Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5iMksFs1p4Zq9i_pR4m-ZsLLAb0.roa
File: 5iMksFs1p4Zq9i_pR4m-ZsLLAb0.roa (raw, json)
Hash identifier: gU3QVGeZ7B3IfdVI/0PUnnyWQgtAoCICbNKlJlABls4=
Subject key identifier: E6:23:24:B0:5B:35:A7:86:6A:F6:2F:E9:47:89:BE:66:C2:CB:01:BD
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0BECB929A462CF585024FC38CC18BF3C8
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5iMksFs1p4Zq9i_pR4m-ZsLLAb0.roa
Signing time: Sun 20 Sep 2026 12:30:07 +0000
ROA not before: Sun 20 Sep 2026 12:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 79.183.79.0/24 maxlen: 24
109.66.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:cb:92:9a:46:2c:f5:85:02:4f:c3:8c:c1:8b:f3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 20 12:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e62324b05b35a7866af62fe94789be66c2cb01bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:ed:e2:c7:90:e9:e6:4c:00:af:25:5f:f5:
4a:77:ae:53:a2:6e:ed:de:39:47:42:b8:4f:59:9f:
13:88:5c:33:d8:5a:cd:61:b7:14:54:2c:d0:4a:d7:
6e:f6:f5:0e:8e:87:bd:30:05:0f:a1:59:ce:64:64:
eb:8e:66:4e:e0:e1:9f:10:c0:db:fe:6b:2b:98:ff:
21:d4:c0:2c:0e:2a:ab:6c:ea:ac:75:ed:e8:e1:4d:
e0:4a:df:0d:80:5e:32:8f:a3:93:d1:24:de:73:5d:
51:a4:8c:78:9f:2e:2c:3c:8d:12:c4:86:5c:c2:4f:
37:f1:75:90:ee:bf:04:6c:24:19:4c:48:b4:a9:fe:
b2:58:97:20:22:50:b1:26:c5:c9:a1:80:a6:71:52:
0f:23:0f:fb:61:d1:c9:10:77:80:c5:31:49:6a:a3:
4e:d4:44:07:24:e6:42:2a:18:94:c3:31:4d:13:33:
e2:48:b2:f9:e8:c0:3c:4d:2d:2d:12:f7:2d:cf:6d:
cf:aa:78:0a:5f:16:52:b8:8c:d9:e2:2f:f5:81:cf:
3e:5c:9b:f5:b6:f3:72:53:01:c6:e2:23:23:2e:47:
39:0f:8d:9c:f3:39:97:f3:d6:ad:b9:30:c5:c2:e6:
5e:de:f5:b0:c1:18:a0:b4:5b:fd:72:39:e8:88:c0:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:24:B0:5B:35:A7:86:6A:F6:2F:E9:47:89:BE:66:C2:CB:01:BD
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5iMksFs1p4Zq9i_pR4m-ZsLLAb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.79.0/24
109.66.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c3:b0:1e:32:1f:3d:e8:5d:8a:09:23:c8:4d:d0:a1:f2:7a:
7d:25:ef:15:23:31:ee:fc:24:03:06:a9:b3:2c:b2:8b:37:bd:
dc:60:29:86:20:a0:6c:61:c2:be:e9:1a:ad:48:d8:4a:2d:11:
98:ba:dc:35:6c:c5:56:57:53:4e:8f:31:e3:95:dd:2e:84:da:
4c:82:08:41:8e:99:56:56:09:3f:2c:a1:73:76:1d:32:70:fa:
1c:73:7f:8c:d8:b6:df:da:ff:99:d0:af:4a:cf:ce:ab:fe:7e:
de:e2:f5:6b:4d:f8:b6:31:2b:21:e2:4c:87:14:bb:e7:64:4f:
84:2c:e3:fe:11:57:b1:35:cc:c4:ab:07:8d:d8:81:0c:69:3d:
72:e7:69:f6:92:8e:ab:b1:3d:b6:27:f3:52:fe:55:2e:6e:a9:
60:9a:58:e9:da:d8:aa:e8:35:2e:5c:fd:fc:cb:c5:29:c8:1a:
a3:e8:82:17:b1:4c:cb:9c:35:0c:d3:26:b3:80:8f:5c:31:a6:
0c:37:8d:37:1e:8f:d2:4c:4e:a1:94:27:48:2c:83:7b:6f:96:
ea:51:18:ad:11:ba:37:21:db:f0:03:10:2e:db:65:ef:77:e7:
af:22:66:43:db:f2:12:ba:13:67:a8:5f:f9:25:62:12:17:79:
e0:78:83:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaC+y5KaRiz1hQJPw4zBi/PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTIwMTIzMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjIzMjRiMDViMzVhNzg2NmFmNjJmZTk0Nzg5YmU2NmMyY2IwMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DXt4seQ6eZMAK8lX/VKd65Tom7t
3jlHQrhPWZ8TiFwz2FrNYbcUVCzQStdu9vUOjoe9MAUPoVnOZGTrjmZO4OGfEMDb
/msrmP8h1MAsDiqrbOqsde3o4U3gSt8NgF4yj6OT0STec11RpIx4ny4sPI0SxIZc
wk838XWQ7r8EbCQZTEi0qf6yWJcgIlCxJsXJoYCmcVIPIw/7YdHJEHeAxTFJaqNO
1EQHJOZCKhiUwzFNEzPiSLL56MA8TS0tEvctz23PqngKXxZSuIzZ4i/1gc8+XJv1
tvNyUwHG4iMjLkc5D42c8zmX89atuTDFwuZe3vWwwRigtFv9cjnoiMADxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOYjJLBbNaeGavYv6UeJvmbCywG9MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvNWlNa3NGczFwNFpxOWlfcFI0bS1ac0xMQWIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT7dPAwQA
bUJCMA0GCSqGSIb3DQEBCwUAA4IBAQBqw7AeMh896F2KCSPITdCh8np9Je8VIzHu
/CQDBqmzLLKLN73cYCmGIKBsYcK+6RqtSNhKLRGYutw1bMVWV1NOjzHjld0uhNpM
gghBjplWVgk/LKFzdh0ycPocc3+M2Lbf2v+Z0K9Kz86r/n7e4vVrTfi2MSsh4kyH
FLvnZE+ELOP+EVexNczEqweN2IEMaT1y52n2ko6rsT22J/NS/lUubqlgmljp2tiq
6DUuXP38y8UpyBqj6IIXsUzLnDUM0yazgI9cMaYMN403Ho/STE6hlCdILIN7b5bq
URitEbo3IdvwAxAu22Xvd+evImZD2/ISuhNnqF/5JWISF3ngeIPm
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:39 2026 by rpki-client