Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b8rph-cr35APSGmIzjlav9x-ibM.roa
File: b8rph-cr35APSGmIzjlav9x-ibM.roa (raw, json)
Hash identifier: ewv4AA8yj9deK9EvneGfkLw6HKhasqrB49rsY1tooVU=
Subject key identifier: 6F:CA:E9:87:E7:2B:DF:90:0F:48:69:88:CE:39:5A:BF:DC:7E:89:B3
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F46077E676AD07A98330E1F7EF29B39D5
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b8rph-cr35APSGmIzjlav9x-ibM.roa
Signing time: Thu 09 Jul 2026 08:38:43 +0000
ROA not before: Thu 09 Jul 2026 08:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 80.174.108.0/23 maxlen: 24
80.174.120.0/24 maxlen: 24
80.174.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:07:7e:67:6a:d0:7a:98:33:0e:1f:7e:f2:9b:39:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 9 08:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fcae987e72bdf900f486988ce395abfdc7e89b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:73:40:e8:9c:bd:f8:45:9e:18:f3:c4:2b:
cd:3d:fa:5a:27:d2:bc:89:74:ea:dc:6c:72:d1:26:
8e:88:e3:39:b0:78:0e:be:01:db:00:ea:dc:fe:30:
dc:10:13:26:c7:db:60:de:fb:a9:dd:39:f9:dd:25:
2d:a6:3a:e6:02:10:87:8a:be:70:d0:c7:85:30:6f:
41:c4:79:08:03:6b:7b:25:5f:9e:ed:d4:17:08:e0:
82:0c:ee:5e:bb:18:a1:9b:22:9c:46:85:08:31:28:
c5:89:d2:f6:9f:e0:70:7b:48:85:e5:37:7b:ec:93:
bd:1d:11:9d:bb:19:3c:78:5d:21:a1:8c:bf:4c:39:
e7:72:37:f6:ff:a9:1a:3c:d7:69:6e:c9:03:e0:09:
70:9d:eb:5f:a1:e4:a3:7b:62:7b:44:53:38:2e:93:
0d:5d:c9:60:e2:e5:c0:94:b6:62:79:f8:3f:f8:f2:
06:de:5d:c6:a0:c6:47:18:da:f3:69:af:9a:f4:43:
b3:3c:64:65:23:53:cc:83:dd:c2:45:99:d1:49:52:
c1:83:66:53:df:07:dd:a6:5b:69:71:ac:ca:0f:27:
f6:06:ef:72:16:ef:e8:83:22:79:a2:e3:fa:ee:82:
6f:6e:54:b0:92:eb:fc:0f:f9:08:bc:1b:cb:fe:25:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:E9:87:E7:2B:DF:90:0F:48:69:88:CE:39:5A:BF:DC:7E:89:B3
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b8rph-cr35APSGmIzjlav9x-ibM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.108.0/23
80.174.120.0/24
80.174.127.0/24
Signature Algorithm: sha256WithRSAEncryption
24:26:bf:32:a3:80:81:df:4e:8c:8b:4b:1d:3c:b9:bb:03:db:
c9:52:67:81:76:a1:66:59:cd:a5:78:88:ab:13:e9:54:ea:54:
95:f1:c1:1e:56:48:57:7f:a3:50:05:0e:4c:c0:78:97:a5:9b:
96:fe:cd:1e:36:80:11:12:d9:3d:bf:14:63:45:59:bb:a2:0a:
09:0a:f4:d3:1a:94:ea:d0:6b:02:e8:db:25:60:08:43:3f:9e:
af:6f:05:61:76:db:e6:65:12:b0:75:3d:cd:99:67:fb:f0:fe:
d8:69:0b:d0:cd:c2:40:fa:52:22:0a:5c:e2:3b:49:b6:1e:c7:
2a:30:d8:6f:af:ee:01:a2:de:55:e3:63:b3:12:5b:8f:6d:fd:
66:2c:05:26:f7:c2:15:25:31:64:f6:96:0a:53:5d:ac:bf:73:
c7:5b:90:6d:f9:11:97:c7:1d:a7:49:ea:32:2d:8f:92:93:6e:
5f:ff:55:52:44:45:8a:12:5b:91:77:6d:84:5f:e7:b2:53:ae:
9a:75:50:67:cc:da:2a:7f:96:06:42:68:04:8a:df:b4:b9:f2:
d4:11:c7:a8:5e:66:6a:2f:1d:35:39:5a:1e:b7:32:97:5a:a1:
85:9d:dd:3b:6f:6b:ac:49:36:35:24:80:ff:7e:1a:3e:d6:16:
0f:c0:10:f3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9GB35natB6mDMOH37ymznVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwNzA5MDgzODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmNhZTk4N2U3MmJkZjkwMGY0ODY5ODhjZTM5NWFiZmRjN2U4OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR9zQOicvfhFnhjzxCvNPfpaJ9K8
iXTq3Gxy0SaOiOM5sHgOvgHbAOrc/jDcEBMmx9tg3vup3Tn53SUtpjrmAhCHir5w
0MeFMG9BxHkIA2t7JV+e7dQXCOCCDO5euxihmyKcRoUIMSjFidL2n+Bwe0iF5Td7
7JO9HRGduxk8eF0hoYy/TDnncjf2/6kaPNdpbskD4AlwnetfoeSje2J7RFM4LpMN
Xclg4uXAlLZiefg/+PIG3l3GoMZHGNrzaa+a9EOzPGRlI1PMg93CRZnRSVLBg2ZT
3wfdpltpcazKDyf2Bu9yFu/ogyJ5ouP67oJvblSwkuv8D/kIvBvL/iX6DwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG/K6YfnK9+QD0hpiM45Wr/cfomzMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvYjhycGgtY3IzNUFQU0dtSXpqbGF2OXgtaWJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUK5sAwQA
UK54AwQAUK5/MA0GCSqGSIb3DQEBCwUAA4IBAQAkJr8yo4CB306Mi0sdPLm7A9vJ
UmeBdqFmWc2leIirE+lU6lSV8cEeVkhXf6NQBQ5MwHiXpZuW/s0eNoAREtk9vxRj
RVm7ogoJCvTTGpTq0GsC6NslYAhDP56vbwVhdtvmZRKwdT3NmWf78P7YaQvQzcJA
+lIiClziO0m2HscqMNhvr+4Bot5V42OzEluPbf1mLAUm98IVJTFk9pYKU12sv3PH
W5Bt+RGXxx2nSeoyLY+Sk25f/1VSREWKEluRd22EX+eyU66adVBnzNoqf5YGQmgE
it+0ufLUEceoXmZqLx01OVoetzKXWqGFnd07b2usSTY1JID/fho+1hYPwBDz
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:59 2026 by rpki-client