Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/jl1wYnhLUOSbsZUU80_UB5Kx2dE.roa
File: jl1wYnhLUOSbsZUU80_UB5Kx2dE.roa (raw, json)
Hash identifier: uChc1aHz2hrtDcLAVGR6Xk6XuTeM5AKvLRgVGOGtFQI=
Subject key identifier: 8E:5D:70:62:78:4B:50:E4:9B:B1:95:14:F3:4F:D4:07:92:B1:D9:D1
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019D862AB9B17454E22D155D576774D500E3
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/jl1wYnhLUOSbsZUU80_UB5Kx2dE.roa
Signing time: Mon 13 Apr 2026 09:27:20 +0000
ROA not before: Mon 13 Apr 2026 09:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.108.0/23 maxlen: 23
80.174.113.0/24 maxlen: 24
80.174.117.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
80.174.122.0/24 maxlen: 24
80.174.124.0/24 maxlen: 24
80.174.125.0/24 maxlen: 24
80.174.126.0/24 maxlen: 24
80.174.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:2a:b9:b1:74:54:e2:2d:15:5d:57:67:74:d5:00:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Apr 13 09:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e5d7062784b50e49bb19514f34fd40792b1d9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:fe:c9:ab:3c:94:94:24:84:da:04:b7:cc:
20:cc:61:9c:32:02:8d:28:1b:e5:8e:53:d7:a4:ff:
a3:fc:2e:ac:0f:6a:7b:d8:ca:31:05:e1:0f:5b:1d:
f6:c7:68:16:aa:64:26:d6:10:26:b5:08:84:c2:61:
19:6a:60:c6:a8:e5:f8:b1:c6:c8:8b:c7:56:1e:50:
0f:58:40:39:0a:ac:b8:31:80:b3:ef:e2:f7:13:3c:
8e:84:55:e0:15:b9:c5:e2:23:aa:1e:da:83:d3:da:
c1:8c:b2:b7:d1:39:74:ac:b4:3c:18:5b:4c:cd:67:
98:0b:a6:9b:d1:84:b4:f2:2a:32:91:b2:4b:0a:71:
2d:1d:ce:ab:cb:77:f0:40:72:7f:c5:6a:96:c5:2f:
ef:e1:33:1f:2c:c9:6f:51:b8:b2:b1:30:4e:12:db:
7c:32:7f:d5:85:17:a1:f6:8a:44:f7:a4:7f:93:fa:
22:23:c8:27:bf:8d:b4:a2:35:26:7e:92:95:d2:cd:
2c:fc:b7:92:e4:6e:2f:a1:d4:32:96:a7:e9:70:28:
48:dc:9d:84:0a:f0:60:3c:d8:34:37:c5:53:bc:02:
90:f8:00:9a:e5:c6:83:03:a0:89:a1:c6:d4:6f:3c:
3d:c8:0a:41:74:c6:d6:d9:9c:9e:dc:55:66:32:f0:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5D:70:62:78:4B:50:E4:9B:B1:95:14:F3:4F:D4:07:92:B1:D9:D1
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/jl1wYnhLUOSbsZUU80_UB5Kx2dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.108.0/23
80.174.113.0/24
80.174.117.0/24
80.174.121.0-80.174.122.255
80.174.124.0/22
Signature Algorithm: sha256WithRSAEncryption
28:f5:b6:ba:f0:a5:66:7f:3d:b7:6a:e3:9a:d2:0d:b0:26:1a:
42:43:3b:1a:e5:6c:01:5c:1e:d8:6d:88:3b:11:fe:00:c8:a0:
31:e5:40:a9:57:94:be:66:c4:aa:d2:e2:2d:a6:ab:3f:79:87:
dd:4e:d1:2b:b2:1f:c1:93:ef:66:29:ec:40:cc:fb:72:fa:e5:
96:d4:5c:6f:31:33:6e:89:87:fa:63:0d:bb:af:23:a9:06:b1:
cc:80:37:ae:77:40:42:ed:c6:86:f4:b3:22:fe:33:08:43:a9:
20:53:97:ab:0f:2e:9b:8e:c8:70:50:ce:d1:34:53:59:fc:2e:
59:a9:39:9b:fb:91:ef:d9:68:ca:5f:d8:34:f3:0b:ae:9b:e1:
e3:b8:95:73:ad:a6:b5:0c:1a:9f:b2:8b:43:6e:6d:36:86:6c:
bc:3f:cc:a3:41:7f:57:8b:24:b8:26:a7:61:d3:81:0f:de:fd:
6b:68:e0:86:84:f9:2f:be:55:fe:36:05:e1:7f:e5:31:c1:8c:
81:2d:b6:27:31:c3:c1:1c:30:fd:28:a9:75:20:07:23:61:00:
2e:b0:57:d7:d8:59:9a:9b:6b:a1:a4:ff:5b:37:1a:d1:09:f4:
f3:05:8b:88:0b:56:e7:3a:26:10:ad:b8:f9:22:fb:4d:1c:38:
6a:98:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:28 2026 by rpki-client