Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MzMfsQXMJSc9OBS7ims5KX6kTvE.roa
File: MzMfsQXMJSc9OBS7ims5KX6kTvE.roa (raw, json)
Hash identifier: CclOtjONdagKDCoc3lRXPjnLG4a0BUPyGGm+OcK+SXA=
Subject key identifier: 33:33:1F:B1:05:CC:25:27:3D:38:14:BB:8A:6B:39:29:7E:A4:4E:F1
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FABB1A776387BA31C91ED5E3F61C78119
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MzMfsQXMJSc9OBS7ims5KX6kTvE.roa
Signing time: Wed 29 Jul 2026 02:26:14 +0000
ROA not before: Wed 29 Jul 2026 02:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 79.182.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:b1:a7:76:38:7b:a3:1c:91:ed:5e:3f:61:c7:81:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 29 02:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33331fb105cc25273d3814bb8a6b39297ea44ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:7f:22:0b:c1:f5:74:0e:2b:2c:66:27:9a:
e6:11:0f:1f:57:f8:b9:8f:70:de:11:36:ba:e1:91:
fb:7f:05:60:72:9b:c7:71:4f:df:5c:89:ae:be:9f:
2e:ce:b4:70:2e:19:85:47:49:7e:8a:b9:f9:39:b8:
44:52:21:d6:e4:ff:aa:28:87:83:4a:fb:ee:3d:43:
20:4c:ad:36:83:8b:16:03:5a:af:cd:43:98:2a:e4:
9f:9c:4e:2b:4d:a8:f0:06:98:48:72:28:d7:cc:b9:
66:45:52:fa:83:bd:23:c3:56:86:cb:af:19:52:65:
ec:11:06:21:47:16:4a:81:b9:ad:df:74:1a:73:88:
f5:55:6c:c6:de:93:23:4b:a7:81:63:2e:f6:53:0a:
70:2e:2d:ca:3c:94:68:09:32:30:42:1b:33:0c:ce:
27:0c:6e:5e:de:bd:9a:f6:88:52:60:b7:06:b8:9a:
7b:d2:dc:19:bc:53:a1:cb:63:70:27:84:5c:62:40:
e4:34:f4:21:ee:d3:b9:69:c2:00:8e:d4:11:13:3b:
1c:48:b4:5c:7a:42:0e:75:62:89:07:14:1d:27:81:
fd:68:35:21:be:7c:a9:15:87:ba:5c:c6:1e:7e:6f:
6a:de:66:5b:75:d3:38:8a:53:82:4b:ec:ee:85:be:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:1F:B1:05:CC:25:27:3D:38:14:BB:8A:6B:39:29:7E:A4:4E:F1
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MzMfsQXMJSc9OBS7ims5KX6kTvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.24.0/24
Signature Algorithm: sha256WithRSAEncryption
52:79:9c:fb:11:3a:2f:8a:15:1a:b2:a2:1b:7d:d4:9f:e9:16:
76:9a:eb:31:7c:f6:fe:e8:05:45:99:0d:59:7e:a5:cc:2d:72:
04:9b:ad:48:51:e6:80:d7:88:07:df:73:f9:99:8c:57:e5:10:
34:9e:aa:e3:07:f8:5b:47:16:8e:0b:20:3b:f7:d3:a0:a6:c6:
fe:a8:1c:34:bc:65:54:9e:38:9b:5b:01:2d:0f:d4:1f:4f:97:
03:ec:e9:b6:aa:52:64:2b:50:0a:ce:44:b9:b6:95:70:f1:d6:
b0:b1:7b:52:07:74:dc:6a:1c:81:d8:50:35:a4:ec:c0:00:70:
b6:9d:39:3b:ba:2c:8a:10:83:a1:8a:c6:3a:49:0a:75:72:71:
7a:7a:b7:3d:76:52:e9:96:02:0d:90:66:ae:d1:09:6b:62:ae:
27:b4:32:ab:fd:31:a8:d3:09:e4:a0:39:a6:eb:70:4d:16:d2:
e0:bc:e4:2d:e6:e7:1a:d6:fa:ae:c3:d0:2b:c2:d1:18:70:9e:
5a:28:9a:80:7b:5b:b7:7e:f2:29:8b:14:5f:0c:d9:85:29:96:
65:42:e8:04:54:7c:b5:6d:96:01:3f:30:e5:5d:e2:ec:8a:6f:
d4:9d:94:f7:11:34:36:5c:6b:05:a5:ce:08:a8:1f:f3:86:87:
ef:56:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:40 2026 by rpki-client