Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/29v_UvGTzrv0FNNyLrzzEifxUDQ.roa
File: 29v_UvGTzrv0FNNyLrzzEifxUDQ.roa (raw, json)
Hash identifier: JBQnXvjqAFsHEoG0C+AGJp4xr36OJCXqWBYzwVT8SB4=
Subject key identifier: DB:DB:FF:52:F1:93:CE:BB:F4:14:D3:72:2E:BC:F3:12:27:F1:50:34
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019F1E09591DF1899F14D49B5258A322B704
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/29v_UvGTzrv0FNNyLrzzEifxUDQ.roa
Signing time: Wed 01 Jul 2026 14:15:56 +0000
ROA not before: Wed 01 Jul 2026 14:15:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200239
IP address blocks: 45.80.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:09:59:1d:f1:89:9f:14:d4:9b:52:58:a3:22:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jul 1 14:15:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbdbff52f193cebbf414d3722ebcf31227f15034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:3d:fb:75:64:56:6c:d3:e9:8d:e8:a8:6e:
95:aa:ed:62:f2:b1:c0:e1:27:19:2c:e4:72:e0:c0:
07:cf:41:24:78:32:e2:e4:a3:d9:e7:fb:68:29:ad:
58:c8:21:8a:38:05:ad:77:54:58:1d:4b:2e:db:cd:
81:a6:e6:5f:51:0a:d9:63:e8:5f:69:03:cb:3f:88:
0d:53:23:d0:09:ff:ce:5f:32:a0:7b:6e:51:67:32:
ca:4a:2e:65:0e:bb:bd:eb:25:e2:ba:4c:f2:09:17:
f5:1b:e0:12:8d:22:9e:40:9f:d4:50:71:87:5d:44:
7c:d3:1d:77:3c:02:f2:1b:d9:6d:33:53:b7:11:9f:
a6:2a:21:db:9f:8c:e9:df:eb:fc:40:8c:76:7a:15:
c6:bd:f0:68:7c:75:82:e0:a4:7b:32:d6:c4:d7:a5:
9d:9c:e9:42:53:ac:99:89:6d:4d:08:b4:96:b3:d2:
6b:ec:16:fa:d4:b5:3e:0b:2c:46:a2:5f:99:f4:c6:
b8:ee:95:39:51:a7:78:89:07:ac:c1:fd:b7:a3:92:
5d:05:76:c5:7a:f3:4a:5b:59:3f:60:61:e3:48:56:
80:d7:99:e8:1d:92:8a:33:ca:d7:6d:d2:4f:5d:25:
6a:87:9b:d2:fd:41:ff:79:fc:5d:a6:31:d3:36:52:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DB:FF:52:F1:93:CE:BB:F4:14:D3:72:2E:BC:F3:12:27:F1:50:34
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/29v_UvGTzrv0FNNyLrzzEifxUDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:10:bb:d2:99:5e:b5:18:36:84:60:33:b0:24:c4:e3:a9:4b:
55:85:6a:97:7d:16:93:cd:92:28:1f:a5:3e:bb:5f:fc:52:5f:
2a:0c:ee:b7:f0:a7:1e:cc:cc:cf:8b:61:8d:f8:af:f7:8b:9d:
10:e3:25:94:e2:a4:c4:36:7d:51:58:6a:af:f4:00:45:df:77:
70:9f:2d:66:af:8f:85:27:db:0c:b0:5b:1c:6e:f4:6a:3c:51:
2f:b6:b6:c6:df:9d:4a:6f:6c:f2:05:62:7c:72:bd:28:5c:91:
5a:3f:6a:57:61:dc:14:df:77:36:5d:a7:13:2c:1d:77:c0:a1:
f8:2d:2f:96:40:3e:ac:5c:32:aa:05:71:14:11:79:1f:2d:96:
f7:02:48:bd:89:e7:9a:54:d7:03:f7:d1:a0:f4:f0:03:2d:fb:
79:e5:3f:be:51:6e:e0:32:7b:93:2b:f1:d9:9c:e0:d6:8c:20:
21:48:fc:83:2b:21:69:07:26:9e:d3:d0:d8:e7:61:48:88:e5:
7b:bb:f9:68:f2:3b:8c:67:89:f0:c1:da:ce:bf:22:82:a4:68:
c4:00:38:52:6e:69:7a:b3:25:95:84:c0:0a:2a:e0:55:10:85:
ff:17:2a:d7:55:90:a3:37:7b:14:c8:95:c5:58:d7:5d:da:78:
88:e1:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:02 2026 by rpki-client