Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa
File: jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa (raw, json)
Hash identifier: SIMXAPgCs88kIDrWS92r3YG0rKy8dHX8r7UiSduHK9s=
Subject key identifier: 8E:0E:4C:E6:4F:FA:18:A3:59:F5:8D:AB:BD:96:65:B5:A1:69:36:8E
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F22103B2E191B6357F03AE9CD3D5E5FD5
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa
Signing time: Thu 02 Jul 2026 09:01:56 +0000
ROA not before: Thu 02 Jul 2026 09:01:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3949
IP address blocks: 80.174.216.0/22 maxlen: 24
80.174.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:3b:2e:19:1b:63:57:f0:3a:e9:cd:3d:5e:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 2 09:01:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e0e4ce64ffa18a359f58dabbd9665b5a169368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:c1:a4:0e:96:eb:10:18:65:d8:4e:ab:ec:
38:3c:cb:57:e1:fd:6d:96:20:0f:60:dd:d2:44:1b:
a2:ee:38:9c:a1:77:82:13:01:f5:be:b6:5c:12:e3:
e3:a2:70:77:ba:c2:75:48:cb:ed:ae:1b:b8:fc:c1:
c9:1c:01:f1:85:f0:23:cd:2f:6e:05:82:2f:6e:60:
91:3b:b7:73:c8:80:e9:ea:3e:86:77:04:ab:6e:10:
52:26:33:4f:97:0f:a1:a2:03:77:13:44:cc:b8:43:
53:c4:48:ad:4f:7f:e1:65:df:1d:19:08:0a:ee:a1:
ee:b4:3b:6b:7d:a4:85:66:55:c5:ac:dc:2d:60:ab:
18:00:56:42:65:f8:e3:9a:67:3e:82:f9:e3:0c:5a:
61:8a:a5:c6:c7:aa:b1:a9:a4:2d:66:c8:c2:07:04:
9b:c6:57:50:f3:4d:a2:a0:bd:b8:46:68:88:f5:a3:
16:3f:3b:7a:87:6c:09:98:4b:b5:b1:d8:1d:94:e5:
a6:34:20:b2:fa:4e:a7:5b:08:db:d9:ec:c0:cd:c4:
43:77:f9:28:47:34:09:b8:58:63:1a:68:f7:ce:bb:
73:55:24:66:3a:bf:29:42:bf:4f:a2:c8:2b:23:3d:
47:e6:6e:e9:5a:5b:02:3b:3e:72:de:40:14:13:51:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0E:4C:E6:4F:FA:18:A3:59:F5:8D:AB:BD:96:65:B5:A1:69:36:8E
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.216.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:7d:bc:6c:82:82:71:9d:d8:43:cd:f2:7d:5f:cf:9d:57:e1:
a9:21:eb:18:ce:9c:bd:55:db:a1:4c:2b:76:97:78:18:59:8b:
4a:02:7a:84:39:5b:38:aa:4c:88:d9:82:95:20:77:6e:a1:73:
84:a7:59:74:d8:b5:83:4d:19:17:4f:07:ff:72:90:17:19:a2:
84:fb:b0:45:a4:53:92:cd:1b:db:25:da:46:ce:27:6e:00:cd:
37:af:d1:dc:f8:8f:14:51:10:ad:04:8f:ac:74:67:aa:93:d3:
79:d6:a1:1d:0d:7b:01:9a:95:63:27:5c:b6:7e:a5:dc:ed:59:
4c:7f:ec:a7:f6:bd:99:9d:f7:c0:38:6d:0b:bc:d4:cc:31:fa:
8b:8d:92:ea:e9:fe:0e:a2:13:0a:44:aa:13:3d:e4:ce:62:7e:
79:e9:ab:1e:29:16:10:da:6d:2b:aa:36:f2:b1:7d:e2:90:fd:
bf:b5:b3:39:fd:d4:79:c2:d4:9c:35:64:0c:e1:59:9c:c0:f9:
8c:89:7c:d8:41:27:b0:f8:ff:fb:c2:f7:58:32:4e:73:8a:1e:
4e:86:ab:c7:d4:bd:64:3c:b2:5a:97:94:79:e3:59:61:0b:72:
d2:a9:8a:c8:de:18:17:2e:d3:0b:2e:7f:99:03:8f:47:52:e6:
91:4f:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:39 2026 by rpki-client