Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P6L2bwYHLuND6tpkgKrJKzJ9mpQ.roa
File: P6L2bwYHLuND6tpkgKrJKzJ9mpQ.roa (raw, json)
Hash identifier: 9aWpa42Sd6NILrM1AWV+6lfKjd2ZgAkcknIqbz6ycVk=
Subject key identifier: 3F:A2:F6:6F:06:07:2E:E3:43:EA:DA:64:80:AA:C9:2B:32:7D:9A:94
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0BE0FE36B1E0547D48C034C46C44FB58E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P6L2bwYHLuND6tpkgKrJKzJ9mpQ.roa
Signing time: Sun 20 Sep 2026 09:05:07 +0000
ROA not before: Sun 20 Sep 2026 09:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 79.180.77.0/24 maxlen: 24
109.64.210.0/24 maxlen: 24
109.66.12.0/24 maxlen: 24
109.66.13.0/24 maxlen: 24
109.66.16.0/24 maxlen: 24
109.66.42.0/24 maxlen: 24
109.66.52.0/24 maxlen: 24
109.66.53.0/24 maxlen: 24
109.66.57.0/24 maxlen: 24
109.66.129.0/24 maxlen: 24
109.66.134.0/24 maxlen: 24
109.66.167.0/24 maxlen: 24
109.66.177.0/24 maxlen: 24
109.66.207.0/24 maxlen: 24
109.66.210.0/24 maxlen: 24
109.66.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0f:e3:6b:1e:05:47:d4:8c:03:4c:46:c4:4f:b5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 20 09:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa2f66f06072ee343eada6480aac92b327d9a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:56:53:5c:2f:e4:41:69:4c:d1:e8:7a:74:
73:a7:48:78:2d:1c:56:02:30:e6:35:88:f6:5c:cd:
0b:2b:bf:e2:42:b5:21:7e:97:0a:cb:47:df:49:23:
98:12:0f:99:c5:bb:14:91:26:25:d7:06:d1:67:37:
40:5a:89:3c:1c:6a:0c:be:bc:98:b4:b7:40:df:20:
0f:0a:6a:79:10:fc:85:64:a9:69:7b:78:bf:6a:58:
27:8e:a6:f1:01:a0:11:05:49:7e:ea:f8:02:b4:6c:
de:d6:ea:ef:c5:f8:3c:e1:9c:2f:c7:90:41:72:15:
45:5c:d8:26:48:48:6d:f1:15:8f:df:e3:48:f1:7a:
10:87:c9:94:f7:23:3e:dc:89:8d:18:b3:43:f0:86:
48:2a:fd:cb:3a:f0:0d:0d:68:b9:92:b0:6c:85:76:
7c:a9:63:5e:54:0b:ed:db:05:1a:5c:83:ac:c2:49:
ff:f3:c4:07:34:ce:cd:42:02:19:c9:a2:ed:dd:01:
62:a7:98:6e:2d:66:04:d5:39:04:b9:ec:5a:04:97:
b2:a8:8c:84:c6:81:13:f1:4f:09:01:85:8d:c5:bd:
89:75:48:0b:5e:d6:0c:59:48:37:22:bc:56:6c:1b:
5c:09:ec:a7:f6:1e:ff:8d:e5:cf:ee:c8:d7:0d:53:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:F6:6F:06:07:2E:E3:43:EA:DA:64:80:AA:C9:2B:32:7D:9A:94
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P6L2bwYHLuND6tpkgKrJKzJ9mpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.77.0/24
109.64.210.0/24
109.66.12.0/23
109.66.16.0/24
109.66.42.0/24
