Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/zDmTWii0tTTLwWrGNOM_E8vPmWQ.roa
File: zDmTWii0tTTLwWrGNOM_E8vPmWQ.roa (raw, json)
Hash identifier: xiJWxo8D0yRIdosGHMwKD9JMz9tStAzgb0DtTfYeX6g=
Subject key identifier: CC:39:93:5A:28:B4:B5:34:CB:C1:6A:C6:34:E3:3F:13:CB:CF:99:64
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F1211AE35FA414817909F473CECA894C4
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/zDmTWii0tTTLwWrGNOM_E8vPmWQ.roa
Signing time: Mon 29 Jun 2026 06:29:36 +0000
ROA not before: Mon 29 Jun 2026 06:29:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.32.0/19 maxlen: 19
80.174.64.0/19 maxlen: 19
80.174.113.0/24 maxlen: 24
80.174.118.0/24 maxlen: 24
80.174.120.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:11:ae:35:fa:41:48:17:90:9f:47:3c:ec:a8:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 29 06:29:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc39935a28b4b534cbc16ac634e33f13cbcf9964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:09:ee:57:79:d0:58:c9:61:33:b7:90:56:
6e:f7:39:e5:d5:c8:eb:3b:10:8f:8b:e4:4a:8d:ba:
40:df:fe:a8:21:7f:6b:01:0f:69:f3:15:e2:92:0d:
92:a1:cf:26:79:6d:a4:f6:f3:61:df:92:e0:14:2e:
d7:13:c3:62:32:45:00:61:c7:6b:6f:ac:4f:1a:90:
53:ac:be:72:6b:52:ff:ad:14:d5:ba:a6:fe:de:ae:
f9:dc:23:46:05:3b:02:f3:38:71:00:3c:35:2f:28:
c9:6e:d3:6c:79:4c:b0:72:4f:a3:f7:ca:7a:e0:c7:
9c:41:0e:04:23:4c:0b:d4:67:49:b7:21:5e:d0:6c:
da:7a:94:ce:9c:0c:21:bb:8b:10:43:36:65:a3:3e:
4c:75:b9:4b:89:5d:b5:7b:75:ce:a8:08:bf:78:fd:
82:a5:0f:0c:1d:e3:22:4d:6e:94:02:3b:51:1b:75:
cb:7a:8a:ac:db:2f:03:e3:1e:af:c1:f4:28:f3:b3:
e2:90:54:8f:00:93:b3:fb:82:48:a5:99:1e:a6:c8:
38:cc:39:7f:23:ef:23:ad:52:51:31:ac:f2:56:62:
1d:e6:e0:0c:fc:96:ef:09:64:2a:0a:d5:a3:20:d8:
0d:40:d2:7e:cf:55:4a:59:c2:8e:ed:a6:2f:ea:a6:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:93:5A:28:B4:B5:34:CB:C1:6A:C6:34:E3:3F:13:CB:CF:99:64
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/zDmTWii0tTTLwWrGNOM_E8vPmWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.32.0-80.174.95.255
80.174.113.0/24
80.174.118.0/24
80.174.120.0/23
Signature Algorithm: sha256WithRSAEncryption
79:1e:ff:81:96:09:85:27:02:73:0a:11:aa:86:2c:8d:d5:67:
31:aa:e0:8e:23:1e:1e:8c:f1:e9:1d:34:33:9a:42:f1:6f:64:
f5:9a:cb:49:f1:a8:7a:a2:49:17:5c:f7:14:d5:a8:ff:4a:d7:
1f:7a:76:f0:1f:1b:a6:61:10:f7:a3:39:29:69:d6:18:c8:67:
fe:35:64:97:99:5d:0b:96:ec:73:32:9e:b9:5f:75:f5:3d:f0:
6a:53:cb:1a:9e:97:f2:36:b5:b7:15:8f:50:b1:6e:74:8c:7b:
98:99:91:18:df:7d:e1:d3:35:33:6d:ad:1c:76:55:2c:d9:74:
de:b5:ed:44:f7:3f:c6:41:9a:ac:25:4f:3a:7a:df:27:38:f6:
17:93:55:80:60:ab:48:71:69:37:56:ff:c6:24:8a:e3:f8:49:
74:b2:6e:6c:e9:14:c3:f3:7b:1e:dc:22:af:02:98:49:4b:9f:
80:d6:10:ba:dd:de:0a:5d:a2:48:56:63:3f:89:aa:fe:90:64:
cc:6d:df:b1:c5:46:65:ea:6e:b4:90:5d:a6:91:fb:6c:8e:57:
5d:9e:d6:90:07:9f:fe:23:66:24:b5:0b:ce:4b:7d:84:a3:24:
86:b2:b0:4f:95:57:97:72:47:5a:75:92:4b:d7:54:c9:f1:d5:
5b:f5:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:07 2026 by rpki-client