Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/3XN34fJUrSevD_6l_mSMnd1Lvvs.roa
File: 3XN34fJUrSevD_6l_mSMnd1Lvvs.roa (raw, json)
Hash identifier: KDJTkjk9N5Pfb3nDaDAEcsX9sF9XZL+EMGoTkZbJDxk=
Subject key identifier: DD:73:77:E1:F2:54:AD:27:AF:0F:FE:A5:FE:64:8C:9D:DD:4B:BE:FB
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C1A36A2B28A5268359864DCB20112859
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/3XN34fJUrSevD_6l_mSMnd1Lvvs.roa
Signing time: Mon 21 Sep 2026 01:45:07 +0000
ROA not before: Mon 21 Sep 2026 01:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 79.180.108.0/24 maxlen: 24
109.66.70.0/24 maxlen: 24
109.66.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:a3:6a:2b:28:a5:26:83:59:86:4d:cb:20:11:28:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 21 01:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd7377e1f254ad27af0ffea5fe648c9ddd4bbefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:f4:cf:f4:ba:d1:81:e3:0e:a5:a3:a6:76:
2c:06:ab:42:6f:bf:56:d1:b1:52:4e:a4:87:99:29:
07:e1:b8:6c:5b:8a:df:31:3b:d8:00:f8:aa:7d:4d:
e3:6f:27:80:ed:1f:c0:83:a3:9c:f2:b6:86:33:89:
ff:78:c4:ed:e8:25:d5:0e:e1:9c:4a:58:33:23:d9:
5f:3c:6f:8e:e1:32:d5:3c:cf:b0:37:ca:c7:07:bc:
40:02:96:f9:b1:dc:dc:5b:a4:16:e8:6f:b7:3b:fb:
74:6a:4f:c8:b2:bf:d6:5f:2e:f7:c2:8b:87:d1:6f:
a0:92:34:eb:e1:21:b6:70:a4:37:82:ea:4d:a4:ca:
b3:1f:93:13:f1:da:f4:2e:3e:bf:96:b8:af:7d:00:
a8:df:14:f2:a0:78:15:af:24:be:2b:bb:56:58:53:
b8:6a:ca:b7:f9:9b:ff:b7:c9:7d:9c:ee:21:c2:03:
25:74:ae:71:91:47:0f:2f:2d:54:6b:98:55:99:da:
15:68:39:ea:67:f2:ba:d2:16:cb:ca:46:d5:2f:ff:
71:a0:34:6d:c0:0f:ad:04:3d:64:66:8d:65:9d:70:
ac:85:eb:2c:4a:b6:ed:50:c0:f9:f1:ff:e2:a1:41:
8d:d5:86:d8:06:34:54:56:13:23:0a:07:a2:fc:06:
cc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:73:77:E1:F2:54:AD:27:AF:0F:FE:A5:FE:64:8C:9D:DD:4B:BE:FB
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/3XN34fJUrSevD_6l_mSMnd1Lvvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.108.0/24
109.66.70.0/24
109.66.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fa:70:75:03:98:39:65:4e:21:75:75:54:cb:e4:18:aa:27:
8f:1c:36:91:0a:96:c5:a0:bf:fe:e4:3f:a0:36:db:c8:87:c0:
23:67:fa:19:55:8e:ac:8e:d8:0b:f0:17:84:ed:3d:34:a7:1f:
c8:00:f3:57:06:61:9b:a2:79:7e:86:e0:a9:ef:9c:ba:40:10:
40:40:ee:79:e2:40:1f:9a:19:73:cb:85:6a:80:1f:e6:d9:4f:
57:c6:48:eb:2f:63:ae:d1:6c:15:04:22:73:80:2e:ea:7d:e8:
5e:af:8d:3b:a1:a4:51:34:e6:fd:cd:8d:c0:c9:d4:5a:aa:8f:
c7:a3:41:08:df:38:02:c1:a1:15:3d:d5:8f:19:17:6e:55:34:
a2:06:26:06:13:49:8f:16:b3:00:7b:65:1f:d9:34:71:97:d9:
f5:64:16:f2:4a:50:82:a6:99:d8:06:1a:a6:a6:31:84:eb:29:
b6:79:db:4f:93:8c:3d:bb:9c:8b:53:e9:08:d4:64:0b:90:16:
9e:17:7b:9d:fe:4f:c2:15:3a:05:cd:9c:02:c9:78:1b:f7:48:
46:af:a2:92:3a:c3:65:6e:49:53:9b:e8:6a:73:7a:cf:46:5a:
2f:57:9d:9f:82:27:4f:63:fe:ce:14:ce:f8:14:eb:72:d8:1b:
00:8b:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:10 2026 by rpki-client