Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xDSHSPDYqUST1yGDzj0hcab5JsA.roa
File: xDSHSPDYqUST1yGDzj0hcab5JsA.roa (raw, json)
Hash identifier: ck+8f/Zhnhgy0hfrt8gda3b7LFRzqdXFoYHCpi0gwvw=
Subject key identifier: C4:34:87:48:F0:D8:A9:44:93:D7:21:83:CE:3D:21:71:A6:F9:26:C0
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F4C21613A58698655B2772938B9BA939F
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xDSHSPDYqUST1yGDzj0hcab5JsA.roa
Signing time: Fri 10 Jul 2026 13:04:43 +0000
ROA not before: Fri 10 Jul 2026 13:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.174.0.0/24 maxlen: 24
80.174.1.0/24 maxlen: 24
80.174.248.0/24 maxlen: 24
103.85.32.0/24 maxlen: 24
103.85.33.0/24 maxlen: 24
103.85.34.0/24 maxlen: 24
103.85.35.0/24 maxlen: 24
202.58.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:21:61:3a:58:69:86:55:b2:77:29:38:b9:ba:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 10 13:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4348748f0d8a94493d72183ce3d2171a6f926c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:7c:a1:95:86:ad:d4:d7:e6:ba:46:f4:21:
1f:da:f7:9b:13:52:06:c4:f0:b8:6c:70:8e:23:d0:
f4:6a:3e:84:ae:d4:30:a7:bd:b9:43:63:3e:50:d4:
41:e9:7d:42:da:a4:b4:12:36:c7:8a:23:c6:03:f1:
ea:12:58:6a:c9:c6:dc:9e:7c:0a:0f:99:f5:71:f0:
f6:eb:8b:83:e4:57:94:68:7f:a8:ac:29:c8:ea:bd:
ee:a6:b0:35:e7:b6:fd:43:0d:45:e9:79:48:eb:88:
19:7f:da:bd:47:b2:d9:07:c7:bf:f9:21:c9:2f:20:
dc:28:0a:2c:07:e0:31:d0:da:b5:95:ae:ce:f0:8e:
4e:ce:f1:41:01:1b:b4:1f:58:73:e3:10:8f:19:76:
4e:f3:06:17:ab:5f:8a:be:cc:da:aa:9c:93:f9:fb:
e7:14:0c:77:08:50:c7:b9:49:ac:de:59:b4:74:0e:
0f:19:04:95:54:5e:10:b6:df:95:6c:d6:e3:b4:84:
f1:31:e0:e3:e6:ca:d5:65:3f:96:2b:5a:6e:af:5d:
a3:35:55:f6:ca:ca:e9:72:4a:72:19:c1:92:8c:78:
7c:90:51:f0:34:ee:db:bf:d4:70:b5:f6:e3:e9:aa:
15:87:99:54:b9:f3:1a:dd:4f:03:8a:9d:83:e0:94:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:87:48:F0:D8:A9:44:93:D7:21:83:CE:3D:21:71:A6:F9:26:C0
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xDSHSPDYqUST1yGDzj0hcab5JsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.0.0/23
80.174.248.0/24
103.85.32.0/22
202.58.108.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:c6:55:6b:6d:4d:ae:77:b3:ef:89:5e:78:87:e7:8c:a7:41:
5d:dd:66:11:61:26:80:81:d5:54:27:9e:28:69:cf:e0:30:8d:
f8:32:6d:8d:cb:4a:d7:79:89:d7:85:20:9d:04:53:8a:e8:a1:
71:fe:41:b8:b1:d0:1e:c8:66:71:11:5a:79:e6:87:a1:7b:b2:
39:76:0e:4b:57:7e:73:6d:49:f7:c9:3b:65:3d:fb:40:e5:a8:
0f:40:8c:4d:d6:3b:75:da:a0:a7:60:e2:e2:de:40:a2:8d:03:
ac:71:4c:7d:e7:fb:1d:a7:e0:02:55:a6:96:e4:c1:8b:8a:63:
d8:40:0d:48:76:0e:12:13:d0:43:5d:86:dd:b3:85:f2:66:2a:
44:07:ca:11:f8:ac:78:76:fe:db:81:c8:ca:6c:26:02:a6:1d:
0b:84:4f:c5:1c:98:6d:e8:db:3f:b7:9e:a4:41:5d:89:f4:8f:
40:a8:4e:e7:a9:7f:a2:f8:6f:72:58:03:6c:50:35:05:27:67:
04:1a:94:66:46:5f:da:01:f2:6b:95:cb:bf:9e:d9:b7:e3:08:
d3:77:46:f5:9c:fa:08:2f:2d:12:09:fd:dd:8f:d5:9b:de:58:
85:80:0d:e7:8c:fc:06:a1:18:a9:0a:ef:fc:a1:14:34:a6:8d:
cf:b5:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:54 2026 by rpki-client