:a0:
73:72:03:e4:4e:cf:2c:e5:ba:5c:a5:87:d4:68:b8:
3e:65:c1:b7:bd:fd:52:ec:fe:f5:30:a6:0a:74:c4:
a3:c1:d3:40:42:f1:69:05:a2:88:d2:bb:38:c4:86:
f3:0d:3d:1c:f6:2f:cb:e2:95:56:f7:e1:64:7d:cb:
34:04:2c:cb:41:3a:66:d1:89:cd:10:b3:ec:c4:f0:
0b:de:24:75:dd:fa:55:c1:5f:0f:84:9b:55:ac:46:
1f:82:f0:3f:8a:ff:89:ab:ec:0f:69:82:82:67:62:
36:3a:14:df:50:f6:0f:47:e9:c1:5d:7a:24:7e:26:
06:a2:57:35:ed:70:63:b0:dd:59:2d:60:13:07:5e:
d5:fb:b5:5d:9c:46:16:2d:63:52:c3:cf:08:3d:d2:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CC:4D:FF:FD:7D:64:90:FE:C0:32:DF:E3:ED:B0:C5:CE:67:77:32
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/_sxN__19ZJD-wDLf4-2wxc5ndzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:09:d7:7a:d9:11:18:89:e6:94:a3:cd:dd:ca:18:f5:94:18:
38:76:66:e6:56:62:d4:b9:ce:82:b9:21:f4:97:dc:eb:bf:c8:
4e:5b:fb:bd:f6:4a:27:95:ff:82:c2:83:0b:38:cc:5c:48:a8:
42:9c:94:ab:a0:74:6a:87:b2:c7:55:fb:00:2d:52:96:26:c2:
3d:6c:e5:f0:40:00:37:b4:71:5c:b1:79:eb:aa:1a:27:a6:82:
34:5c:25:2d:91:e0:c0:45:09:fe:1f:21:d7:3a:58:0b:d3:fb:
e6:b4:98:19:3b:df:71:c0:3c:1f:ae:15:73:b5:e4:52:dd:57:
97:0b:9f:94:0f:8f:ca:19:a0:8a:9f:a0:07:db:76:2e:14:e9:
52:67:23:8f:b7:78:95:0e:dc:db:fc:f2:f0:3d:35:2c:02:fa:
1d:e7:db:08:99:bb:0c:c8:75:33:43:a5:fc:b7:11:67:eb:ea:
25:a5:54:98:60:9a:39:3a:6d:b1:8f:c0:de:b4:60:4d:6d:a0:
bc:c6:ce:cb:9d:4a:47:55:6d:fc:73:11:22:fe:30:02:fa:c3:
79:af:d8:f2:fa:3e:86:14:f8:a5:5e:0b:52:5f:06:34:7e:28:
02:82:bd:22:62:c2:67:13:13:26:2a:30:10:67:33:bb:c9:0c:
97:e4:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:05 2026 by rpki-client