Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1PiiO4bWz-Gd03Y1iiHOMZlHQls.roa
File: 1PiiO4bWz-Gd03Y1iiHOMZlHQls.roa (raw, json)
Hash identifier: 1oK6Vsq83EW0FHb2Tl0jLog9KpSJxnrJYCGUMWBH/ng=
Subject key identifier: D4:F8:A2:3B:86:D6:CF:E1:9D:D3:76:35:8A:21:CE:31:99:47:42:5B
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0A40258807D20504A53B45622DB3C94E7
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1PiiO4bWz-Gd03Y1iiHOMZlHQls.roa
Signing time: Tue 15 Sep 2026 07:40:12 +0000
ROA not before: Tue 15 Sep 2026 07:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 79.182.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:02:58:80:7d:20:50:4a:53:b4:56:22:db:3c:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 15 07:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f8a23b86d6cfe19dd376358a21ce319947425b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:aa:93:80:6c:fa:bd:76:d8:7b:f4:29:a1:
5e:99:5d:99:66:e1:79:a6:1e:41:4d:d2:99:12:36:
fb:50:8c:e2:29:7f:84:5c:7e:5b:ce:e7:f3:a9:a9:
a4:37:a0:14:ad:ec:39:d1:9c:ec:ab:6f:e5:56:1f:
dd:7f:de:03:bf:1e:fb:08:bf:af:0f:db:73:7b:40:
88:30:a4:09:e0:fa:fb:f0:2d:c6:77:5f:d1:1c:e2:
3d:f3:35:58:6a:81:47:aa:c7:14:92:a1:e1:48:1f:
19:e0:75:ee:f3:dc:1c:8e:83:9d:ae:d2:ae:84:74:
4e:19:a9:8b:70:bd:35:a6:3a:3e:e9:9f:61:c2:bf:
b2:c2:23:eb:8a:a3:f5:11:d3:e7:fc:1a:5d:3b:4c:
29:78:90:4a:57:12:a6:e4:69:16:69:cb:96:46:4a:
e8:6d:39:73:3d:8a:f4:61:22:16:d3:b6:9d:1e:bf:
89:0b:f2:36:5b:aa:4b:d8:e8:59:2a:8b:8f:e3:87:
e2:0b:40:a7:1b:0b:10:c6:a0:73:43:37:22:b2:8e:
f4:e6:1e:83:c0:70:1e:d4:b5:2f:b8:ff:8d:78:61:
b4:94:16:3f:2c:c0:79:83:1d:22:6b:7a:f4:91:09:
75:fd:72:43:0c:ae:33:c5:e3:5d:6d:bf:2d:d4:75:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:A2:3B:86:D6:CF:E1:9D:D3:76:35:8A:21:CE:31:99:47:42:5B
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1PiiO4bWz-Gd03Y1iiHOMZlHQls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2c:a4:29:a9:1c:8e:8f:92:b6:3e:54:fe:a0:c9:af:03:15:
e9:a4:6f:b1:84:0d:8c:c0:8a:56:9d:ff:34:6e:13:ad:34:d4:
e1:74:c5:d8:7e:11:ba:3e:a3:ad:5e:90:5d:7b:f4:fa:84:5f:
c0:e6:f0:45:1b:45:f9:22:b8:09:d7:fa:59:cb:7f:86:1d:c3:
82:87:80:d7:9e:9a:e9:18:2a:04:28:de:1c:db:5e:ef:5e:d4:
0d:02:36:50:39:62:cb:a4:d2:36:07:32:26:ef:eb:17:82:0d:
cc:5e:81:fc:ac:15:2f:89:6d:26:06:9c:7a:4e:03:bf:7f:57:
17:67:47:c2:15:31:54:da:99:9b:10:a3:97:2f:c4:03:51:79:
4b:83:82:10:04:2e:2c:eb:ce:67:fa:72:2c:b1:2e:81:b7:22:
bc:0f:35:ce:e0:c2:b2:8c:ca:ff:12:c2:b5:ba:f0:da:17:03:
6b:a0:56:51:c3:5d:bd:57:73:ad:bc:99:c8:09:6d:c7:a8:e3:
2e:db:b2:df:84:65:df:59:97:ae:a3:11:84:9b:2a:dc:d9:c8:
68:54:15:be:4b:b9:c9:b4:1b:f7:e5:8e:31:21:c8:ae:d7:9f:
79:bb:19:4e:3d:a7:d8:b5:68:e8:87:b1:4b:ea:77:02:05:a4:
7e:4c:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:37 2026 by rpki-client