Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QcOErvGMS1cn9WZR-Glc81vnEy4.roa
File: QcOErvGMS1cn9WZR-Glc81vnEy4.roa (raw, json)
Hash identifier: k8ZJH0lvcj7vdhHT3kfTzZYRjD0YJ58FOnJqdVF3/+g=
Subject key identifier: 41:C3:84:AE:F1:8C:4B:57:27:F5:66:51:F8:69:5C:F3:5B:E7:13:2E
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A0620F891E9840CBC3B848D3ED9E933C0C
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QcOErvGMS1cn9WZR-Glc81vnEy4.roa
Signing time: Wed 02 Sep 2026 12:19:40 +0000
ROA not before: Wed 02 Sep 2026 12:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 80.174.114.0/24 maxlen: 24
80.174.117.0/24 maxlen: 24
80.174.123.0/24 maxlen: 24
80.174.124.0/24 maxlen: 24
80.174.125.0/24 maxlen: 24
80.174.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0f:89:1e:98:40:cb:c3:b8:48:d3:ed:9e:93:3c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 2 12:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41c384aef18c4b5727f56651f8695cf35be7132e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:d7:e2:0d:8c:37:96:bf:92:79:7c:bc:53:
36:fb:a8:9e:0b:cd:e6:d3:0d:7d:58:03:ad:89:33:
f5:d2:44:2d:7e:13:3e:7b:ed:ce:d2:30:80:8b:ad:
22:87:1c:4d:b5:22:8a:4c:5b:65:61:8e:eb:ca:67:
d2:a1:00:93:5d:c3:59:a0:7c:71:5f:28:cc:94:5a:
69:98:ca:da:5a:d8:46:d6:b8:72:23:2a:c3:86:be:
ff:26:4d:92:79:55:9c:f0:40:2d:ec:55:00:b3:ff:
b6:90:14:fb:03:31:17:ff:8e:98:5b:e6:c8:37:03:
31:bc:11:7b:8b:97:56:ca:01:80:94:f4:1e:d6:40:
0a:fc:d5:ce:7c:29:fa:0a:5c:21:b0:a8:31:4e:9a:
20:2e:f0:2e:01:00:c6:7e:a3:53:ba:1d:94:75:77:
07:ca:a8:17:fc:e7:33:f5:4f:40:30:a0:ae:d6:aa:
c5:06:2d:f3:59:b8:90:36:1b:a3:3a:e3:05:1d:34:
48:51:bf:23:7d:9d:84:0e:c7:38:58:df:6d:f1:9e:
e8:60:84:35:cd:1f:ff:8e:51:be:f7:6d:d4:42:e3:
89:90:e0:18:92:55:e7:4c:85:10:79:c9:e7:37:46:
c2:93:ac:72:1a:95:be:4b:a4:fe:7c:01:3f:e5:6a:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:84:AE:F1:8C:4B:57:27:F5:66:51:F8:69:5C:F3:5B:E7:13:2E
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QcOErvGMS1cn9WZR-Glc81vnEy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.114.0/24
80.174.117.0/24
80.174.123.0-80.174.126.255
Signature Algorithm: sha256WithRSAEncryption
a6:32:8f:1d:1d:56:c0:8f:97:67:5d:f9:fe:76:d1:8b:2d:c3:
67:32:f1:08:5b:1d:b9:85:94:6f:ae:a9:f7:a2:fd:65:e4:2f:
e8:36:e7:d8:92:00:50:99:4c:38:21:04:8a:51:ed:2e:17:83:
ad:80:06:fc:40:39:ed:02:36:5c:45:7a:07:75:55:52:46:35:
7a:c6:55:3e:71:52:35:41:bc:ba:94:59:20:db:b1:df:f2:ce:
f0:18:9e:68:70:01:41:c2:e6:2d:a3:b2:cd:a1:69:6f:1c:8c:
96:2b:b5:2a:33:d2:d8:90:fe:ee:7d:a4:0f:ec:fa:a9:b0:bf:
01:33:12:53:06:70:9f:a0:09:a6:a3:b6:c3:8f:dc:ef:41:a9:
26:71:a6:3e:b4:0d:f0:38:b8:d7:40:0c:da:e2:f0:86:83:d0:
84:c2:92:86:b9:8a:45:48:73:39:3d:b3:83:4d:be:44:c3:a9:
6a:06:ad:e6:4b:38:05:5e:7e:99:0d:86:30:e1:68:2b:b6:21:
78:1e:30:74:62:35:d8:6a:ef:b1:d9:91:0e:58:fe:f1:5f:e6:
f5:cc:bc:2e:9f:f9:6d:50:fc:33:fc:fc:c3:65:d7:5b:ac:44:
42:e3:3d:02:5e:e0:81:a1:39:81:5a:c7:3e:80:36:45:e3:26:
a6:46:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:41:33 2026 by rpki-client