Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/g952-Dx8RPqZ9d7ZFrwiXxcz1Bs.roa
File: g952-Dx8RPqZ9d7ZFrwiXxcz1Bs.roa (raw, json)
Hash identifier: m+xGgcoyjZzC8OaS+PwG/1kW4RfwvvedJMhkcRHvmJw=
Subject key identifier: 83:DE:76:F8:3C:7C:44:FA:99:F5:DE:D9:16:BC:22:5F:17:33:D4:1B
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F033ED2CF6EB4922EB476E1F47A0CD98F
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/g952-Dx8RPqZ9d7ZFrwiXxcz1Bs.roa
Signing time: Fri 26 Jun 2026 09:24:36 +0000
ROA not before: Fri 26 Jun 2026 09:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 80.174.128.0/21 maxlen: 24
80.174.244.0/23 maxlen: 24
80.174.246.0/24 maxlen: 24
83.143.171.0/24 maxlen: 24
83.143.174.0/23 maxlen: 24
93.95.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:3e:d2:cf:6e:b4:92:2e:b4:76:e1:f4:7a:0c:d9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 26 09:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83de76f83c7c44fa99f5ded916bc225f1733d41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:af:d5:25:c8:4e:3a:8b:b4:1e:4d:89:ee:
1c:03:f1:e3:2b:d9:f8:03:50:78:5a:e8:28:53:f1:
d4:c7:a6:27:01:fd:cf:32:59:68:01:9d:8c:63:42:
d2:e7:b7:ed:55:69:5f:76:b1:a7:be:b0:0e:9f:82:
8b:78:ff:12:ab:c8:86:2e:22:d7:b3:46:52:6b:70:
00:a0:6d:16:0e:db:1d:1c:d6:16:e4:54:ef:96:62:
aa:c5:ff:f8:1d:d5:ad:4a:32:b6:b9:bb:19:01:30:
32:12:5c:ce:1b:6a:e6:4a:95:f7:fe:9f:e1:6b:53:
8e:1c:e5:36:0f:d7:ac:c2:d4:47:bc:53:fe:b1:89:
b5:8f:4d:3d:ac:0b:c8:75:95:6d:14:ba:62:bc:a9:
1e:4e:99:e0:2a:2c:9e:fd:d5:42:98:a8:5d:79:a0:
87:3c:47:19:42:a9:a8:9a:41:58:8c:2b:68:d8:70:
cb:f0:52:d5:e5:da:85:b0:4c:b9:16:22:d5:45:25:
7b:63:60:a9:a0:7b:9b:ad:5c:23:06:89:57:53:2b:
55:09:e4:9c:af:b2:62:64:52:3e:71:bd:e8:70:d3:
f8:17:7d:4b:d7:92:9a:31:d8:a1:76:a3:84:b5:9e:
c2:c3:a3:75:96:f8:8d:6a:d6:3e:b2:41:29:62:c8:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:76:F8:3C:7C:44:FA:99:F5:DE:D9:16:BC:22:5F:17:33:D4:1B
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/g952-Dx8RPqZ9d7ZFrwiXxcz1Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.128.0/21
80.174.244.0-80.174.246.255
83.143.171.0/24
83.143.174.0/23
93.95.16.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:36:c3:ad:4d:93:0a:43:65:d4:3f:9d:96:db:42:5c:84:f0:
17:4d:f2:61:2d:f7:79:2d:9e:ac:4d:d7:53:57:b7:66:0e:8e:
db:37:4c:d1:1b:93:cb:0b:07:67:06:dc:27:cf:32:88:a6:38:
7f:e1:40:5a:a5:5c:1f:15:22:13:21:c6:84:55:a3:11:c5:ac:
21:4c:c7:74:23:17:58:14:95:08:98:3e:71:af:08:a4:85:95:
a4:ea:a8:9c:16:57:d9:18:cf:d0:b6:77:2a:c3:39:d5:33:0a:
af:21:85:46:03:4c:ba:45:10:1c:22:ac:f1:4a:1f:13:06:42:
a4:16:31:f6:f8:de:ff:07:b7:6c:ad:5d:8d:53:8a:d0:bb:fd:
f2:e5:9d:96:fc:f9:87:2c:60:30:34:03:bc:e8:22:4d:35:51:
ec:a0:c9:4e:08:ec:0c:1b:05:30:33:6f:69:91:f7:ee:d7:58:
f7:0e:37:0b:ca:8b:de:27:67:67:d8:bf:46:2e:f4:8c:11:a1:
34:de:d2:5d:0e:a7:91:0e:5a:a8:f6:40:ec:ea:65:b0:95:ce:
8b:ce:70:a6:45:ce:4f:82:48:7b:35:b0:62:e9:20:92:f0:e2:
65:03:1e:45:8d:3b:b3:a2:7d:ba:21:64:62:69:b6:81:66:c6:
4d:1e:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:17 2026 by rpki-client