Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/P979fSRbZB2qJAsaRL-Un7UziRU.roa
File: P979fSRbZB2qJAsaRL-Un7UziRU.roa (raw, json)
Hash identifier: 8yhPFAaSS82QNaTgnE/13ZmLFiKivRIrhPw6xm3ENmI=
Subject key identifier: 3F:DE:FD:7D:24:5B:64:1D:AA:24:0B:1A:44:BF:94:9F:B5:33:89:15
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F46077D68996A50C137EDF0472D823DD5
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/P979fSRbZB2qJAsaRL-Un7UziRU.roa
Signing time: Thu 09 Jul 2026 08:38:43 +0000
ROA not before: Thu 09 Jul 2026 08:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.32.0/19 maxlen: 19
80.174.64.0/19 maxlen: 19
80.174.96.0/21 maxlen: 21
80.174.113.0/24 maxlen: 24
80.174.116.0/24 maxlen: 24
80.174.118.0/24 maxlen: 24
80.174.119.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:07:7d:68:99:6a:50:c1:37:ed:f0:47:2d:82:3d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 9 08:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fdefd7d245b641daa240b1a44bf949fb5338915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:ee:7c:f5:94:7b:8a:54:c4:6d:da:c6:28:
f7:66:75:0c:e8:44:3b:1a:d1:d0:21:68:12:4d:e7:
c7:6f:80:21:77:8b:03:d5:7e:c8:8e:59:49:57:d5:
71:da:24:63:d9:e6:94:03:9b:e5:5b:20:9a:b2:4e:
1b:30:25:5d:fa:b9:e7:4f:7a:9c:26:c4:d8:ca:73:
ca:a7:93:20:1b:13:16:16:25:35:61:75:14:ce:c3:
e6:f4:38:9a:4a:cb:14:3f:d5:ce:fd:26:25:4f:b1:
08:87:63:8c:37:67:ab:c2:e9:2b:d4:7e:69:da:ab:
1e:4f:50:64:90:38:ab:d8:34:fe:27:72:36:ff:0b:
26:61:8c:6c:dc:dc:a6:ed:80:25:59:46:e8:39:ee:
20:26:91:b1:cc:8c:c0:7d:5d:02:14:9c:f7:27:67:
88:2f:f4:ef:9f:2b:f5:43:c2:7a:a1:e0:ba:cb:b5:
88:a1:fa:2b:ba:c1:86:99:19:d8:66:1f:25:83:8c:
73:19:ff:f9:2d:74:7c:b3:e2:f0:14:b2:d6:4d:9a:
35:5a:aa:07:81:1b:9a:d7:98:ad:f9:16:f1:02:37:
ec:05:ec:e1:f0:db:7d:87:af:7f:8f:fe:c3:fe:7e:
0d:11:00:d9:17:d5:16:03:7f:98:18:9f:d6:3c:05:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:FD:7D:24:5B:64:1D:AA:24:0B:1A:44:BF:94:9F:B5:33:89:15
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/P979fSRbZB2qJAsaRL-Un7UziRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.32.0-80.174.103.255
80.174.113.0/24
80.174.116.0/24
80.174.118.0/23
80.174.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:99:67:75:d5:74:9b:39:b5:78:4f:e2:19:14:5b:6c:16:ff:
38:06:65:8d:56:16:29:27:85:b1:ca:4e:0e:bc:fb:4e:90:bd:
82:73:dd:cb:96:cd:e7:e2:f1:f7:99:5f:af:9c:5c:69:97:cd:
8b:c8:ac:aa:5f:6a:7a:4d:05:f3:09:e7:b9:94:f0:64:fe:1a:
84:d8:00:58:d9:d9:c7:2b:75:b6:58:32:2e:2b:31:95:9b:34:
05:27:fd:cd:49:84:81:cd:cc:d5:46:84:e2:ed:a5:b1:11:e5:
5c:2b:91:8b:ab:ee:3b:03:ff:b1:39:06:1d:f8:3f:15:2e:80:
64:c0:3a:89:89:dd:c3:96:68:ec:aa:99:4b:42:f2:04:21:b4:
69:b8:eb:ae:3d:2e:bf:63:fc:ca:ab:08:5c:c9:ea:5b:eb:cf:
58:88:c2:9d:2c:dc:a0:64:f5:f4:dd:52:b5:5a:9f:50:6f:0a:
b4:c1:e9:d3:96:5d:68:62:31:d8:a5:2b:0f:0b:32:f9:e1:99:
b7:93:b2:c4:55:4f:78:41:5e:1b:0b:3a:ee:da:fb:78:e9:69:
cc:2a:de:8d:92:b6:3d:d2:be:c5:b8:d8:57:ea:68:e0:89:80:
04:31:55:fa:ec:b6:93:a0:8c:46:26:03:25:31:e4:a6:b2:07:
d1:7d:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:33 2026 by rpki-client