Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/vB6F4DSif3FKGIjonFMI3O-9o0U.roa
File: vB6F4DSif3FKGIjonFMI3O-9o0U.roa (raw, json)
Hash identifier: ScfvG0EkU2MZ+DZxbZuD2EbZYNjy/nMdGBqtWefCgOk=
Subject key identifier: BC:1E:85:E0:34:A2:7F:71:4A:18:88:E8:9C:53:08:DC:EF:BD:A3:45
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A042A030DB9AE0DA6BA133EC62B46F56F9
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/vB6F4DSif3FKGIjonFMI3O-9o0U.roa
Signing time: Thu 27 Aug 2026 09:49:49 +0000
ROA not before: Thu 27 Aug 2026 09:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.174.0.0/24 maxlen: 24
80.174.1.0/24 maxlen: 24
80.174.144.0/23 maxlen: 23
80.174.248.0/24 maxlen: 24
103.85.32.0/24 maxlen: 24
103.85.33.0/24 maxlen: 24
103.85.34.0/24 maxlen: 24
103.85.35.0/24 maxlen: 24
202.58.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:a0:30:db:9a:e0:da:6b:a1:33:ec:62:b4:6f:56:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 27 09:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc1e85e034a27f714a1888e89c5308dcefbda345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:13:18:5d:f8:14:3b:04:5e:8c:87:04:4f:
bd:1a:42:22:1d:63:33:f4:a7:bb:c3:a4:93:e1:21:
e7:52:fe:0c:cb:71:ad:a0:c7:d0:ce:29:2f:24:3a:
b6:75:cb:c4:72:e7:a4:d6:43:65:e4:53:76:62:31:
8d:55:ef:f9:2c:2b:23:38:c8:75:33:9e:48:df:06:
1f:90:ba:9e:28:cd:5e:46:4b:d2:10:8b:88:3f:ac:
fd:2d:a8:ca:3a:3f:e0:0c:7c:5e:44:95:ad:92:4f:
f0:a8:0c:1a:36:b4:66:00:dd:8f:21:43:1d:31:cc:
31:de:cb:b6:ec:d0:73:6b:e4:af:ed:20:47:93:fd:
8e:a0:b1:0f:1e:46:15:32:a6:e2:ba:44:11:e2:96:
a3:a7:c4:fa:7b:e0:7d:45:96:87:e5:5f:11:bb:38:
45:8b:37:6b:0b:03:dd:c5:f0:db:0c:98:61:5e:07:
45:4c:93:3b:ad:31:3e:20:be:6d:bf:c8:42:48:a4:
1d:31:79:f8:d3:67:4e:73:db:6f:1d:07:18:74:3e:
4d:68:85:51:6c:38:d5:92:44:be:2f:f6:3f:0e:59:
7e:4a:98:30:6e:d2:aa:17:05:2d:d6:78:a2:32:38:
8b:36:5e:ee:96:14:47:7f:41:cb:f1:81:89:1a:d7:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:85:E0:34:A2:7F:71:4A:18:88:E8:9C:53:08:DC:EF:BD:A3:45
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/vB6F4DSif3FKGIjonFMI3O-9o0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.0.0/23
80.174.144.0/23
80.174.248.0/24
103.85.32.0/22
202.58.108.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:9f:c3:fb:b8:14:63:34:8e:d5:38:ca:12:6d:37:b4:00:04:
ab:e2:91:79:3d:73:52:04:f4:a2:5a:2e:a3:30:ce:a2:74:c7:
68:19:53:51:be:85:5e:2a:d0:6b:2d:e1:06:b4:2e:70:10:98:
05:4c:cf:e3:67:63:c3:a0:8c:42:8a:33:8e:2b:14:e0:8a:06:
5f:fd:74:07:8f:1c:99:8c:f3:0f:70:29:91:18:72:3e:1b:2d:
f8:0d:aa:12:c2:a0:67:48:6c:7d:d0:31:53:b3:bd:4a:ef:c1:
e4:8b:6c:a5:94:5e:9c:53:76:21:5f:5e:1d:59:04:cf:cb:80:
db:b3:dc:90:5d:87:4f:41:2c:27:fa:b9:92:7a:84:fe:f7:31:
46:c2:5e:a0:29:6e:9e:f5:e8:08:79:4a:86:a2:4c:64:c8:d9:
dc:7c:56:18:7b:d8:87:b2:1d:a1:23:66:fb:95:6b:7f:fa:96:
2b:dd:9e:64:d6:7a:a8:dc:66:07:37:fa:cc:07:fe:bd:db:77:
5e:c2:81:c3:d8:7f:09:7c:7a:b6:37:85:b6:0a:75:55:f3:e0:
82:e3:aa:5b:ac:9c:9b:1d:a4:7e:80:19:72:e1:af:ca:37:fd:
5f:b3:71:ca:67:0c:41:5c:74:40:10:b8:49:5e:62:39:b4:cb:
c4:27:75:1c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaBCoDDbmuDaa6Ez7GK0b1b5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwODI3MDk0OTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzFlODVlMDM0YTI3ZjcxNGExODg4ZTg5YzUzMDhkY2VmYmRhMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAMTGF34FDsEXoyHBE+9GkIiHWMz
9Ke7w6ST4SHnUv4My3GtoMfQzikvJDq2dcvEcuek1kNl5FN2YjGNVe/5LCsjOMh1
M55I3wYfkLqeKM1eRkvSEIuIP6z9LajKOj/gDHxeRJWtkk/wqAwaNrRmAN2PIUMd
Mcwx3su27NBza+Sv7SBHk/2OoLEPHkYVMqbiukQR4pajp8T6e+B9RZaH5V8RuzhF
izdrCwPdxfDbDJhhXgdFTJM7rTE+IL5tv8hCSKQdMXn402dOc9tvHQcYdD5NaIVR
bDjVkkS+L/Y/Dll+SpgwbtKqFwUt1niiMjiLNl7ulhRHf0HL8YGJGtfXNQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLweheA0on9xShiI6JxTCNzvvaNFMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvdkI2RjREU2lmM0ZLR0lqb25GTUkzTy05bzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUK4AAwQB
UK6QAwQAUK74AwQCZ1UgAwQByjpsMA0GCSqGSIb3DQEBCwUAA4IBAQAOn8P7uBRj
NI7VOMoSbTe0AASr4pF5PXNSBPSiWi6jMM6idMdoGVNRvoVeKtBrLeEGtC5wEJgF
TM/jZ2PDoIxCijOOKxTgigZf/XQHjxyZjPMPcCmRGHI+Gy34DaoSwqBnSGx90DFT
s71K78Hki2yllF6cU3YhX14dWQTPy4Dbs9yQXYdPQSwn+rmSeoT+9zFGwl6gKW6e
9egIeUqGokxkyNncfFYYe9iHsh2hI2b7lWt/+pYr3Z5k1nqo3GYHN/rMB/6923de
woHD2H8JfHq2N4W2CnVV8+CC46pbrJybHaR+gBly4a/KN/1fs3HKZwxBXHRAELhJ
XmI5tMvEJ3Uc
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:51 2026 by rpki-client