Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xcVvG3zQQtAId2KXixnLzN4KbPU.roa
File: xcVvG3zQQtAId2KXixnLzN4KbPU.roa (raw, json)
Hash identifier: MmdBTJ2B07GguZH14/wtgd3ziuqBUdjRcqoBEJPjKOE=
Subject key identifier: C5:C5:6F:1B:7C:D0:42:D0:08:77:62:97:8B:19:CB:CC:DE:0A:6C:F5
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A146B03128918B2D2C5568877DEBEA8501
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xcVvG3zQQtAId2KXixnLzN4KbPU.roa
Signing time: Fri 16 Oct 2026 21:48:34 +0000
ROA not before: Fri 16 Oct 2026 21:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.32.0/19 maxlen: 19
80.174.64.0/19 maxlen: 19
80.174.96.0/21 maxlen: 21
80.174.104.0/22 maxlen: 22
80.174.116.0/24 maxlen: 24
80.174.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:b0:31:28:91:8b:2d:2c:55:68:87:7d:eb:ea:85:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 16 21:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5c56f1b7cd042d0087762978b19cbccde0a6cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:0e:70:8d:cd:b3:1e:cd:a2:96:7d:dc:db:
70:a1:14:ce:e5:b9:f2:42:19:13:e8:0c:47:b3:d5:
06:95:4a:ff:f2:a1:cc:7a:3a:5a:3d:4e:69:66:6f:
64:b6:14:96:72:eb:45:0a:ee:24:5f:b8:67:9f:d0:
be:40:9c:29:3d:16:e8:86:65:4b:8b:f5:e2:65:66:
46:c1:51:6a:93:ef:6e:e7:18:26:0b:aa:f9:1d:36:
26:34:73:3c:65:42:e8:cb:4d:d2:5e:1e:c0:2b:ae:
f7:cf:83:c8:36:be:05:f7:b3:5c:f2:57:f9:8e:83:
4e:fa:cc:93:49:58:6c:91:50:ca:32:2f:3b:65:ae:
5a:2f:60:dd:2d:e0:91:7c:d3:38:2a:de:90:37:9e:
53:9c:bb:7e:5b:dc:d1:31:a1:be:f0:8c:3f:69:d1:
86:a6:31:d8:79:22:c4:1c:49:5f:cd:56:66:27:e3:
41:f7:e5:c6:8d:a1:c6:76:ea:0f:c7:33:cb:b7:50:
03:54:b6:61:75:d0:ed:3a:e7:0f:20:65:55:ee:43:
b9:5f:dc:3e:88:7d:46:d8:65:9f:08:42:d5:df:1c:
7a:e3:77:f6:ef:6e:e3:fc:42:d5:9d:50:f6:22:a7:
1e:55:ab:d9:29:d7:9d:0f:cb:1f:90:a9:7c:08:43:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:6F:1B:7C:D0:42:D0:08:77:62:97:8B:19:CB:CC:DE:0A:6C:F5
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xcVvG3zQQtAId2KXixnLzN4KbPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.32.0-80.174.107.255
80.174.116.0/24
80.174.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:69:72:c1:60:e8:05:10:1e:56:5a:b3:d6:a8:b8:b7:17:61:
ac:3b:23:c9:58:91:18:cc:df:7e:f2:d5:c9:15:25:bd:38:70:
f1:3b:4d:53:3c:c4:12:52:a7:57:46:c0:86:44:1d:1d:c8:96:
ca:af:d9:0c:a3:3e:e3:f8:dc:97:d2:90:62:0b:d1:f5:6c:34:
03:e1:c5:d2:9d:e9:3b:2c:cd:73:2a:6b:7f:ab:5c:81:15:13:
6a:bd:dd:86:5d:0d:07:42:ec:7e:f2:86:3c:cd:42:4b:74:74:
9b:27:46:02:d8:6d:6c:a6:1d:25:79:a3:25:f5:7a:25:0b:7e:
ed:30:93:4b:af:a3:a9:f6:a3:3e:14:76:53:e4:e6:9a:2c:d3:
64:dc:e9:ce:15:af:45:6c:89:45:9e:14:ec:16:29:29:f9:a4:
c0:ba:0f:c0:05:08:b7:75:02:1d:10:09:75:0b:9e:82:9e:02:
42:41:89:ee:e6:bc:88:71:64:30:e3:9f:06:16:80:59:5b:b4:
48:63:39:87:46:a3:25:92:56:89:4a:15:e3:40:16:85:7e:cf:
64:71:a4:1b:28:e8:c2:a7:de:be:77:04:32:25:f5:0b:b0:e3:
ff:3e:40:77:3b:56:70:8b:fb:1d:87:8f:b4:b6:5f:52:e4:a1:
94:b8:8d:24
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaFGsDEokYstLFVoh33r6oUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYxMDE2MjE0ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWM1NmYxYjdjZDA0MmQwMDg3NzYyOTc4YjE5Y2JjY2RlMGE2Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxgOcI3Nsx7NopZ93NtwoRTO5bny
QhkT6AxHs9UGlUr/8qHMejpaPU5pZm9kthSWcutFCu4kX7hnn9C+QJwpPRbohmVL
i/XiZWZGwVFqk+9u5xgmC6r5HTYmNHM8ZULoy03SXh7AK673z4PINr4F97Nc8lf5
joNO+syTSVhskVDKMi87Za5aL2DdLeCRfNM4Kt6QN55TnLt+W9zRMaG+8Iw/adGG
pjHYeSLEHElfzVZmJ+NB9+XGjaHGduoPxzPLt1ADVLZhddDtOucPIGVV7kO5X9w+
iH1G2GWfCELV3xx643f2727j/ELVnVD2IqceVavZKdedD8sfkKl8CEOtswIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMXFbxt80ELQCHdil4sZy8zeCmz1MB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEveGNWdkczelFRdEFJZDJLWGl4bkx6TjRLYlBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAVQriAD
BAJQrmgDBABQrnQDBABQrncwDQYJKoZIhvcNAQELBQADggEBAA1pcsFg6AUQHlZa
s9aouLcXYaw7I8lYkRjM337y1ckVJb04cPE7TVM8xBJSp1dGwIZEHR3Ilsqv2Qyj
PuP43JfSkGIL0fVsNAPhxdKd6TsszXMqa3+rXIEVE2q93YZdDQdC7H7yhjzNQkt0
dJsnRgLYbWymHSV5oyX1eiULfu0wk0uvo6n2oz4UdlPk5pos02Tc6c4Vr0VsiUWe
FOwWKSn5pMC6D8AFCLd1Ah0QCXULnoKeAkJBie7mvIhxZDDjnwYWgFlbtEhjOYdG
oyWSVolKFeNAFoV+z2RxpBso6MKn3r53BDIl9Quw4/8+QHc7VnCL+x2Hj7S2X1Lk
oZS4jSQ=
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:51 2026 by rpki-client