Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Tg3K248AqL7TdHDsnw7TmEvLAQ4.roa
File: Tg3K248AqL7TdHDsnw7TmEvLAQ4.roa (raw, json)
Hash identifier: LC/otdFV7sxTd0BKKQkekKeoWRTU5X1nRWOWC62qdAw=
Subject key identifier: 4E:0D:CA:DB:8F:00:A8:BE:D3:74:70:EC:9F:0E:D3:98:4B:CB:01:0E
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F19C059BDAF7F0D1B5720C4CB596EE823
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Tg3K248AqL7TdHDsnw7TmEvLAQ4.roa
Signing time: Tue 30 Jun 2026 18:17:43 +0000
ROA not before: Tue 30 Jun 2026 18:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 80.174.4.0/24 maxlen: 24
80.174.5.0/24 maxlen: 24
80.174.6.0/24 maxlen: 24
80.174.7.0/24 maxlen: 24
80.174.200.0/24 maxlen: 24
80.174.201.0/24 maxlen: 24
80.174.202.0/24 maxlen: 24
80.174.203.0/24 maxlen: 24
80.174.204.0/24 maxlen: 24
80.174.205.0/24 maxlen: 24
80.174.206.0/24 maxlen: 24
80.174.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:c0:59:bd:af:7f:0d:1b:57:20:c4:cb:59:6e:e8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 30 18:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e0dcadb8f00a8bed37470ec9f0ed3984bcb010e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:ce:ec:c5:73:56:c2:a1:52:f0:8f:ea:f3:
77:6f:a1:84:ac:2d:e4:89:f9:1f:75:f2:9a:90:ab:
e2:19:5b:5b:02:b2:c8:78:ff:a9:64:ba:0b:af:89:
7c:4d:7a:a2:f7:43:e3:77:aa:a3:6e:ef:1a:21:e8:
e1:95:bc:15:ff:19:df:fb:eb:a8:69:a8:62:19:03:
0f:4c:a7:73:c7:3e:30:b0:eb:24:74:01:d8:40:df:
f6:b3:5c:87:6e:7a:a3:d4:98:23:b3:09:33:7f:ce:
da:97:ac:e2:98:de:87:94:15:d1:a2:0a:ab:0e:64:
c4:0b:a8:35:3b:39:bb:86:0c:ab:eb:5d:94:18:a7:
bc:48:4a:66:bd:3b:2b:91:2f:55:e5:04:19:83:79:
77:00:7f:52:c1:f9:2a:a6:f6:01:73:fa:01:01:1c:
f7:98:5a:94:eb:3a:81:6c:1b:da:18:68:94:4f:ed:
10:7b:33:74:01:af:39:85:9c:5b:5e:1c:43:b8:f6:
bd:05:ad:09:64:f0:87:a3:54:bd:25:1c:3a:f1:92:
e2:b0:22:33:ca:c8:50:82:dc:0b:63:98:03:d7:ae:
58:ab:e1:cd:af:b4:04:7e:ea:60:99:c8:4f:4f:96:
a6:c5:e1:3e:5d:f2:e5:80:f6:a5:a0:ce:8b:b9:c2:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:CA:DB:8F:00:A8:BE:D3:74:70:EC:9F:0E:D3:98:4B:CB:01:0E
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Tg3K248AqL7TdHDsnw7TmEvLAQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.4.0/22
80.174.200.0/21
Signature Algorithm: sha256WithRSAEncryption
42:c4:48:c4:7f:ef:5f:b0:ac:ff:55:6b:f1:40:27:1e:e4:36:
d8:98:52:fd:ed:5e:74:55:5a:e7:d7:66:aa:a8:0e:fa:99:a5:
18:23:8c:86:89:4b:1e:b9:78:57:84:bb:1f:26:53:24:3f:59:
8f:10:d2:d4:71:61:b8:9e:19:4f:8e:a3:13:8f:24:29:97:63:
9f:46:0d:e5:9a:08:ca:0f:76:3c:ce:b5:73:90:f5:d7:c1:e4:
21:e4:f3:f5:ef:2d:37:e2:c9:b9:21:99:0b:a1:e8:8f:0c:4f:
db:82:ab:d1:77:0f:20:73:3b:20:7c:c7:7d:12:59:98:d2:26:
4f:1f:81:21:01:1f:a6:bd:a4:ec:57:20:67:dd:c8:54:47:27:
ef:f4:ed:bd:5b:8d:b4:58:c3:f4:31:ca:25:0d:77:d2:31:64:
a6:df:f1:a4:2e:03:ec:a4:c7:2c:73:15:b9:b8:77:d8:af:5d:
fc:a4:5f:8c:0a:b7:29:40:c0:7e:0e:ca:e9:90:d9:6b:65:13:
3e:7c:22:ee:0f:5b:70:b4:2e:83:5e:dd:92:a9:2f:c5:4d:1d:
b8:0a:34:98:bd:9c:c8:7b:76:b2:97:22:38:60:b4:ff:5e:24:
16:b1:d3:66:c2:93:f2:e1:ea:c9:c7:94:43:ed:9b:2e:6e:b5:
b0:8d:cf:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8ZwFm9r38NG1cgxMtZbugjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwNjMwMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTBkY2FkYjhmMDBhOGJlZDM3NDcwZWM5ZjBlZDM5ODRiY2IwMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6XO7MVzVsKhUvCP6vN3b6GErC3k
ifkfdfKakKviGVtbArLIeP+pZLoLr4l8TXqi90Pjd6qjbu8aIejhlbwV/xnf++uo
aahiGQMPTKdzxz4wsOskdAHYQN/2s1yHbnqj1Jgjswkzf87al6zimN6HlBXRogqr
DmTEC6g1Ozm7hgyr612UGKe8SEpmvTsrkS9V5QQZg3l3AH9SwfkqpvYBc/oBARz3
mFqU6zqBbBvaGGiUT+0QezN0Aa85hZxbXhxDuPa9Ba0JZPCHo1S9JRw68ZLisCIz
yshQgtwLY5gD165Yq+HNr7QEfupgmchPT5amxeE+XfLlgPaloM6LucJZSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE4NytuPAKi+03Rw7J8O05hLywEOMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvVGczSzI0OEFxTDdUZEhEc253N1RtRXZMQVE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUK4EAwQD
UK7IMA0GCSqGSIb3DQEBCwUAA4IBAQBCxEjEf+9fsKz/VWvxQCce5DbYmFL97V50
VVrn12aqqA76maUYI4yGiUseuXhXhLsfJlMkP1mPENLUcWG4nhlPjqMTjyQpl2Of
Rg3lmgjKD3Y8zrVzkPXXweQh5PP17y034sm5IZkLoeiPDE/bgqvRdw8gczsgfMd9
ElmY0iZPH4EhAR+mvaTsVyBn3chURyfv9O29W420WMP0McolDXfSMWSm3/GkLgPs
pMcscxW5uHfYr138pF+MCrcpQMB+DsrpkNlrZRM+fCLuD1twtC6DXt2SqS/FTR24
CjSYvZzIe3aylyI4YLT/XiQWsdNmwpPy4erJx5RD7ZsubrWwjc+k
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:51 2026 by rpki-client