Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/4jagn-zclI1JwPhxjN4Hyfs6t6s.roa
File: 4jagn-zclI1JwPhxjN4Hyfs6t6s.roa (raw, json)
Hash identifier: xrSJ5qznS1hR+frQY2qj4DY/RXxvfno4CeXBaIkUztA=
Subject key identifier: E2:36:A0:9F:EC:DC:94:8D:49:C0:F8:71:8C:DE:07:C9:FB:3A:B7:AB
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FBDC3864752CE7B937C145488ADEF4C52
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/4jagn-zclI1JwPhxjN4Hyfs6t6s.roa
Signing time: Sat 01 Aug 2026 14:38:55 +0000
ROA not before: Sat 01 Aug 2026 14:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.32.0/19 maxlen: 19
80.174.64.0/19 maxlen: 19
80.174.96.0/21 maxlen: 21
80.174.113.0/24 maxlen: 24
80.174.116.0/24 maxlen: 24
80.174.119.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:c3:86:47:52:ce:7b:93:7c:14:54:88:ad:ef:4c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 1 14:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e236a09fecdc948d49c0f8718cde07c9fb3ab7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:14:a6:64:35:7f:b2:fe:3d:26:8d:fe:b5:
72:83:a0:49:18:c3:f8:6c:84:5c:53:98:43:df:0e:
f4:ab:3d:d7:4b:eb:ba:f9:5a:8d:b2:0d:0f:3d:0b:
e2:ae:d1:6b:99:63:d9:2f:ad:9e:b4:0b:8a:2b:38:
f0:b6:9c:e8:6c:5d:a8:c5:0c:98:90:f5:12:7f:78:
ec:7c:93:5a:e3:10:d0:68:43:3d:d0:eb:61:f5:25:
1e:ec:11:7c:cc:24:bc:4b:46:e6:53:89:b7:d1:27:
78:a9:a7:a0:66:40:aa:49:b5:c5:0b:15:70:41:fb:
78:4e:b2:cf:6d:4f:51:af:8d:dc:76:68:7d:f1:57:
25:df:c2:6e:7e:db:2c:b2:5c:79:39:8d:32:ab:42:
b5:c6:58:59:0c:37:61:fb:e1:6c:d3:f9:45:83:51:
b3:85:3c:8b:18:c1:ce:d1:71:10:8a:92:8e:15:59:
c2:38:b9:62:80:ef:36:7f:bc:c7:a6:f4:8d:0e:28:
a1:4e:ad:ed:82:97:6b:ef:b0:1a:5e:4f:f5:e4:28:
b9:9b:39:6b:2e:03:04:36:98:41:70:11:bd:2f:15:
0c:c3:64:f6:3b:67:a7:56:8c:18:49:fa:54:8d:46:
1b:4a:4f:5d:17:f3:f4:38:5f:88:f6:40:20:98:75:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:A0:9F:EC:DC:94:8D:49:C0:F8:71:8C:DE:07:C9:FB:3A:B7:AB
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/4jagn-zclI1JwPhxjN4Hyfs6t6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.32.0-80.174.103.255
80.174.113.0/24
80.174.116.0/24
80.174.119.0/24
80.174.121.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ea:15:0d:d3:9d:7b:49:16:ff:fd:00:da:ed:a5:d3:9b:f5:
38:f5:17:6a:44:03:d0:e5:b0:69:97:ba:d5:13:ab:b7:0b:e1:
8f:f8:d6:39:c0:a9:3a:44:3d:0c:69:b4:94:ae:19:fa:c6:d8:
5d:18:32:b7:e3:05:30:fa:73:bb:b4:4a:a1:cf:c0:c2:ba:56:
36:22:f4:c1:33:07:ad:28:42:0c:6a:9c:97:a0:3b:a1:10:a3:
c8:32:af:23:13:96:a2:5a:ab:44:a7:0a:af:b2:4d:16:cd:3e:
84:11:ac:a9:20:5e:19:9b:d6:ed:8f:72:45:fc:b5:e9:d3:7d:
4f:37:5d:5f:2d:7c:ad:54:51:d7:fc:0f:c4:33:94:c1:a4:37:
6c:cd:6b:f9:10:95:4c:7b:66:3b:42:95:a7:bf:45:5a:ef:48:
6f:ce:dd:72:bb:43:e8:ce:e7:2f:d4:fc:a6:e6:bf:b8:3e:74:
39:13:e9:d8:e2:57:81:98:b2:51:9e:5a:df:2b:6c:d3:b7:f1:
5e:f6:f0:57:4d:d7:b2:63:93:b0:1a:de:d3:97:9f:16:c9:31:
47:bb:68:36:4c:9b:d2:7d:bd:af:27:04:72:4c:f3:55:5c:01:
00:05:7d:58:12:51:d3:3c:8d:ef:be:3c:41:a6:86:3b:8a:b6:
46:31:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:42 2026 by rpki-client