Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QErVVtuOwcB_yB0LqZmmy9fn_ak.roa
File: QErVVtuOwcB_yB0LqZmmy9fn_ak.roa (raw, json)
Hash identifier: FDpvep+63kI4zULI0Sfg5/w/pD8+A58oJ0Hyf+jbagg=
Subject key identifier: 40:4A:D5:56:DB:8E:C1:C0:7F:C8:1D:0B:A9:99:A6:CB:D7:E7:FD:A9
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F198FD39B6292924BC58627C2B9F3FA27
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QErVVtuOwcB_yB0LqZmmy9fn_ak.roa
Signing time: Tue 30 Jun 2026 17:24:43 +0000
ROA not before: Tue 30 Jun 2026 17:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 80.174.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:8f:d3:9b:62:92:92:4b:c5:86:27:c2:b9:f3:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 30 17:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=404ad556db8ec1c07fc81d0ba999a6cbd7e7fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:fb:f7:27:e9:56:09:6d:e3:da:85:a7:4e:
c5:03:21:06:fe:15:e0:7b:b6:e3:a3:3a:d8:5f:9f:
e0:14:06:95:f1:44:53:fa:99:08:ed:c8:2a:74:b2:
92:80:66:0d:ea:fc:4a:2b:d5:3c:f1:6e:f2:75:19:
0c:db:dd:ba:cd:e9:b2:41:ae:aa:8b:38:0b:ec:e1:
68:1b:1d:57:b4:4d:23:3c:bb:c9:86:2f:58:a1:a2:
75:ff:47:3d:34:1d:5f:14:57:56:c8:09:41:bc:70:
4f:fd:2a:c8:f5:30:b4:c5:71:f6:97:80:2b:ed:c3:
bb:6f:fe:c2:a7:72:76:34:d9:11:37:42:2a:20:be:
6e:1b:a9:25:3f:a2:df:ef:88:cf:06:b8:20:19:6d:
76:b2:71:63:4f:98:ba:2d:28:e2:ff:81:4b:d9:20:
2b:b7:46:43:55:44:06:e9:7f:51:db:2b:6e:4e:a5:
ca:b8:54:95:b0:f7:89:0e:1f:e8:55:46:ea:48:82:
61:79:5b:d7:c3:14:12:6e:6a:2d:1e:66:07:69:40:
fe:b9:30:d9:ba:1a:e0:7d:8c:0e:fb:ea:80:8e:8c:
91:53:bb:ad:5d:35:e7:35:6e:d8:5c:65:43:8c:f4:
6f:1a:87:c1:02:6b:3a:13:85:ba:76:ca:e9:9f:ec:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4A:D5:56:DB:8E:C1:C0:7F:C8:1D:0B:A9:99:A6:CB:D7:E7:FD:A9
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QErVVtuOwcB_yB0LqZmmy9fn_ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.104.0/22
Signature Algorithm: sha256WithRSAEncryption
03:22:71:15:7c:71:52:7c:8f:9a:ac:01:ac:0b:6b:a7:0a:f5:
b5:bb:76:62:fd:53:fc:90:16:64:a6:18:b4:80:17:ab:42:f0:
c6:63:10:8a:f5:bd:a6:9c:bb:25:cd:d1:80:0b:af:af:c9:a3:
a2:5a:9b:d4:c6:78:d6:48:7c:8d:9c:d5:f8:a8:29:f6:db:43:
24:68:c9:7d:f8:1c:33:12:67:05:1f:6a:11:58:77:c0:00:c0:
93:da:8f:cb:ce:89:26:97:5b:91:2e:d5:5a:85:ce:4a:8e:e4:
ef:9e:81:00:f6:f2:e2:fc:43:ea:04:02:5a:6a:93:ec:13:cb:
88:c7:9e:8d:57:2d:73:db:e8:fd:b7:07:49:01:6e:43:a6:39:
41:e4:87:2b:ea:49:80:b8:74:95:53:f7:9c:39:4d:93:1a:75:
fd:09:26:04:8e:b0:12:0a:da:3d:8d:4d:85:42:82:81:57:6f:
ef:eb:15:5b:33:86:48:ad:43:2a:df:bf:0a:d9:56:d2:75:bc:
0b:97:13:20:b0:94:35:b2:86:b9:d4:19:16:55:b7:98:4b:77:
01:ff:01:4a:1e:29:7b:04:b6:4a:4e:b8:d2:fb:96:18:b3:69:
d1:06:95:8e:f7:e4:f3:59:a3:84:ea:67:5c:e3:2c:45:31:46:
11:1c:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:44 2026 by rpki-client