Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/uZbXTdDHMv7m32bhiATUNFDLhp0.roa
File: uZbXTdDHMv7m32bhiATUNFDLhp0.roa (raw, json)
Hash identifier: KbjMU4tIVV+CqSqCJ1Q+B+0gsAiOte5iUDdYWse6lrs=
Subject key identifier: B9:96:D7:4D:D0:C7:32:FE:E6:DF:66:E1:88:04:D4:34:50:CB:86:9D
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A1B02975D7E1A3579492066FDC93802839
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/uZbXTdDHMv7m32bhiATUNFDLhp0.roa
Signing time: Fri 06 Nov 2026 09:21:09 +0000
ROA not before: Fri 06 Nov 2026 09:21:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 80.174.3.0/24 maxlen: 24
80.174.7.0/24 maxlen: 24
80.174.202.0/24 maxlen: 24
80.174.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:29:75:d7:e1:a3:57:94:92:06:6f:dc:93:80:28:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 6 09:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b996d74dd0c732fee6df66e18804d43450cb869d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:7c:79:bc:f5:ea:3e:c1:a4:41:b2:bc:6a:
60:1c:05:51:18:0e:77:ab:dd:9a:f0:9a:3e:a3:2e:
6d:c0:38:e9:a2:d6:63:ec:1d:91:db:ef:98:e3:16:
ed:4e:1b:23:8b:8d:ef:2a:de:cd:ee:ff:2c:ce:91:
0e:e9:6c:11:26:07:cb:50:a2:f9:f2:5a:43:df:62:
59:fd:18:dc:eb:85:de:e7:1b:0f:2d:04:4c:e1:1a:
9f:5f:97:18:4d:08:d4:2d:be:fb:40:21:e9:a9:94:
97:ab:99:41:b6:ac:51:ac:b9:1d:49:f8:5b:61:46:
4f:03:34:53:41:3d:6f:85:1e:cb:49:f8:4d:55:54:
e1:f2:8f:51:e3:15:4c:56:06:66:b7:ac:e6:99:d9:
25:7f:53:23:dc:b6:d3:9a:0a:46:62:d7:6d:4a:3d:
1f:92:ce:c1:27:da:62:ab:0c:64:34:7c:00:a8:0d:
08:dc:43:0a:9c:c8:ff:48:66:a4:48:07:6c:a9:aa:
5f:00:48:54:8a:49:0a:13:94:98:d7:ba:e5:c1:55:
14:48:3a:0f:4b:4b:d6:07:49:04:2c:f0:e7:4b:6f:
21:f1:e0:e9:4e:76:64:9c:69:77:54:b7:04:62:17:
85:65:28:12:62:44:51:0a:20:0c:96:f7:61:28:0e:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:D7:4D:D0:C7:32:FE:E6:DF:66:E1:88:04:D4:34:50:CB:86:9D
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/uZbXTdDHMv7m32bhiATUNFDLhp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.3.0/24
80.174.7.0/24
80.174.202.0/24
80.174.205.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ff:ff:0f:da:a6:52:3c:92:0e:48:87:d1:79:01:bc:5b:29:
ba:f4:81:cd:f8:aa:be:57:e0:0e:fe:f4:b7:de:cc:c9:04:c2:
ef:ca:b9:3d:5a:1b:df:8a:57:b9:3d:8b:04:7d:91:b4:41:44:
64:39:95:6e:30:47:45:7a:78:6c:92:ef:46:88:7d:47:75:09:
9f:1c:bc:c0:71:d8:b7:20:b0:bc:e5:90:6a:eb:a4:3f:89:17:
33:30:85:a6:94:fb:c1:ec:fe:29:af:e9:82:a7:28:4c:af:76:
c9:9e:94:d5:67:73:32:36:84:53:5f:fb:f7:5f:ec:f6:a1:d4:
87:39:4b:82:59:80:a6:93:99:e4:49:18:e8:6d:4d:13:ff:ed:
c8:2e:fb:ee:65:6c:38:22:84:c8:57:0d:4a:3c:48:8b:55:46:
1c:89:6c:9f:61:51:f4:6d:2b:f2:72:95:27:da:3e:0c:07:79:
62:80:99:bc:28:10:f4:81:cd:9e:60:83:aa:2f:75:ea:7b:85:
5b:43:d1:c1:c4:49:0e:40:31:31:4b:2e:7f:fb:e1:60:6b:2b:
4a:5b:18:c7:05:db:80:e3:e1:26:b7:40:1d:a2:56:5a:8c:22:
16:c4:3b:62:6b:af:0d:8d:f5:34:e7:93:e7:9e:72:17:b6:e5:
68:04:10:ad
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaGwKXXX4aNXlJIGb9yTgCg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYxMTA2MDkyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTk2ZDc0ZGQwYzczMmZlZTZkZjY2ZTE4ODA0ZDQzNDUwY2I4NjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoB8ebz16j7BpEGyvGpgHAVRGA53
q92a8Jo+oy5twDjpotZj7B2R2++Y4xbtThsji43vKt7N7v8szpEO6WwRJgfLUKL5
8lpD32JZ/Rjc64Xe5xsPLQRM4RqfX5cYTQjULb77QCHpqZSXq5lBtqxRrLkdSfhb
YUZPAzRTQT1vhR7LSfhNVVTh8o9R4xVMVgZmt6zmmdklf1Mj3LbTmgpGYtdtSj0f
ks7BJ9piqwxkNHwAqA0I3EMKnMj/SGakSAdsqapfAEhUikkKE5SY17rlwVUUSDoP
S0vWB0kELPDnS28h8eDpTnZknGl3VLcEYheFZSgSYkRRCiAMlvdhKA6vtQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLmW103QxzL+5t9m4YgE1DRQy4adMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvdVpiWFRkREhNdjdtMzJiaGlBVFVORkRMaHAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUK4DAwQA
UK4HAwQAUK7KAwQAUK7NMA0GCSqGSIb3DQEBCwUAA4IBAQBX//8P2qZSPJIOSIfR
eQG8Wym69IHN+Kq+V+AO/vS33szJBMLvyrk9Whvfile5PYsEfZG0QURkOZVuMEdF
enhsku9GiH1HdQmfHLzAcdi3ILC85ZBq66Q/iRczMIWmlPvB7P4pr+mCpyhMr3bJ
npTVZ3MyNoRTX/v3X+z2odSHOUuCWYCmk5nkSRjobU0T/+3ILvvuZWw4IoTIVw1K
PEiLVUYciWyfYVH0bSvycpUn2j4MB3ligJm8KBD0gc2eYIOqL3Xqe4VbQ9HBxEkO
QDExSy5/++FgaytKWxjHBduA4+Emt0AdolZajCIWxDtia68NjfU055PnnnIXtuVo
BBCt
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:17:56 2026 by rpki-client