Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Pi_a3p_q9ka9AQIqS9RWk-xZM2o.roa
File: Pi_a3p_q9ka9AQIqS9RWk-xZM2o.roa (raw, json)
Hash identifier: IpgLN/yBo8glOhOqVnfjMwQEHTGIXqb3UXJ0E1yb8S4=
Subject key identifier: 3E:2F:DA:DE:9F:EA:F6:46:BD:01:02:2A:4B:D4:56:93:EC:59:33:6A
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FADE7739D9C742A4D9098A4432DF1C8ED
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Pi_a3p_q9ka9AQIqS9RWk-xZM2o.roa
Signing time: Wed 29 Jul 2026 12:44:14 +0000
ROA not before: Wed 29 Jul 2026 12:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.174.0.0/24 maxlen: 24
80.174.1.0/24 maxlen: 24
80.174.248.0/24 maxlen: 24
103.85.32.0/24 maxlen: 24
103.85.33.0/24 maxlen: 24
103.85.34.0/24 maxlen: 24
103.85.35.0/24 maxlen: 24
202.58.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:e7:73:9d:9c:74:2a:4d:90:98:a4:43:2d:f1:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 29 12:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e2fdade9feaf646bd01022a4bd45693ec59336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:93:f0:5c:c7:36:86:86:df:e0:a0:86:e5:
cd:65:34:fb:f0:e8:b5:0b:e0:2a:c0:ad:75:a3:eb:
33:bf:9c:f1:d3:ad:5d:c1:d2:65:b3:ae:01:73:b7:
71:53:fe:43:93:13:e8:3a:c5:e5:89:c5:af:a6:06:
9c:c6:15:5e:12:c4:86:ed:74:73:ac:09:bc:46:f9:
67:a3:de:0f:06:06:10:d5:6a:32:59:e5:91:b1:ec:
a8:27:9b:fa:36:86:5e:96:41:ce:d6:c8:a5:45:b8:
2f:41:b8:ed:da:16:9f:26:aa:c9:f2:7c:d2:79:78:
87:4c:2e:a3:98:ba:42:0b:51:6c:dd:62:d6:cd:14:
f2:20:1a:68:4a:70:af:62:f3:ba:57:4e:17:81:61:
e4:71:b5:77:98:d4:06:2d:8c:5f:df:52:6b:53:f4:
ac:d2:c4:d4:1c:10:a3:b2:a3:3d:39:51:3e:5c:2e:
a1:1d:b9:1a:18:2d:d5:60:2d:a4:10:26:aa:b5:6c:
4a:db:8e:0c:c0:f4:d8:ac:85:3e:c9:bf:1b:bc:65:
c3:30:2b:a5:06:0d:e5:b6:d5:e0:d7:fa:1c:f7:56:
80:7a:c1:13:ec:40:9d:d5:40:1d:11:47:22:c4:51:
c2:44:a6:1d:f3:b5:e3:1a:75:dc:0d:a0:2b:b8:d4:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:DA:DE:9F:EA:F6:46:BD:01:02:2A:4B:D4:56:93:EC:59:33:6A
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Pi_a3p_q9ka9AQIqS9RWk-xZM2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.0.0/23
80.174.248.0/24
103.85.32.0/22
202.58.108.0/23
Signature Algorithm: sha256WithRSAEncryption
82:a5:eb:f5:8b:b6:ad:df:ef:39:24:0b:12:32:a7:0f:58:58:
54:7f:bb:f4:f3:83:cc:df:41:dd:89:7a:4e:6e:9b:5c:0b:ce:
8b:56:61:5d:0f:ba:66:81:a2:d5:f7:23:a2:1a:22:8e:79:53:
ef:65:0f:4d:0f:7f:a9:51:56:af:d5:24:69:e8:a2:cb:f7:58:
a0:72:dd:be:ce:46:36:fe:4e:d7:02:9e:2d:c7:76:9c:19:01:
eb:de:24:85:35:96:80:8c:ba:78:79:53:4d:f8:ce:2b:eb:ec:
55:d5:2f:1c:7b:f4:d2:02:fc:00:e1:4a:b0:bb:27:90:ed:46:
2b:44:37:9d:42:42:64:d5:1f:5b:51:b1:4b:60:71:e0:dd:f8:
ac:f5:02:54:38:17:ea:15:98:6c:d5:a6:eb:b6:56:2d:fe:9d:
e8:3a:cf:f3:ad:aa:a4:fa:97:db:5c:74:35:28:92:ab:37:25:
2a:ca:63:e0:e8:8e:83:75:35:19:b3:50:1c:40:07:28:44:db:
30:a8:e4:62:a1:75:7a:93:73:74:c3:7b:8d:15:10:f2:39:6b:
0c:34:5a:c5:7d:6d:51:23:66:87:db:ca:ba:ae:aa:a5:a3:1d:
a8:9f:8c:0c:c8:3b:af:4d:e9:db:92:d2:46:97:09:76:98:ff:
3a:0c:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:24:14 2026 by rpki-client