Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0N4gYZar-fD8s0HLxSWOv6m746A.roa
File: 0N4gYZar-fD8s0HLxSWOv6m746A.roa (raw, json)
Hash identifier: mkxbY4c8YdX584lTzkeQRJe2hzAaSDVYejYFYoxSszw=
Subject key identifier: D0:DE:20:61:96:AB:F9:F0:FC:B3:41:CB:C5:25:8E:BF:A9:BB:E3:A0
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A1161969546EE6F00CBA5F429A7C2735DD
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0N4gYZar-fD8s0HLxSWOv6m746A.roa
Signing time: Wed 07 Oct 2026 11:22:06 +0000
ROA not before: Wed 07 Oct 2026 11:22:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 80.174.202.0/23 maxlen: 23
80.174.203.0/24 maxlen: 24
80.174.206.0/24 maxlen: 24
80.174.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:19:69:54:6e:e6:f0:0c:ba:5f:42:9a:7c:27:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 7 11:22:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0de206196abf9f0fcb341cbc5258ebfa9bbe3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:28:b6:24:80:f6:f5:67:5b:94:d7:fc:13:
29:7b:94:57:6e:bb:6f:fb:68:73:7f:25:e0:04:60:
6e:16:b5:cb:68:ab:6a:43:91:ab:bd:bf:57:3f:c9:
59:57:82:d4:5b:5b:77:06:a5:26:e8:27:e5:a5:27:
be:6c:42:82:fb:51:61:61:cc:46:6d:d0:93:c5:2c:
5a:4b:3e:d5:83:fa:e7:06:9e:26:35:d5:85:45:f2:
0e:44:b2:f1:db:5d:8b:35:19:82:3d:70:9f:47:83:
f1:86:74:1d:1d:27:f0:27:88:5d:5f:a4:66:93:14:
13:12:05:f9:58:46:2f:60:1a:4d:84:4d:52:e3:58:
b4:e0:25:f9:9c:b2:9b:c7:63:4c:10:9c:de:9b:d3:
3f:f4:24:fa:bd:25:ee:66:e3:7b:de:e3:c1:1a:18:
f2:8d:dc:2c:1a:62:07:5f:27:a4:0f:db:7b:ac:f6:
64:9d:4a:cb:a2:4d:fe:1b:96:94:d2:bf:0c:1b:23:
58:1f:b3:79:da:24:9f:1f:cf:fb:ae:da:ee:f1:bf:
f4:ce:78:e4:53:3c:7e:e4:72:21:20:f9:eb:77:a5:
90:29:49:20:d6:2d:27:c5:7d:15:3a:e1:a8:5d:20:
78:41:89:df:6d:ef:44:b5:14:05:61:3f:51:43:33:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:20:61:96:AB:F9:F0:FC:B3:41:CB:C5:25:8E:BF:A9:BB:E3:A0
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/0N4gYZar-fD8s0HLxSWOv6m746A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.202.0/23
80.174.206.0/23
Signature Algorithm: sha256WithRSAEncryption
41:40:7d:73:21:bd:f8:91:dc:03:62:0d:2b:b1:d5:2a:56:9e:
22:b1:3e:f5:bd:68:2a:03:03:5d:16:c8:9d:e3:89:36:2b:50:
81:a8:08:80:1a:e3:7e:4d:65:f4:cd:34:68:ba:ba:a1:9b:88:
60:ef:13:32:97:8e:b1:5a:a3:7e:11:bb:30:38:8d:41:d3:93:
a0:45:65:66:0e:55:b3:20:c1:23:6e:9d:31:df:17:7b:9c:9c:
56:7d:f7:4c:49:36:18:74:a1:c2:37:80:92:55:0b:f9:2d:80:
6a:a4:a9:53:03:5a:be:e0:e9:52:67:29:ba:09:f5:ab:85:c4:
03:10:80:5d:3b:73:f6:36:fb:46:47:d3:ab:f1:db:68:3d:63:
d4:d4:b7:89:24:34:49:92:00:15:97:58:6d:19:20:96:80:0c:
56:72:77:7f:be:cc:4e:a0:06:fa:55:b9:e0:62:d7:a4:b4:15:
37:66:ce:32:55:93:d6:00:e1:1c:38:5e:33:5e:f5:4b:a0:01:
5d:63:02:00:7f:6f:3a:b0:48:27:a7:af:ad:59:e3:60:be:29:
d3:28:f3:06:2e:85:72:b8:c4:91:14:5a:8c:73:76:22:37:2a:
e4:79:b3:84:fe:e0:ec:83:03:e0:65:24:f2:99:88:b5:91:86:
72:b9:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:50 2026 by rpki-client