Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/t6bl4WR1EMU7iL-SbANk4LDUcMo.roa
File: t6bl4WR1EMU7iL-SbANk4LDUcMo.roa (raw, json)
Hash identifier: 6D45VOYKQf9TNTmJ/5I8Wvvvl6L8DEHOaHtWv2JsUsQ=
Subject key identifier: B7:A6:E5:E1:64:75:10:C5:3B:88:BF:92:6C:03:64:E0:B0:D4:70:CA
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FEB00E13BB0B788F8ACFCAE3824493391
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/t6bl4WR1EMU7iL-SbANk4LDUcMo.roa
Signing time: Mon 10 Aug 2026 09:28:51 +0000
ROA not before: Mon 10 Aug 2026 09:28:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 80.174.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:00:e1:3b:b0:b7:88:f8:ac:fc:ae:38:24:49:33:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 10 09:28:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7a6e5e1647510c53b88bf926c0364e0b0d470ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:60:17:3d:3d:db:4d:b1:e3:3c:58:a4:8e:
7d:45:29:83:d7:30:4b:33:d7:47:f1:13:5b:08:ae:
79:2a:aa:72:19:4a:89:00:39:5c:8d:8b:43:e3:dd:
6d:62:24:47:f7:04:2c:49:bb:7c:af:00:ac:38:fd:
62:5b:c2:f5:c7:41:0a:65:78:b0:23:91:98:ae:e4:
26:46:73:ac:c5:86:ae:e9:3e:d3:d5:8e:be:94:4a:
f7:1b:ae:4c:fc:7d:f7:21:c0:f3:d6:b5:57:7d:e9:
47:e7:29:d8:65:97:e5:97:11:dc:e0:21:00:c4:41:
ee:24:37:81:e2:92:be:83:02:c0:0c:40:b8:71:5f:
7b:c6:65:f3:60:da:ab:64:e6:26:c6:a9:7c:e0:14:
f7:32:e7:8d:bb:95:ac:3e:67:20:72:d4:68:37:6d:
eb:ba:a4:7b:e4:b2:ec:bc:54:15:be:62:94:4b:e8:
34:60:9b:6a:82:47:9f:e0:10:82:63:8d:d1:6e:00:
65:61:a0:f8:7f:05:3b:58:74:01:93:b7:7f:a6:67:
c6:6d:d1:6d:a3:b5:88:a7:bc:8a:b1:1d:cd:1e:33:
98:7a:67:e5:fd:7c:8c:a2:f2:df:97:4a:57:4f:da:
52:b0:0b:e9:4d:2f:54:c8:2f:2d:52:be:5a:26:83:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:E5:E1:64:75:10:C5:3B:88:BF:92:6C:03:64:E0:B0:D4:70:CA
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/t6bl4WR1EMU7iL-SbANk4LDUcMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.118.0/24
Signature Algorithm: sha256WithRSAEncryption
95:22:24:2b:56:f2:0b:8d:ac:73:f3:fa:2c:01:2b:c3:e1:6f:
6e:54:16:10:b0:74:1f:98:d5:9b:b9:08:2f:20:c8:0e:73:92:
17:30:bc:81:f1:e8:1d:33:24:df:36:09:08:13:ba:5d:8a:e4:
e3:c8:6c:3d:42:fb:dd:33:83:7c:94:15:b8:10:22:9d:3a:5a:
ed:8f:e7:b2:75:59:ae:88:08:0d:88:4f:e3:57:16:bf:04:8f:
84:d7:35:01:6c:42:b1:d8:fa:ef:2a:76:fb:dd:e4:59:2e:d4:
59:0a:c7:60:50:da:65:25:f3:ba:29:53:03:06:c8:b5:28:17:
ab:23:65:ff:a4:0d:ef:9c:c9:a2:d8:fd:9f:30:b6:22:3d:a8:
ce:f8:77:41:e4:d4:b4:47:03:88:d0:db:b8:20:be:1b:b2:6d:
1a:84:ff:3b:dc:48:08:88:4c:0e:8f:d5:8b:e6:4e:e8:cb:32:
23:2e:91:51:fc:61:54:31:59:e3:96:eb:4f:bf:a3:a0:dd:f2:
34:c0:08:fc:76:f8:e8:3a:93:aa:3d:3e:4d:a0:14:48:bf:d4:
1e:72:32:cb:3a:8a:27:6d:5a:11:1d:e7:1f:83:ea:66:ee:02:
4f:6a:24:08:09:fe:e3:ca:b7:90:ad:95:a0:e5:d7:f6:c6:1a:
0c:e7:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:44 2026 by rpki-client