Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ZTfFnlVPs0jqVtKhNY1W6REgVTo.roa
File: ZTfFnlVPs0jqVtKhNY1W6REgVTo.roa (raw, json)
Hash identifier: DY4bo++5JP9csslzTNXD8o/1EwFJpWmc6JHBfz5aBOU=
Subject key identifier: 65:37:C5:9E:55:4F:B3:48:EA:56:D2:A1:35:8D:56:E9:11:20:55:3A
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F4BD4799699C38F7F919986438E02DB7C
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ZTfFnlVPs0jqVtKhNY1W6REgVTo.roa
Signing time: Fri 10 Jul 2026 11:40:43 +0000
ROA not before: Fri 10 Jul 2026 11:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 80.174.2.0/24 maxlen: 24
80.174.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:d4:79:96:99:c3:8f:7f:91:99:86:43:8e:02:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 10 11:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6537c59e554fb348ea56d2a1358d56e91120553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:d3:cf:8d:95:df:92:95:81:6f:6e:f8:7b:
34:a6:f8:c2:b7:4d:5a:62:56:b0:30:21:1c:07:21:
1c:59:00:a5:c0:7f:cc:2f:39:c7:cc:8a:3b:0a:8f:
6a:8b:45:c2:9f:c6:4c:25:65:57:b7:d0:99:1b:95:
31:1c:9d:b9:21:14:44:49:c2:f9:e6:d3:d3:86:57:
d9:8d:d4:18:4f:e8:e9:73:f1:ba:53:a6:a0:30:09:
3e:eb:ac:96:b9:e3:8d:5c:7a:e9:c3:09:49:01:27:
b1:e4:1d:13:fd:59:12:27:61:45:ed:d1:c2:e7:59:
f2:a0:ae:91:d3:85:48:56:9c:5d:c3:82:eb:1c:d3:
71:28:52:25:ab:1c:a1:75:14:78:df:73:b0:2a:f8:
19:de:46:3d:d2:be:45:83:ce:1a:9f:74:0e:14:c0:
78:e7:1b:8b:84:7d:16:33:19:15:9a:4f:ff:4b:d0:
ed:b6:00:a4:ed:57:99:46:cd:3f:b4:79:01:43:fc:
e0:63:9f:52:ea:00:61:42:5e:fe:35:83:57:80:69:
3a:97:25:78:8a:fa:a5:c0:dd:7c:f9:71:14:62:91:
a2:67:e5:4d:fd:b7:f7:2f:c1:d9:85:c3:fd:d7:96:
cd:2f:4f:31:5d:ad:91:4e:56:64:4d:d8:76:dc:e1:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:37:C5:9E:55:4F:B3:48:EA:56:D2:A1:35:8D:56:E9:11:20:55:3A
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ZTfFnlVPs0jqVtKhNY1W6REgVTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.2.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:d4:a1:49:56:9d:82:4c:14:a2:a4:47:95:18:37:73:98:9f:
aa:85:55:96:97:d7:eb:1a:26:2e:da:83:be:4b:b6:97:d9:ee:
30:35:9e:df:59:5f:9c:00:04:cc:63:94:72:cc:48:4a:1e:2d:
f4:e1:45:65:3f:99:76:7d:b4:8f:7e:ca:a2:9a:05:ca:cd:38:
e7:99:29:c4:11:e2:da:76:98:ab:9c:16:93:df:bf:72:2b:9f:
5b:9c:1c:83:11:7f:33:84:f3:98:52:a8:42:05:d6:49:83:8a:
e4:4c:af:4b:4c:68:de:cf:73:32:52:a9:0b:30:91:b2:5c:04:
2a:26:db:3d:fb:e0:46:b4:51:bf:9d:76:05:02:c7:56:af:64:
6d:1c:bc:21:55:b1:78:7c:b3:fc:f2:d7:8c:06:94:b1:8a:d1:
09:25:aa:b4:91:f4:96:78:3f:73:74:4e:06:93:fa:6e:a5:02:
f9:ce:cd:0d:7c:8c:8c:d4:8d:8d:ee:d9:4e:04:63:f5:80:27:
44:75:e7:05:85:17:3c:b0:54:fb:b7:e0:8d:5b:85:98:0c:82:
06:bf:90:95:83:9a:c3:32:da:a0:e2:8c:e1:88:31:94:8b:5f:
2d:ff:b0:33:5f:43:82:e8:7c:ab:0a:67:9f:59:a0:c9:a6:0d:
7e:3a:22:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:11 2026 by rpki-client