Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/10IT0EDsfDguNHDkGFrtmhbO1qY.roa
File: 10IT0EDsfDguNHDkGFrtmhbO1qY.roa (raw, json)
Hash identifier: X4HgTSlDGhlR3AaJ8wC8JFxIPcRAnrG2/sKJRUGMYQ8=
Subject key identifier: D7:42:13:D0:40:EC:7C:38:2E:34:70:E4:18:5A:ED:9A:16:CE:D6:A6
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A049C6AD83F14E2DD23A78A70E6C0A2FA2
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/10IT0EDsfDguNHDkGFrtmhbO1qY.roa
Signing time: Fri 28 Aug 2026 19:09:12 +0000
ROA not before: Fri 28 Aug 2026 19:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 80.174.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:c6:ad:83:f1:4e:2d:d2:3a:78:a7:0e:6c:0a:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 28 19:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d74213d040ec7c382e3470e4185aed9a16ced6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:f7:1a:05:e7:3a:8e:a9:54:54:44:7e:bc:
05:6d:31:fb:db:48:de:20:6d:25:3d:fb:1f:0a:a6:
9b:68:07:42:e1:b9:76:54:3a:c2:17:40:12:69:96:
23:f1:91:b4:38:55:98:83:e5:23:35:9a:79:51:56:
a7:54:7e:a2:26:a1:d8:b3:03:05:44:0d:c5:08:9f:
ab:03:d5:52:55:2f:74:a4:a5:73:8c:a9:bc:9b:1e:
c7:1e:20:2b:22:30:a8:28:6d:f1:b4:3f:99:5a:8c:
56:76:88:8b:45:82:6e:63:4f:1b:b2:f3:a3:8c:29:
4c:10:18:87:b4:c2:b7:16:38:70:5c:9d:2e:d2:11:
6d:2b:0a:0d:22:9a:ef:86:83:ad:f2:40:13:01:0c:
09:21:4c:f5:58:b0:d7:22:20:d8:36:bc:08:2b:2d:
52:58:2b:50:26:ef:ac:96:36:f8:63:f9:0b:d9:65:
66:23:82:0e:a8:15:5c:5d:d5:73:3c:cf:08:44:47:
6e:55:64:10:7e:6d:51:ab:20:8e:4d:77:51:0c:28:
7d:87:79:21:3a:4b:18:1d:2c:fe:47:c6:a7:fb:69:
f8:34:30:cc:b3:e7:bf:ea:43:b3:b9:50:96:88:66:
43:e9:66:1d:ac:a2:bf:6d:d5:95:6a:a8:88:db:2f:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:13:D0:40:EC:7C:38:2E:34:70:E4:18:5A:ED:9A:16:CE:D6:A6
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/10IT0EDsfDguNHDkGFrtmhbO1qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.122.0/24
Signature Algorithm: sha256WithRSAEncryption
40:71:c5:4c:00:35:2c:97:1b:be:ee:31:8d:3d:45:dd:9c:85:
19:a6:09:07:c6:57:28:4d:56:1b:67:e2:d9:a2:ab:a6:54:2a:
e2:43:01:0b:68:89:5b:cb:22:49:a1:2c:f0:1c:82:17:bb:c4:
4f:f0:5b:3a:ed:6e:fe:47:c0:40:61:2b:13:b8:56:d3:0a:6f:
04:5b:7a:cb:20:86:63:b9:b4:71:5e:f4:dc:7f:4a:e0:72:cb:
c0:4c:ae:98:39:56:82:fc:ea:4c:0c:87:75:a4:17:aa:c4:93:
5d:77:43:6a:de:8d:e3:bc:0d:ce:a1:1c:3f:0d:51:bd:d9:da:
69:30:5f:cb:54:72:60:19:3c:b6:c1:ee:44:e8:16:6a:eb:0c:
94:52:01:3a:52:0e:72:9b:27:85:a6:46:9d:2d:e0:b0:63:1b:
73:56:c6:80:0c:70:b4:50:bc:e2:f9:08:70:00:6d:dc:c5:64:
12:68:85:41:be:6a:8b:75:8e:e8:13:bd:2a:32:88:ae:93:87:
56:79:75:ea:d3:bf:15:52:aa:14:56:9a:5e:b5:ce:c8:6d:a3:
4c:29:bf:9c:0e:cf:c5:f8:0a:88:63:70:f0:e6:bf:17:de:ce:
a3:d6:50:d1:6a:08:22:b3:53:98:ab:e6:3b:6e:13:8a:85:16:
ac:95:17:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBJxq2D8U4t0jp4pw5sCi+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwODI4MTkwOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzQyMTNkMDQwZWM3YzM4MmUzNDcwZTQxODVhZWQ5YTE2Y2VkNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6f3GgXnOo6pVFREfrwFbTH720je
IG0lPfsfCqabaAdC4bl2VDrCF0ASaZYj8ZG0OFWYg+UjNZp5UVanVH6iJqHYswMF
RA3FCJ+rA9VSVS90pKVzjKm8mx7HHiArIjCoKG3xtD+ZWoxWdoiLRYJuY08bsvOj
jClMEBiHtMK3FjhwXJ0u0hFtKwoNIprvhoOt8kATAQwJIUz1WLDXIiDYNrwIKy1S
WCtQJu+sljb4Y/kL2WVmI4IOqBVcXdVzPM8IREduVWQQfm1RqyCOTXdRDCh9h3kh
OksYHSz+R8an+2n4NDDMs+e/6kOzuVCWiGZD6WYdrKK/bdWVaqiI2y9PGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNdCE9BA7Hw4LjRw5Bha7ZoWztamMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvMTBJVDBFRHNmRGd1TkhEa0dGcnRtaGJPMXFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK56MA0G
CSqGSIb3DQEBCwUAA4IBAQBAccVMADUslxu+7jGNPUXdnIUZpgkHxlcoTVYbZ+LZ
oqumVCriQwELaIlbyyJJoSzwHIIXu8RP8Fs67W7+R8BAYSsTuFbTCm8EW3rLIIZj
ubRxXvTcf0rgcsvATK6YOVaC/OpMDId1pBeqxJNdd0Nq3o3jvA3OoRw/DVG92dpp
MF/LVHJgGTy2we5E6BZq6wyUUgE6Ug5ymyeFpkadLeCwYxtzVsaADHC0ULzi+Qhw
AG3cxWQSaIVBvmqLdY7oE70qMoiuk4dWeXXq078VUqoUVppetc7IbaNMKb+cDs/F
+AqIY3Dw5r8X3s6j1lDRaggis1OYq+Y7bhOKhRaslRfO
-----END CERTIFICATE-----
Generated at Wed Sep 9 17:56:27 2026 by rpki-client