Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/leVaA9OpnPMPUQjVbHEXO4EpxXM.roa
File: leVaA9OpnPMPUQjVbHEXO4EpxXM.roa (raw, json)
Hash identifier: 99aCYwqvn5FoZtfaWVvZyKteYF0Ldho/a157o6Ynt6g=
Subject key identifier: 95:E5:5A:03:D3:A9:9C:F3:0F:51:08:D5:6C:71:17:3B:81:29:C5:73
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FD0FB70FCA510359D8801D338B3BA4389
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/leVaA9OpnPMPUQjVbHEXO4EpxXM.roa
Signing time: Wed 05 Aug 2026 08:12:47 +0000
ROA not before: Wed 05 Aug 2026 08:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 80.174.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:fb:70:fc:a5:10:35:9d:88:01:d3:38:b3:ba:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 5 08:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95e55a03d3a99cf30f5108d56c71173b8129c573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:77:b5:d1:15:39:5d:aa:03:35:0c:33:66:
2b:27:b3:af:77:3f:30:88:2f:dd:19:b5:e9:8a:11:
57:63:92:2e:fd:7d:dd:b3:e3:35:bd:50:41:2c:c6:
42:b9:21:03:54:14:e6:0e:e6:68:fc:7a:cb:c8:ef:
be:ac:4a:c9:33:8a:ab:18:7f:82:a8:14:c3:c0:2e:
0c:43:dc:2a:df:0e:14:cc:7f:21:b4:46:02:7c:d8:
60:4a:14:76:a2:14:6a:18:cc:45:a5:fc:39:1a:6e:
92:f0:71:48:11:2c:41:22:35:96:cb:8c:46:f8:b0:
4a:41:37:cc:34:48:52:f6:45:cc:e6:4f:95:7d:d0:
55:d9:83:ac:4a:53:e8:3b:c2:67:6c:0f:45:5c:f2:
1d:b9:58:79:3f:45:4e:a3:31:86:3b:60:53:a9:4f:
4b:cf:12:9c:da:dd:bb:82:93:1b:cc:a9:53:c4:f7:
1c:2c:eb:ad:95:12:4c:82:8f:9c:17:22:71:92:0e:
14:08:03:de:8b:27:53:ec:b6:36:b9:cf:1d:0d:a0:
8d:ce:d4:4d:d3:28:fa:2e:28:d6:f7:d9:9e:05:f6:
d5:13:c4:dc:b0:cc:9e:65:99:bf:84:6a:17:64:0c:
ff:54:ed:9b:43:81:92:f3:77:8c:78:c7:31:4f:30:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:5A:03:D3:A9:9C:F3:0F:51:08:D5:6C:71:17:3B:81:29:C5:73
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/leVaA9OpnPMPUQjVbHEXO4EpxXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:65:8c:81:f7:73:0e:aa:f3:5c:f5:24:92:f4:05:d5:e1:7b:
a0:2c:cb:1f:0c:10:da:2f:ed:20:03:0a:01:36:16:bc:92:ad:
0a:0b:e6:34:46:73:76:a0:81:66:e4:11:a7:c6:f1:8a:71:06:
9f:2a:59:6c:f1:8d:10:c8:20:f7:38:51:5b:15:e3:46:99:9e:
ae:ea:5e:ce:f2:6b:ac:28:b0:ba:3b:5a:49:b5:75:39:30:30:
a2:2f:29:84:95:9b:5b:a5:2b:79:3f:3c:8c:ec:5b:28:e9:36:
a5:4b:b5:bb:9c:d3:44:a7:c7:62:61:1d:23:75:d1:c3:e5:7e:
60:ed:38:e4:0f:76:15:d9:13:93:e2:a4:eb:ec:25:19:76:f9:
14:75:65:66:c8:db:96:5a:97:84:d0:69:d3:cf:30:95:3d:2c:
24:2d:04:ac:f7:d6:3e:2a:9f:5b:71:13:65:40:0b:03:19:7f:
8b:56:c0:24:90:90:c3:56:f0:b3:74:b3:84:69:24:16:40:fc:
bd:99:d3:94:3e:ae:51:e2:85:08:05:7e:18:0b:97:de:17:3c:
3c:d4:49:9a:c5:c6:18:fa:f5:58:14:5d:e9:12:fa:32:12:33:
45:1d:a2:54:28:09:b7:69:f6:35:10:09:dd:18:09:35:36:cb:
d4:e8:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:55 2026 by rpki-client