Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/M_kXnc2VW4WObsQRGmM4dOkxvAo.roa
File: M_kXnc2VW4WObsQRGmM4dOkxvAo.roa (raw, json)
Hash identifier: hrx4tS1F9C1+NylfSdZou47j0Ea58tIJch7D5WphPNA=
Subject key identifier: 33:F9:17:9D:CD:95:5B:85:8E:6E:C4:11:1A:63:38:74:E9:31:BC:0A
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019C7A59873AF318D644129C11B8E2F510B9
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/M_kXnc2VW4WObsQRGmM4dOkxvAo.roa
Signing time: Fri 20 Feb 2026 09:20:13 +0000
ROA not before: Fri 20 Feb 2026 09:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.113.0/24 maxlen: 24
80.174.117.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
80.174.122.0/24 maxlen: 24
80.174.124.0/24 maxlen: 24
80.174.125.0/24 maxlen: 24
80.174.126.0/24 maxlen: 24
80.174.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:59:87:3a:f3:18:d6:44:12:9c:11:b8:e2:f5:10:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Feb 20 09:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33f9179dcd955b858e6ec4111a633874e931bc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:42:5e:1c:08:93:62:78:0e:11:66:c5:fe:
1c:35:89:88:2f:9f:ef:24:39:09:58:32:63:76:37:
f5:ea:f1:d5:20:31:24:79:0a:fc:48:34:9f:a1:f1:
b5:7a:b7:78:73:51:23:34:75:77:c2:07:f2:f7:7e:
9f:5d:8c:92:d6:4d:17:68:97:cc:0f:96:e5:ed:04:
66:a2:73:71:9e:e7:d0:2d:3f:e2:85:ec:17:e5:91:
f5:8a:f9:05:ac:47:c0:11:5a:8e:fc:9a:6c:54:61:
82:37:43:f8:7c:87:82:55:f5:6f:00:27:84:8e:d4:
a3:0b:8c:63:cf:a2:c2:09:dd:a0:82:b4:aa:80:69:
64:f2:7c:be:ea:b9:61:fd:55:b1:b8:53:58:9d:de:
ae:fb:72:61:40:d7:f3:88:63:8f:9a:ad:68:e8:ef:
18:38:9c:1b:1b:f2:12:92:d3:2b:10:18:8c:9b:5c:
d4:75:cc:01:8b:6d:2a:28:cd:8a:0d:9d:26:b0:fe:
cb:d6:7d:10:f6:f8:8a:a5:76:9c:7c:88:80:36:a9:
ea:a5:29:01:58:64:34:85:da:d1:44:4c:ca:4e:04:
45:5f:e3:f4:f1:53:72:a0:8c:26:f4:a1:64:aa:2e:
94:db:a6:a2:e6:cc:d1:f1:06:a4:84:bf:32:4f:09:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:17:9D:CD:95:5B:85:8E:6E:C4:11:1A:63:38:74:E9:31:BC:0A
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/M_kXnc2VW4WObsQRGmM4dOkxvAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.113.0/24
80.174.117.0/24
80.174.121.0-80.174.122.255
80.174.124.0/22
Signature Algorithm: sha256WithRSAEncryption
12:22:8b:c5:ba:f1:25:da:17:14:49:c8:a8:29:bd:b7:b6:57:
1e:ce:28:19:8d:93:93:b8:39:c7:08:f3:12:30:97:8d:3b:b3:
9b:4d:5b:ad:79:1e:68:bb:90:e7:c6:5f:56:db:3c:c6:72:b5:
ca:5c:de:29:9d:fd:c3:3c:58:2b:ea:e6:2b:b3:4f:ee:82:21:
95:83:93:f8:be:e6:ee:c6:b2:98:bc:47:b0:c3:ec:13:af:ea:
10:2a:7c:9b:2e:aa:53:c2:a4:e8:be:e6:16:4e:cc:4a:cf:16:
b3:a0:d4:7a:e1:fb:98:1c:51:87:8f:fa:dc:f7:95:64:85:ef:
ed:8e:d9:0d:a1:eb:10:6d:18:09:72:ac:45:f6:23:f6:9e:62:
04:1b:16:86:09:1e:f9:1f:90:a5:ae:d7:50:0c:31:33:f9:5d:
29:ed:20:3b:a8:cd:d7:56:1a:98:27:0b:f2:c0:d0:c5:a0:ca:
2d:da:5c:c2:cd:0d:17:81:6d:84:a6:47:af:17:e8:1d:e1:88:
76:44:57:3a:e6:cd:72:47:4f:cc:8b:3d:67:fe:2c:7c:ff:b4:
3c:e6:f2:e2:cd:8d:d4:7b:93:0a:87:d9:bd:09:46:a9:60:3a:
50:1f:98:02:5a:26:e7:89:db:5a:f7:2f:19:0b:81:8c:51:ec:
7f:b5:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:58 2026 by rpki-client