Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/DYT_PcLJKH9CJFsJVm0ZqIU_OGg.roa
File: DYT_PcLJKH9CJFsJVm0ZqIU_OGg.roa (raw, json)
Hash identifier: INeru24dQtWv6aaG7GCU8qjGuCXwfkgwswLcSE0c5rM=
Subject key identifier: 0D:84:FF:3D:C2:C9:28:7F:42:24:5B:09:56:6D:19:A8:85:3F:38:68
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F198FD44F59A44300DE2E92F230E5218E
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/DYT_PcLJKH9CJFsJVm0ZqIU_OGg.roa
Signing time: Tue 30 Jun 2026 17:24:44 +0000
ROA not before: Tue 30 Jun 2026 17:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 80.174.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:8f:d4:4f:59:a4:43:00:de:2e:92:f2:30:e5:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 30 17:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d84ff3dc2c9287f42245b09566d19a8853f3868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:da:ca:f6:ef:91:b7:2a:e7:3f:5b:bb:ac:
82:d1:77:4e:dc:79:44:c3:7d:35:36:4a:af:16:c4:
d3:6c:ed:ce:75:55:24:1c:a3:be:2b:3b:27:2d:0c:
cc:4d:71:90:a7:df:6a:5c:63:f9:51:0b:35:e0:3e:
f0:d9:86:0e:39:88:f7:a8:65:9e:64:dd:5f:d4:23:
f2:e8:50:3d:73:29:67:f9:51:37:0f:06:e2:1b:16:
8e:f4:31:f3:89:94:d3:9e:0e:58:0d:bf:0c:1e:d2:
a3:4a:46:50:c5:d9:c3:e0:48:73:d2:35:c4:cf:96:
de:c5:1f:bd:8d:18:e3:21:bb:7a:6f:d9:f7:1a:a0:
8f:9f:2d:8f:58:12:89:98:28:e5:ce:7c:e0:85:63:
b6:04:79:66:70:05:47:be:78:73:13:02:79:f5:44:
7a:92:12:7b:2d:2e:c4:a9:9c:29:27:12:df:96:cc:
75:43:f9:94:e9:7a:1c:3d:d7:46:eb:3f:3d:ee:48:
b1:fd:1d:02:66:38:59:fe:b2:3e:0d:33:19:b2:cd:
2b:ba:bf:5f:fb:f4:4b:9c:8b:76:72:93:13:fe:3d:
c5:5a:f8:aa:2e:30:9f:0f:6a:09:ba:7f:59:b3:5e:
b4:01:1e:4a:21:af:c2:09:0d:4a:1b:55:02:a9:03:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:FF:3D:C2:C9:28:7F:42:24:5B:09:56:6D:19:A8:85:3F:38:68
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/DYT_PcLJKH9CJFsJVm0ZqIU_OGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:15:44:ee:bc:bb:fe:cf:5a:52:74:ca:99:c2:e2:92:c7:4c:
52:ef:97:56:14:b0:1e:bc:f6:4b:62:2a:e8:04:1c:6d:df:ed:
30:d4:58:df:88:bb:ff:68:10:8d:c8:0a:1c:21:9e:72:4f:a3:
d1:f2:29:6c:97:68:79:cc:2d:54:7c:38:cd:33:54:35:11:eb:
9d:f6:af:8c:bc:54:55:fb:f9:2a:24:6b:ef:6d:a7:1f:f3:9f:
e4:99:ea:60:c3:14:2c:43:fd:64:b1:57:c9:58:63:24:a0:28:
f8:95:0d:f2:6a:bd:fe:d8:20:e0:50:b1:eb:0b:19:eb:2c:de:
ac:7d:93:32:da:56:3f:92:ff:8c:51:56:1d:f8:dc:6f:d9:db:
26:20:96:ae:de:ba:f6:5b:54:61:41:a3:f2:b5:f1:33:8b:cf:
c1:2a:68:d0:b0:a8:25:1c:2e:09:62:3d:b7:e9:7c:15:8b:32:
4e:2f:2a:71:45:69:2a:61:fc:5d:ba:df:ab:41:fb:e8:7e:70:
78:42:1e:e0:6f:bb:8f:0e:04:12:33:79:d7:48:b6:28:0e:6c:
5d:97:bc:f9:2b:37:bf:43:cc:ef:17:f9:f2:ac:02:d6:fc:fa:
36:00:eb:cf:c2:4f:fd:4c:65:fa:ed:bb:c0:8c:fa:2e:71:35:
b2:b8:7b:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8Zj9RPWaRDAN4ukvIw5SGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwNjMwMTcyNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDg0ZmYzZGMyYzkyODdmNDIyNDViMDk1NjZkMTlhODg1M2YzODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjvayvbvkbcq5z9bu6yC0XdO3HlE
w301NkqvFsTTbO3OdVUkHKO+KzsnLQzMTXGQp99qXGP5UQs14D7w2YYOOYj3qGWe
ZN1f1CPy6FA9cyln+VE3DwbiGxaO9DHziZTTng5YDb8MHtKjSkZQxdnD4Ehz0jXE
z5bexR+9jRjjIbt6b9n3GqCPny2PWBKJmCjlznzghWO2BHlmcAVHvnhzEwJ59UR6
khJ7LS7EqZwpJxLflsx1Q/mU6XocPddG6z897kix/R0CZjhZ/rI+DTMZss0rur9f
+/RLnIt2cpMT/j3FWviqLjCfD2oJun9Zs160AR5KIa/CCQ1KG1UCqQNKQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2E/z3CySh/QiRbCVZtGaiFPzhoMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvRFlUX1BjTEpLSDlDSkZzSlZtMFpxSVVfT0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUK5oMA0G
CSqGSIb3DQEBCwUAA4IBAQArFUTuvLv+z1pSdMqZwuKSx0xS75dWFLAevPZLYiro
BBxt3+0w1FjfiLv/aBCNyAocIZ5yT6PR8ilsl2h5zC1UfDjNM1Q1Eeud9q+MvFRV
+/kqJGvvbacf85/kmepgwxQsQ/1ksVfJWGMkoCj4lQ3yar3+2CDgULHrCxnrLN6s
fZMy2lY/kv+MUVYd+Nxv2dsmIJau3rr2W1RhQaPytfEzi8/BKmjQsKglHC4JYj23
6XwVizJOLypxRWkqYfxdut+rQfvofnB4Qh7gb7uPDgQSM3nXSLYoDmxdl7z5Kze/
Q8zvF/nyrALW/Po2AOvPwk/9TGX67bvAjPoucTWyuHsb
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:17:11 2026 by rpki-client