Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/qaDueQVxzcTEXG6b9fDcRRLZpCE.roa
File: qaDueQVxzcTEXG6b9fDcRRLZpCE.roa (raw, json)
Hash identifier: DDLmMzTc8RBMo8zk0yDihQy7T9kbJSiNpv5biRUVuCU=
Subject key identifier: A9:A0:EE:79:05:71:CD:C4:C4:5C:6E:9B:F5:F0:DC:45:12:D9:A4:21
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019CE20B33E2234A1C4FAF68609EC6ACB72E
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/qaDueQVxzcTEXG6b9fDcRRLZpCE.roa
Signing time: Thu 12 Mar 2026 12:35:10 +0000
ROA not before: Thu 12 Mar 2026 12:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397081
IP address blocks: 80.174.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:0b:33:e2:23:4a:1c:4f:af:68:60:9e:c6:ac:b7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Mar 12 12:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9a0ee790571cdc4c45c6e9bf5f0dc4512d9a421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:43:13:52:10:6c:92:9d:92:68:be:72:39:
71:17:1d:53:68:6d:8e:55:52:03:5d:a8:93:e0:47:
3f:12:34:eb:c0:6a:93:a7:b8:12:46:e5:92:5e:2e:
79:a6:6a:88:b2:cc:d1:a0:75:4b:d4:51:4e:fb:70:
a7:04:33:34:fc:da:c6:7d:db:09:e2:32:fb:38:ef:
ae:08:b3:86:2c:98:34:39:14:14:79:63:da:32:99:
ff:21:4b:6d:c7:9c:e3:c4:98:ad:56:d6:ac:3f:e7:
5d:08:e7:52:5b:7b:41:b6:06:21:66:e9:ae:d8:96:
8a:32:10:d6:e8:59:9a:96:b4:73:34:02:8c:26:27:
90:ae:6f:68:84:fe:1f:66:97:ac:3d:be:70:bd:2c:
bf:5c:7f:5e:68:e0:c0:a9:09:10:b4:57:5c:18:1d:
b5:e7:61:be:fe:76:7a:0f:1d:73:71:df:22:7b:e3:
40:43:98:9a:ef:50:7a:0f:a8:8e:40:71:ac:d6:64:
7b:ae:ff:c4:ba:47:1d:1b:ba:8d:6f:63:44:53:38:
d4:c9:ce:8a:25:46:bb:25:c7:c7:a3:a0:60:a4:87:
c7:e4:21:3c:c4:dd:4f:f6:e8:a5:11:3e:72:09:34:
26:cd:d5:84:22:e8:e8:7d:69:30:6a:46:a2:80:ee:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:EE:79:05:71:CD:C4:C4:5C:6E:9B:F5:F0:DC:45:12:D9:A4:21
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/qaDueQVxzcTEXG6b9fDcRRLZpCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:40:eb:30:2f:0e:7d:c1:3f:7f:cb:70:6a:77:b7:89:3e:83:
d0:68:59:85:79:68:0f:76:7b:ef:28:34:68:fe:ad:eb:95:81:
18:b4:61:17:ed:bf:4d:e2:f9:2f:3c:70:f5:5f:bc:ab:3b:7a:
87:90:05:39:bc:25:f3:77:8d:82:32:66:0a:01:9b:cc:3e:fb:
b6:eb:96:c8:94:77:79:80:22:61:7f:bf:15:6a:8e:a8:ee:2a:
a5:27:4a:01:93:f2:67:bb:c1:14:a3:0a:d9:66:ff:41:67:17:
02:39:f3:b4:29:e5:99:37:a5:0c:dd:3f:7c:1d:d6:62:b0:25:
a9:43:bb:e8:d9:16:a9:d0:f7:11:82:70:17:02:ca:d2:c7:b9:
33:79:c3:e5:15:3a:ab:5e:59:6a:e8:c4:1f:aa:ee:fe:23:05:
19:6d:d6:6a:27:f9:dd:01:2d:35:25:5e:11:08:e4:e3:45:e7:
16:e0:be:62:ed:02:22:81:15:65:d1:8c:8f:79:33:b5:90:10:
7a:e5:f1:2b:95:c1:5c:0d:60:ac:f7:56:29:e6:c9:fc:40:3d:
80:37:80:1a:65:24:29:d2:c0:28:28:20:a8:33:21:db:40:24:
60:c0:89:65:b9:a1:59:69:ce:46:e1:6b:49:ed:af:8c:63:dc:
e6:0f:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:04:57 2026 by rpki-client