Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/kD_ms_NkZ-KjbPdKr1wKqW0seC0.roa
File: kD_ms_NkZ-KjbPdKr1wKqW0seC0.roa (raw, json)
Hash identifier: M0JEFgunQioaQ+JSjl+z48NCTrDjDvoubbl8wQ4xw5c=
Subject key identifier: 90:3F:E6:B3:F3:64:67:E2:A3:6C:F7:4A:AF:5C:0A:A9:6D:2C:78:2D
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A0F33AEACBA16012368D87928442EA489A
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/kD_ms_NkZ-KjbPdKr1wKqW0seC0.roa
Signing time: Wed 30 Sep 2026 16:51:59 +0000
ROA not before: Wed 30 Sep 2026 16:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 80.174.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:3a:ea:cb:a1:60:12:36:8d:87:92:84:42:ea:48:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 30 16:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=903fe6b3f36467e2a36cf74aaf5c0aa96d2c782d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:6d:5e:47:11:d5:3b:bc:af:db:e5:a6:5d:
36:d7:5f:a4:82:9b:c0:55:06:9f:f7:49:32:e2:1e:
e7:ec:ef:df:b0:2b:d4:cd:c2:4a:dd:77:5c:fd:ae:
42:30:81:16:a0:eb:cf:69:13:2c:71:ed:8f:e6:ce:
42:16:1a:35:cb:74:46:37:45:7d:cc:85:a4:b1:da:
b4:18:0c:88:54:9e:ec:31:9c:00:eb:07:2f:ec:4f:
0b:76:35:af:3c:1b:4e:2f:00:83:4e:11:94:a4:17:
aa:b4:bb:90:80:7d:40:16:cb:ad:30:47:59:a4:28:
96:ce:08:ed:a9:19:9b:2a:67:0c:33:98:ae:80:24:
f7:d8:3e:03:39:22:9e:e2:59:a1:42:ac:c1:30:99:
eb:1d:36:d7:42:77:17:15:49:91:03:c3:5b:39:db:
f2:cb:f7:cc:b5:9f:08:98:69:87:d5:29:ee:af:bb:
d2:25:4d:f6:ab:03:ab:60:24:5c:13:28:a3:48:86:
34:ed:99:dc:0d:c6:32:b7:73:4a:fb:40:e6:48:8a:
29:d9:0b:ac:ef:86:ec:77:e8:41:23:95:26:6b:68:
c3:c6:d0:5d:5e:68:c6:c1:f0:1e:ab:38:46:92:f2:
ca:c6:36:fc:ad:99:32:bc:4c:14:53:27:65:21:3a:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3F:E6:B3:F3:64:67:E2:A3:6C:F7:4A:AF:5C:0A:A9:6D:2C:78:2D
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/kD_ms_NkZ-KjbPdKr1wKqW0seC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:51:33:65:9b:8c:35:15:31:4b:11:6f:46:ba:f5:a5:a6:ed:
f6:02:f7:ea:dd:34:7d:60:b6:64:d0:3a:ee:88:6c:ca:cb:20:
d2:f6:27:2a:cc:2a:43:09:1b:7c:2d:65:85:17:16:c3:45:f3:
ee:19:0a:db:ed:1b:c9:bf:62:70:5b:84:f4:0c:18:fd:bc:88:
41:3c:85:ca:26:1d:db:38:b8:07:10:09:5c:9d:dc:34:35:8b:
2c:37:a3:30:8a:7f:73:4f:c5:56:8c:a0:75:22:42:fa:d8:22:
95:53:41:3e:61:b3:05:ad:91:66:2d:60:2c:1c:d4:fe:73:76:
cc:16:ec:c9:5b:7e:ae:97:86:bd:2e:16:06:90:a4:ae:71:e0:
d2:66:6a:77:70:59:45:3a:d8:21:9a:c9:8c:01:fc:8b:d7:bf:
a0:87:ff:3f:67:1f:6c:26:ae:9d:12:a0:0c:bf:0b:19:8a:f6:
aa:80:bd:e8:30:14:b8:04:8d:1a:d2:23:66:7d:d6:7e:9f:a6:
d9:4d:36:7a:12:65:d2:9f:21:8e:ec:0c:fd:83:46:0d:24:70:
b7:b2:d8:ec:e0:69:a2:98:ac:80:8d:e6:62:2d:28:86:db:30:
d0:d0:0b:db:27:43:f2:32:c3:3f:01:3c:de:bf:de:34:35:36:
4b:1f:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:53:56 2026 by rpki-client