Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0p8SWHPr02uktBwfvfehJbFO3I0.roa
File: 0p8SWHPr02uktBwfvfehJbFO3I0.roa (raw, json)
Hash identifier: D6hAbtfBEZTEJ140jsGfhaG0cIMFWfkFA4M4Cqv59zw=
Subject key identifier: D2:9F:12:58:73:EB:D3:6B:A4:B4:1C:1F:BD:F7:A1:25:B1:4E:DC:8D
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A1B029754A30A8E6C3185F1452DFAF803D
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0p8SWHPr02uktBwfvfehJbFO3I0.roa
Signing time: Fri 06 Nov 2026 09:21:09 +0000
ROA not before: Fri 06 Nov 2026 09:21:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 80.174.203.0/24 maxlen: 24
80.174.206.0/24 maxlen: 24
80.174.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:29:75:4a:30:a8:e6:c3:18:5f:14:52:df:af:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 6 09:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d29f125873ebd36ba4b41c1fbdf7a125b14edc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:29:6f:a3:e2:fe:9b:51:a6:cb:ff:04:ee:
c6:92:24:51:90:c8:34:62:94:dd:bc:d0:37:c9:a9:
69:d8:4c:b9:39:bb:5a:b2:0a:56:2c:f9:63:33:57:
60:2b:06:a2:c0:e8:6e:0b:ed:ed:dd:35:20:fc:b5:
7e:40:42:8f:49:e5:71:a8:ed:f8:86:e7:66:47:7f:
38:27:57:84:80:ad:54:61:cf:f8:f7:e7:f8:0b:1b:
95:9b:8f:8c:a5:fd:6b:4d:cf:2b:22:05:81:15:e8:
ad:e3:64:bd:65:8f:74:41:50:17:7e:c7:35:7b:85:
05:d8:ac:f7:ea:c9:31:53:a4:51:65:bd:ff:18:31:
12:a6:d0:c3:40:fa:bf:34:7a:f2:d2:11:09:ec:b2:
28:38:42:67:ee:05:23:4f:4f:e7:04:19:cd:b7:c9:
b9:8d:2f:fa:4c:70:02:3b:46:86:20:5f:68:e4:18:
68:56:ae:5c:fe:07:25:63:f8:3b:58:17:35:61:4a:
c9:a9:b4:b9:ed:47:e4:cb:dd:17:ae:de:b2:14:bc:
d0:23:50:d6:7a:84:80:05:26:6a:4b:cc:d9:27:a9:
75:36:e5:a8:4c:c5:87:3e:fe:01:07:55:ec:66:fc:
c9:12:a1:5e:ff:a2:85:21:89:1a:9d:9c:06:cf:e8:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:12:58:73:EB:D3:6B:A4:B4:1C:1F:BD:F7:A1:25:B1:4E:DC:8D
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0p8SWHPr02uktBwfvfehJbFO3I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.203.0/24
80.174.206.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:f3:96:31:99:ee:13:fd:c9:4e:d2:05:b5:56:03:2e:0e:2f:
74:5f:9c:fb:15:44:bb:f8:71:3a:2e:62:65:04:43:de:4f:2f:
6f:85:05:1a:39:99:21:b4:1e:72:29:28:ed:30:c6:a3:bd:fa:
1e:46:77:87:86:e8:a8:6e:d2:7c:8f:1a:99:f6:99:d8:0a:14:
93:27:6a:63:7c:29:0e:49:20:bd:00:91:13:e6:5d:09:80:92:
7c:e3:77:db:09:5a:28:9b:9b:6b:6c:61:82:a1:48:67:ae:1f:
e6:e7:02:4a:5f:06:63:9d:9b:b9:a7:d2:67:eb:0a:c8:68:cc:
fa:8b:31:b3:b2:ec:83:0e:bf:6f:39:52:0f:93:94:d5:0f:41:
16:fa:0f:2f:41:1f:91:36:4f:fb:cc:7b:21:28:0f:b5:be:bc:
e4:7a:1a:44:52:e8:42:c7:78:1b:c4:32:f2:fd:25:93:76:54:
91:07:25:34:1f:d9:f9:b1:e2:0e:f9:d1:ff:46:c7:2e:fc:d9:
77:a6:52:43:74:00:a7:ab:a8:ad:e7:6d:8a:09:f2:a0:04:a1:
9e:e3:d5:18:d2:91:33:c6:1d:cd:c2:2c:95:57:4d:12:51:38:
af:51:6b:ca:bb:0d:cf:cc:36:fb:d5:ef:59:3f:36:b0:5c:33:
e6:fc:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:30:07 2026 by rpki-client