Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/80UycB-l03UBzMlFyqsfWfsfe00.roa
File: 80UycB-l03UBzMlFyqsfWfsfe00.roa (raw, json)
Hash identifier: y/avqjcGk+e7Bj1C8prS9/mXW4dcYPCGf4IRDMowJo0=
Subject key identifier: F3:45:32:70:1F:A5:D3:75:01:CC:C9:45:CA:AB:1F:59:FB:1F:7B:4D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789B98557153B2D697E820B46D3ABF38
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/80UycB-l03UBzMlFyqsfWfsfe00.roa
Signing time: Mon 26 Oct 2026 14:27:05 +0000
ROA not before: Mon 26 Oct 2026 14:27:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215645
IP address blocks: 185.254.28.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9b:98:55:71:53:b2:d6:97:e8:20:b4:6d:3a:bf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:27:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f34532701fa5d37501ccc945caab1f59fb1f7b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:74:7f:62:b0:ae:01:1a:04:14:12:27:e2:
ac:16:34:19:20:2c:eb:a8:40:5c:57:1b:0d:f3:fc:
ba:7d:29:a8:be:fe:1d:aa:7c:bd:ba:b7:01:ce:87:
3f:8a:b1:b7:62:ee:d6:1b:bc:18:27:13:fc:07:07:
1c:d0:09:4e:6f:cc:8d:42:d0:a0:81:9b:46:41:83:
05:77:5f:4a:1b:33:e2:e3:82:78:4f:a3:05:c7:72:
45:9d:6a:6e:b2:7f:60:c0:1d:70:3f:2c:97:47:ce:
0a:3c:10:c0:3c:f2:65:cf:a6:86:aa:fc:22:00:85:
9b:2d:1b:db:21:eb:01:d6:9c:91:7e:50:f3:7b:85:
2e:2f:f3:21:ab:db:36:76:a2:d2:71:32:6c:19:65:
49:c8:ea:54:18:15:ec:28:1d:0e:2e:a9:3a:ea:b7:
58:e9:54:ff:d1:52:d6:f9:96:7b:7a:b5:6d:81:5d:
6c:11:05:81:49:0b:91:d8:0f:e7:c6:d2:14:6b:6a:
61:03:31:a3:2c:0a:da:c5:e9:78:2d:4a:f1:85:1b:
b5:0a:ff:ae:41:cb:93:c4:64:0d:8f:b2:68:36:14:
77:26:74:06:70:cd:56:b2:0c:57:a4:b4:bf:23:99:
fd:90:ae:f6:68:90:f7:46:a2:d3:4a:a6:25:be:e7:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:32:70:1F:A5:D3:75:01:CC:C9:45:CA:AB:1F:59:FB:1F:7B:4D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/80UycB-l03UBzMlFyqsfWfsfe00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.28.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:41:41:4c:f1:40:d6:06:88:0d:35:54:80:17:ea:07:24:29:
3c:bb:d5:1a:33:4a:ad:37:75:1d:e2:78:b6:02:05:0a:09:cf:
b6:5a:dc:92:02:24:53:73:9a:62:f9:67:fa:9f:51:14:b6:90:
94:98:a0:57:c7:53:3f:c4:97:37:50:0e:ca:1d:e1:02:76:9e:
8d:01:0a:f5:c9:c0:0c:54:2e:d2:42:86:45:a8:cd:f0:6f:f0:
ae:6a:bf:b6:ab:cb:bc:ee:7f:00:31:84:93:dc:95:f9:68:cf:
5d:9d:1f:f9:fa:88:0a:01:66:24:f8:e6:24:d9:90:aa:ac:db:
b8:61:b7:1d:8b:e1:a7:d0:03:01:7f:c4:dc:5b:0b:20:3b:2b:
65:dc:56:b6:14:6d:25:c5:6d:46:cd:90:6f:9d:32:97:5b:84:
84:df:3e:ec:b5:2b:8d:a4:35:e1:d0:02:2f:8d:cd:2c:24:54:
dd:7a:3f:34:12:29:69:c1:21:2a:41:e8:5e:fd:64:c6:e5:63:
43:6c:07:46:be:1b:48:a6:da:1e:03:ef:91:50:bc:dd:a4:23:
2e:e4:d5:0c:9b:9c:1d:1d:29:e6:c8:89:d0:02:6f:41:9c:91:
ff:c9:7a:a6:29:33:63:3e:c2:96:a9:94:02:66:86:4b:8e:ce:
2e:3b:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:40 2026 by rpki-client