Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0C2F8iG_AtFJKgtjmAZnPUT6vaY.roa
File: 0C2F8iG_AtFJKgtjmAZnPUT6vaY.roa (raw, json)
Hash identifier: Y4UaT16Lipb868vlI+JcVyrH/rTpRtgdqFzuSLRCO64=
Subject key identifier: D0:2D:85:F2:21:BF:02:D1:49:2A:0B:63:98:06:67:3D:44:FA:BD:A6
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A1D0BCA28FA0EA85AFBB73255F4BC22B0B
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0C2F8iG_AtFJKgtjmAZnPUT6vaY.roa
Signing time: Thu 12 Nov 2026 17:09:45 +0000
ROA not before: Thu 12 Nov 2026 17:09:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 80.174.140.0/22 maxlen: 22
80.174.172.0/22 maxlen: 22
80.174.188.0/22 maxlen: 22
181.201.152.0/22 maxlen: 22
181.201.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:bc:a2:8f:a0:ea:85:af:bb:73:25:5f:4b:c2:2b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 12 17:09:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d02d85f221bf02d1492a0b639806673d44fabda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:7b:e1:c6:2a:0a:f8:cd:cb:40:6e:45:97:
a8:28:c1:7f:1b:13:68:75:e7:be:5a:93:37:64:3f:
92:11:71:cb:4f:cb:19:72:5e:03:f5:6f:45:a3:6f:
86:e1:31:2f:02:ca:6e:36:66:3d:fd:a9:0b:8c:4d:
1d:34:6b:12:83:ef:98:cc:2c:63:d3:0c:5d:16:77:
dc:5d:99:14:4a:56:52:a0:5f:f8:8b:85:20:51:24:
d9:1f:8f:84:b3:94:0d:a4:85:46:d2:70:d0:25:8c:
05:a1:f8:0e:00:05:23:3b:48:1d:9b:36:5a:45:74:
d9:c3:7e:47:42:ea:e9:58:d0:6d:e5:e0:35:0a:4d:
a0:27:dc:c5:94:6c:99:60:ef:7f:5c:42:ad:bb:af:
93:11:1e:9d:36:05:c5:67:3f:e3:11:18:6c:df:73:
8f:d6:ab:94:9f:56:4e:02:d7:04:d7:c9:5c:f3:39:
42:1e:46:07:85:df:21:39:3b:c5:ab:2a:3c:16:ae:
b8:75:4d:6e:32:9c:2b:c2:9b:e6:d2:d6:d1:c4:41:
bf:c4:c3:28:d8:df:d3:4a:e7:f8:9d:b1:7f:c7:88:
52:8d:54:f0:8d:04:a0:f4:71:9d:96:29:b4:68:5a:
fe:7a:26:81:c2:57:5a:34:0b:06:79:35:76:e5:41:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:85:F2:21:BF:02:D1:49:2A:0B:63:98:06:67:3D:44:FA:BD:A6
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0C2F8iG_AtFJKgtjmAZnPUT6vaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.140.0/22
80.174.172.0/22
80.174.188.0/22
181.201.152.0/21
Signature Algorithm: sha256WithRSAEncryption
29:9b:a5:b4:6a:02:4b:97:0c:21:01:13:32:47:a2:5a:1d:5c:
55:bb:85:ce:1f:6f:f9:22:83:86:55:38:ae:a0:c8:e5:b6:c9:
34:b3:2e:dd:c6:7c:ea:89:91:85:24:6b:0e:78:94:28:ac:53:
91:32:70:ac:14:e8:d1:00:c8:27:65:08:a9:60:79:62:95:f6:
09:fe:89:69:b1:89:2a:a0:7f:67:0b:04:22:28:a2:5f:7f:8a:
2d:16:0f:dd:86:f0:d8:11:ee:61:77:c5:ca:26:d6:b5:94:a6:
f5:a7:b4:8e:11:a0:33:bc:90:f0:59:7f:28:a5:f8:aa:f9:77:
ee:a6:a8:bf:01:3d:fe:12:99:a0:a9:bc:84:eb:6a:c3:52:6e:
1b:d2:8f:8c:6a:8a:02:7b:1a:2f:8c:42:f5:cf:49:13:a8:a1:
5a:19:10:ca:7f:8a:8c:5b:78:24:62:e9:cd:9f:86:cb:0c:50:
cd:c8:f0:05:e5:5e:b5:71:16:7d:85:81:c3:74:c2:a3:66:91:
91:6f:ac:c9:e3:d5:4b:3f:89:b5:8d:0f:50:8d:4c:00:a3:66:
f4:99:26:21:71:b6:73:ad:27:e4:0c:6c:be:6c:18:e8:2d:fb:
39:15:ca:9d:92:2e:d1:cc:49:dd:cd:38:58:ea:e4:08:cf:b7:
91:98:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:27 2026 by rpki-client