Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/N_eH9tP8sKwGQPcNm7GNoBELV-M.roa
File: N_eH9tP8sKwGQPcNm7GNoBELV-M.roa (raw, json)
Hash identifier: u35SZW/814bffQ/2bUCoM6NNXgrCPwx/svz9dyeDXMM=
Subject key identifier: 37:F7:87:F6:D3:FC:B0:AC:06:40:F7:0D:9B:B1:8D:A0:11:0B:57:E3
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F8E7B9F9A484569508D9666F7615BD210
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/N_eH9tP8sKwGQPcNm7GNoBELV-M.roa
Signing time: Thu 23 Jul 2026 10:18:14 +0000
ROA not before: Thu 23 Jul 2026 10:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 45.6.44.0/22 maxlen: 22
45.120.220.0/22 maxlen: 22
62.106.67.0/24 maxlen: 24
80.174.2.0/23 maxlen: 23
80.174.4.0/22 maxlen: 22
80.174.128.0/17 maxlen: 17
80.174.144.0/22 maxlen: 22
80.174.148.0/22 maxlen: 22
80.174.152.0/21 maxlen: 21
80.174.160.0/22 maxlen: 22
80.174.165.0/24 maxlen: 24
80.174.166.0/24 maxlen: 24
80.174.167.0/24 maxlen: 24
80.174.168.0/21 maxlen: 21
80.174.174.0/24 maxlen: 24
80.174.176.0/20 maxlen: 20
80.174.200.0/21 maxlen: 21
83.143.168.0/21 maxlen: 21
83.143.171.0/24 maxlen: 24
128.0.40.0/24 maxlen: 24
181.201.0.0/17 maxlen: 24
202.58.108.0/22 maxlen: 22
202.58.111.0/24 maxlen: 24
212.86.98.0/24 maxlen: 24
212.118.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:7b:9f:9a:48:45:69:50:8d:96:66:f7:61:5b:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 23 10:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37f787f6d3fcb0ac0640f70d9bb18da0110b57e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:5e:8f:e0:f5:34:48:0a:34:4e:02:66:18:
af:97:14:e4:1b:e0:f9:d9:50:b2:bc:e8:00:cd:4b:
9c:af:56:e0:05:4c:d9:95:8e:09:15:a5:32:28:59:
21:44:a8:f1:f3:a7:ed:cf:ce:da:74:c8:f6:e2:25:
ee:b0:63:0b:b0:76:4b:5d:57:3e:9d:38:44:59:ea:
6f:a3:21:e6:0f:dd:f6:a3:be:d5:fb:aa:65:35:98:
43:7a:f6:7e:e6:d8:fc:a1:a6:a9:a2:55:d1:5f:76:
6f:8d:08:8b:de:e7:b8:fe:9a:8a:a7:f0:4e:99:b8:
c9:cb:de:11:69:bf:35:50:c9:d8:51:df:27:08:c8:
fb:42:b0:d7:24:7e:6e:ba:a9:6a:5b:8c:8d:1e:70:
ae:99:c3:9c:ca:ee:12:e9:23:ff:6c:70:71:f2:6d:
67:c6:a0:0e:31:a8:b9:40:86:be:e6:bd:15:b6:c4:
a6:07:c7:4b:2c:6b:4e:fc:1b:ed:1b:b4:2b:ce:18:
78:a5:32:0c:c0:6f:cf:e9:2c:3b:85:76:82:69:a2:
67:c3:a3:ce:da:2a:40:a8:ba:06:b9:8a:da:4f:32:
2b:68:18:b5:c3:07:f9:f7:ac:54:e7:9e:36:55:7e:
7c:7b:75:0a:9a:6e:15:a8:9e:45:74:01:aa:5f:a6:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F7:87:F6:D3:FC:B0:AC:06:40:F7:0D:9B:B1:8D:A0:11:0B:57:E3
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/N_eH9tP8sKwGQPcNm7GNoBELV-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.44.0/22
45.120.220.0/22
62.106.67.0/24
80.174.2.0-80.174.7.255
80.174.128.0/17
83.143.168.0/21
128.0.40.0/24
181.201.0.0/17
202.58.108.0/22
212.86.98.0/24
212.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
61:68:2a:28:4e:d2:6f:3c:a7:18:15:7e:2b:02:77:0e:f0:f5:
1f:ca:f8:cd:27:6b:27:ed:e4:ed:6d:5d:73:2b:99:ea:26:da:
c7:6d:0e:c2:5a:a5:80:28:4a:d6:93:b0:1e:b4:0c:8c:d6:48:
e4:6b:aa:ca:4e:90:54:c5:30:53:f4:ba:58:10:0b:34:f3:26:
61:9d:65:93:16:82:63:3f:3a:75:f7:cc:bc:d9:21:89:a9:6d:
cf:8b:2c:da:d4:fa:47:26:a4:76:d5:fb:f5:a6:36:00:c5:92:
9f:84:26:73:63:f4:fc:07:6a:eb:24:77:41:4f:68:0c:b9:89:
f4:40:08:2d:a9:5b:6f:3c:e4:f9:ab:48:ad:21:a7:32:a6:b8:
6c:c9:2b:b2:f1:1a:6e:e0:14:5c:f2:76:77:e0:5f:66:00:e8:
d7:27:7e:a1:d5:65:88:d3:0c:1c:b9:ce:75:32:f2:b1:ca:f0:
6e:af:1b:87:64:c4:b8:7b:51:62:5b:59:7d:1c:a4:a8:e7:52:
1a:3d:8f:0d:f2:3e:e4:d0:70:15:fd:7b:fe:04:0e:0c:f8:d1:
ed:d2:5c:d8:28:a9:b9:84:e2:5b:82:78:e5:44:e0:7b:13:16:
23:7e:88:2f:bb:dd:3c:25:6f:8c:e1:ae:bc:ab:3f:3d:9b:e7:
12:04:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:15 2026 by rpki-client