Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/fd3VjJzp8CTFunR8EVEEcuemUoc.roa
File: fd3VjJzp8CTFunR8EVEEcuemUoc.roa (raw, json)
Hash identifier: B+IGGXksTykmWHPUVgNhXWa+PqU4Hpbyxj5vrh76T2s=
Subject key identifier: 7D:DD:D5:8C:9C:E9:F0:24:C5:BA:74:7C:11:51:04:72:E7:A6:52:87
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FC6A87125BF1F2613BA64E66431E75E40
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/fd3VjJzp8CTFunR8EVEEcuemUoc.roa
Signing time: Mon 03 Aug 2026 08:05:55 +0000
ROA not before: Mon 03 Aug 2026 08:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 80.174.2.0/24 maxlen: 24
80.174.3.0/24 maxlen: 24
202.58.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:a8:71:25:bf:1f:26:13:ba:64:e6:64:31:e7:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 3 08:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dddd58c9ce9f024c5ba747c11510472e7a65287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:6d:66:72:34:d7:bb:33:57:d4:65:b8:81:
50:8f:2e:a2:62:e7:34:1d:ef:75:45:71:aa:0c:f6:
5d:42:ea:12:0f:d5:23:52:da:26:3c:27:f7:30:5d:
01:9a:25:d6:f9:1f:25:7e:a3:0d:5a:f8:79:f4:89:
37:19:80:3d:cc:70:4a:2e:9d:5f:54:84:eb:7a:37:
e3:e6:90:0d:60:19:cc:a3:cb:1a:2c:0d:96:4f:b4:
bb:a3:8b:99:df:1c:b7:4d:e4:c1:df:50:be:e1:06:
c9:70:df:fb:a3:2a:b4:68:18:44:6a:4b:cf:57:46:
d2:24:1d:e3:1e:81:32:9c:74:00:ae:60:a0:d0:54:
94:64:07:19:ed:25:ca:dd:da:62:3b:bb:41:c1:31:
10:ff:77:56:19:69:8d:04:74:c8:02:1c:45:44:f2:
a9:50:44:8d:7c:af:2a:b5:d0:5c:bc:79:a0:ad:81:
7a:a8:e3:74:6c:65:24:b4:63:b9:20:d6:69:80:e3:
46:0d:48:cc:aa:41:60:1b:26:51:ee:da:46:21:4f:
d6:be:9d:44:ba:85:4d:12:43:62:29:44:88:5e:da:
0f:cd:39:72:fd:7a:e7:d0:c7:57:68:53:dd:76:c0:
8e:ed:39:08:8b:05:ff:c8:7d:7c:b7:c2:ea:0a:fc:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:D5:8C:9C:E9:F0:24:C5:BA:74:7C:11:51:04:72:E7:A6:52:87
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/fd3VjJzp8CTFunR8EVEEcuemUoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.2.0/23
202.58.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:25:51:0b:e7:9b:2c:c1:ab:c3:7b:24:43:02:1d:a7:68:98:
49:e4:79:d3:ab:83:4e:9b:a1:e9:b6:b2:08:e1:2b:d0:08:b8:
80:57:ea:10:42:e8:ce:c9:7f:7f:7b:5b:ae:30:e0:a7:60:66:
fc:43:43:af:67:08:26:16:b5:a1:ef:5a:7f:3e:56:a9:c7:eb:
ff:2c:94:f7:14:00:2a:4b:8e:a8:07:eb:ff:c0:b9:dd:3e:f9:
d1:80:1d:91:45:a0:8e:c0:4d:dd:38:09:00:5d:ae:54:6c:71:
f6:22:3f:f5:c2:4f:40:25:80:dd:81:1b:59:3d:a6:f0:ce:d1:
0b:e6:79:07:16:6a:58:3a:25:cd:b3:37:e8:54:f1:29:34:06:
68:20:11:31:c2:47:94:99:ad:41:0a:8d:aa:92:0a:95:c0:f3:
e5:ba:fd:a6:8d:36:62:1e:88:ec:31:39:55:a1:a9:43:1f:6b:
0a:eb:23:dd:da:b0:c3:cb:62:24:c5:5c:da:0e:62:37:82:c6:
a0:f1:70:68:d1:a1:11:55:14:75:c5:36:84:b3:ce:58:98:57:
8d:2b:9c:08:90:90:6f:80:34:0e:31:92:dd:46:36:ab:1f:d8:
a9:24:42:c6:75:2b:c6:9c:ec:de:6d:4e:61:d0:2f:6a:59:48:
aa:fc:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:31:06 2026 by rpki-client