Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/3kFunkpNSVUnpRqO8aTlocmzoa0.roa
File: 3kFunkpNSVUnpRqO8aTlocmzoa0.roa (raw, json)
Hash identifier: Exxwkihg2AoX+gDOjeDyLfq7d4qGDNmVXWWiCdW4iaM=
Subject key identifier: DE:41:6E:9E:4A:4D:49:55:27:A5:1A:8E:F1:A4:E5:A1:C9:B3:A1:AD
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A042BC73FD02691872DB754CB2E79105DD
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/3kFunkpNSVUnpRqO8aTlocmzoa0.roa
Signing time: Thu 27 Aug 2026 10:20:41 +0000
ROA not before: Thu 27 Aug 2026 10:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 80.174.4.0/24 maxlen: 24
80.174.5.0/24 maxlen: 24
80.174.6.0/24 maxlen: 24
80.174.7.0/24 maxlen: 24
80.174.135.0/24 maxlen: 24
80.174.200.0/21 maxlen: 21
80.174.200.0/24 maxlen: 24
80.174.201.0/24 maxlen: 24
80.174.202.0/24 maxlen: 24
80.174.203.0/24 maxlen: 24
80.174.204.0/24 maxlen: 24
80.174.205.0/24 maxlen: 24
80.174.206.0/24 maxlen: 24
80.174.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:bc:73:fd:02:69:18:72:db:75:4c:b2:e7:91:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 27 10:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de416e9e4a4d495527a51a8ef1a4e5a1c9b3a1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:1b:27:f8:d9:43:0a:74:4a:56:46:15:c7:
f5:bd:b4:e0:66:9d:76:00:50:91:33:fd:56:1e:c1:
1f:9a:d8:37:12:ec:b9:7d:9e:ec:fa:b0:fa:bf:7a:
55:93:d1:cc:f1:c3:3f:69:e9:be:2f:9e:2d:bf:a7:
ee:fb:a4:d4:12:ce:46:06:0b:48:73:5b:eb:1d:77:
d4:29:f9:cd:ad:7b:03:7c:5a:0b:27:66:16:6b:41:
b7:13:cc:17:b5:4c:02:99:6f:b5:d6:c2:54:1b:62:
8b:92:f3:8b:19:18:e1:f4:f5:a1:70:c7:31:5f:9d:
7a:92:07:9c:94:68:5c:5d:b3:98:99:6a:12:4c:3e:
37:c6:47:72:fe:0a:f2:de:a4:91:14:f4:4b:41:a1:
70:61:fb:91:c9:a5:44:d7:23:8d:31:71:f8:fa:7f:
81:f7:83:88:26:1c:8d:f7:d1:bb:ef:69:2b:84:6e:
d8:62:cb:53:8e:2a:76:5e:1d:27:20:89:d5:b5:0d:
cb:2c:29:b6:15:f7:b0:4e:96:e6:67:4b:ca:dd:46:
e9:60:a8:3c:75:18:f2:fa:83:85:dc:56:ae:fc:0e:
f7:c2:c3:53:14:c2:68:31:25:30:86:bf:d2:00:0a:
fc:69:e1:51:0f:71:9b:79:6c:7a:18:4b:77:59:99:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:6E:9E:4A:4D:49:55:27:A5:1A:8E:F1:A4:E5:A1:C9:B3:A1:AD
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/3kFunkpNSVUnpRqO8aTlocmzoa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.4.0/22
80.174.135.0/24
80.174.200.0/21
Signature Algorithm: sha256WithRSAEncryption
57:a0:59:db:58:d4:5a:35:c3:76:76:88:f9:26:54:fd:fa:c2:
b5:83:5e:1e:b3:d9:b6:4d:61:aa:23:55:cb:2b:b5:3c:74:f8:
15:3f:b0:f9:b7:e1:de:e5:a3:1d:95:3d:fb:83:c0:28:33:b9:
d9:8b:39:62:8f:a8:49:35:3f:3c:5f:df:85:43:37:8f:a0:d6:
23:45:5e:66:90:b3:91:0e:b7:38:e7:a1:c5:c3:01:96:6b:95:
90:0d:c8:a8:66:a8:02:c6:e7:73:c0:6c:b0:2f:a4:dd:3d:af:
67:40:53:fd:73:30:cd:9a:25:9a:cd:89:95:4a:b2:31:0e:d5:
9f:24:c1:a3:dc:ce:73:dd:a5:25:e4:0e:2c:17:56:17:29:a1:
27:58:df:1e:9b:33:1c:78:6b:a9:3f:cb:d0:66:f4:97:ea:ea:
b7:32:e4:33:81:5e:d4:2d:d5:e7:e7:77:e3:bd:0a:bd:b8:38:
c7:d4:eb:42:30:82:7f:d1:bd:f7:08:8f:33:43:0d:75:10:06:
51:96:f8:f4:28:96:52:e8:30:22:53:55:40:48:3c:51:52:07:
c0:c3:d1:b1:85:83:7b:8e:84:0b:50:bb:af:47:7d:43:ba:54:
af:1d:05:2a:9a:eb:15:76:15:06:28:09:ae:91:78:38:6a:6a:
39:96:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:19 2026 by rpki-client