Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/_Fd8FpD-5-cLAIFtZPeDf9ie7es.roa
File: _Fd8FpD-5-cLAIFtZPeDf9ie7es.roa (raw, json)
Hash identifier: N9qZT/gmkIhOnoCGMYKtzoJ2HEo/48v02LJazQQOPqs=
Subject key identifier: FC:57:7C:16:90:FE:E7:E7:0B:00:81:6D:64:F7:83:7F:D8:9E:ED:EB
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A18D3094A8C173B6C20CF8176569333829
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/_Fd8FpD-5-cLAIFtZPeDf9ie7es.roa
Signing time: Fri 30 Oct 2026 14:22:13 +0000
ROA not before: Fri 30 Oct 2026 14:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 80.174.135.0/24 maxlen: 24
80.174.203.0/24 maxlen: 24
80.174.204.0/24 maxlen: 24
93.95.23.0/24 maxlen: 24
202.58.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:30:94:a8:c1:73:b6:c2:0c:f8:17:65:69:33:38:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 30 14:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc577c1690fee7e70b00816d64f7837fd89eedeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:cf:15:77:a9:13:93:d5:e4:d5:40:b5:26:
ba:7b:06:81:5e:f8:24:cd:89:36:53:de:14:88:82:
46:9e:99:4d:e2:b0:2b:16:f5:b3:8b:37:d7:3c:1d:
59:44:43:43:4b:5f:c7:82:9c:1e:0d:f9:1d:10:27:
69:15:1b:3d:bf:25:5e:42:22:24:de:fc:72:50:f6:
e4:52:65:85:11:9d:80:a4:8d:06:0c:3f:26:15:91:
62:6a:95:8c:7b:6a:d5:73:c1:b7:d1:b7:91:05:34:
9d:3f:f8:e6:99:33:d9:70:f2:49:8e:85:d8:3e:7e:
f1:2d:49:76:f4:c6:b7:1b:c4:d6:ea:66:59:98:1e:
ce:57:75:6d:4a:29:6b:b3:04:ca:4c:5e:be:32:17:
17:19:7a:a6:5a:f1:51:f3:33:45:8e:09:45:0f:2f:
bf:a0:e0:e5:a0:94:3e:93:a1:31:51:55:e6:01:b5:
8b:a7:ea:0a:ea:c6:1d:aa:7e:84:5e:5d:16:bf:dc:
5f:c8:a9:d8:47:b6:69:6d:6c:a6:ec:cb:0d:c2:f7:
9b:44:1f:85:38:0a:4f:64:39:22:61:87:46:58:2c:
ca:4a:27:ad:a3:0c:b2:4e:c3:b5:b0:ec:50:c9:28:
fb:85:78:b1:2b:fe:4f:dc:a8:cb:90:72:0f:00:4b:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:7C:16:90:FE:E7:E7:0B:00:81:6D:64:F7:83:7F:D8:9E:ED:EB
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/_Fd8FpD-5-cLAIFtZPeDf9ie7es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.135.0/24
80.174.203.0-80.174.204.255
93.95.23.0/24
202.58.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5b:fd:47:b6:f6:a6:f0:c2:12:2f:58:66:13:60:a6:37:ad:
76:86:3a:dd:6f:36:4d:18:8b:17:ac:85:de:b1:1c:0a:94:28:
51:fc:4a:b8:b6:e5:ab:fd:3e:26:41:05:6d:2e:d3:38:6c:b0:
6c:b0:89:6f:af:58:ac:38:57:8c:dd:28:24:b9:fc:c0:08:72:
a9:3c:05:67:05:9d:01:bc:24:a2:3b:65:f4:b4:d7:4d:85:18:
71:0c:74:b4:83:e8:eb:58:0d:b3:b1:ef:81:96:bb:cc:fc:c4:
e3:ad:40:36:c6:54:8b:ee:13:f7:fc:d6:50:e7:e0:13:22:1f:
e2:ea:3b:a2:74:b3:20:24:1c:4e:ec:37:dc:aa:88:6a:d6:4f:
61:d7:18:ad:e7:35:06:40:34:a2:35:0b:8e:d3:a3:88:4e:11:
8c:c3:46:60:47:a7:02:a1:de:93:ed:7e:c5:c2:cd:55:be:1d:
29:8c:06:0d:5d:6f:8a:af:f7:6e:7e:f8:40:3c:7b:dd:11:a8:
42:31:23:66:ad:55:d9:65:a4:16:b8:3f:4b:7d:a3:db:eb:fa:
2d:c1:bb:11:c0:ad:b2:9f:be:06:26:1d:15:a5:2b:85:44:7d:
46:2e:ca:b4:1d:04:7f:25:08:df:72:17:0e:83:ad:50:7c:1b:
a0:88:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:51:27 2026 by rpki-client