109.66.52.0/23
109.66.57.0/24
109.66.129.0/24
109.66.134.0/24
109.66.167.0/24
109.66.177.0/24
109.66.207.0/24
109.66.210.0/24
109.66.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8f:96:85:71:a2:6c:9c:66:1e:a5:51:5d:02:4b:66:11:9e:
47:09:7f:9e:0b:7a:d8:e1:4c:be:5a:b1:5b:e6:06:f9:b1:f2:
35:37:f1:4b:91:3c:18:20:1f:dc:8a:57:8c:d1:14:86:4a:8f:
be:5e:d5:9b:fc:dd:e4:f2:4c:50:be:92:29:5a:f5:1b:20:90:
3d:be:6b:3d:bc:9d:22:83:ed:21:76:76:63:a5:d9:c8:0d:56:
9f:4c:c3:40:85:9b:b8:1d:4c:ca:b9:6d:2e:88:ec:4e:b1:24:
cd:32:60:5a:9b:d9:b9:db:a8:57:e6:35:72:8a:90:4c:84:f2:
0e:d1:b2:81:5c:eb:ec:04:f6:13:47:5a:57:ff:8b:5f:da:32:
b2:1d:fd:f1:22:d0:c4:bd:57:0d:05:4d:ca:3b:7b:a8:10:7b:
ca:05:07:bf:fd:a8:b8:81:b7:74:c4:0e:0d:a0:7c:8b:ce:52:
05:01:3b:06:0b:44:55:f6:37:4f:87:a4:d7:eb:f9:e9:3f:a1:
04:bc:67:47:1a:4c:83:9c:33:94:7c:cb:0d:f8:c6:61:b4:0f:
0f:42:b8:00:64:2c:f6:be:1c:91:8e:b0:41:58:77:51:12:54:
68:22:83:9b:68:f2:f7:ba:3c:45:95:b4:a3:81:cb:93:95:c0:
90:27:dd:89
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaC+D+NrHgVH1IwDTEbET7WOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTIwMDkwNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmEyZjY2ZjA2MDcyZWUzNDNlYWRhNjQ4MGFhYzkyYjMyN2Q5YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhFWU1wv5EFpTNHoenRzp0h4LRxW
AjDmNYj2XM0LK7/iQrUhfpcKy0ffSSOYEg+ZxbsUkSYl1wbRZzdAWok8HGoMvryY
tLdA3yAPCmp5EPyFZKlpe3i/algnjqbxAaARBUl+6vgCtGze1urvxfg84Zwvx5BB
chVFXNgmSEht8RWP3+NI8XoQh8mU9yM+3ImNGLND8IZIKv3LOvANDWi5krBshXZ8
qWNeVAvt2wUaXIOswkn/88QHNM7NQgIZyaLt3QFip5huLWYE1TkEuexaBJeyqIyE
xoET8U8JAYWNxb2JdUgLXtYMWUg3IrxWbBtcCeyn9h7/jeXP7sjXDVOKzwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFD+i9m8GBy7jQ+raZICqySsyfZqUMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvUDZMMmJ3WUhMdU5ENnRwa2dLckpLeko5bXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAT7RNAwQA
bUDSAwQBbUIMAwQAbUIQAwQAbUIqAwQBbUI0AwQAbUI5AwQAbUKBAwQAbUKGAwQA
bUKnAwQAbUKxAwQAbULPAwQAbULSAwQAbULyMA0GCSqGSIb3DQEBCwUAA4IBAQBu
j5aFcaJsnGYepVFdAktmEZ5HCX+eC3rY4Uy+WrFb5gb5sfI1N/FLkTwYIB/cileM
0RSGSo++XtWb/N3k8kxQvpIpWvUbIJA9vms9vJ0ig+0hdnZjpdnIDVafTMNAhZu4
HUzKuW0uiOxOsSTNMmBam9m526hX5jVyipBMhPIO0bKBXOvsBPYTR1pX/4tf2jKy
Hf3xItDEvVcNBU3KO3uoEHvKBQe//ai4gbd0xA4NoHyLzlIFATsGC0RV9jdPh6TX
6/npP6EEvGdHGkyDnDOUfMsN+MZhtA8PQrgAZCz2vhyRjrBBWHdRElRoIoObaPL3
ujxFlbSjgcuTlcCQJ92J
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:39 2026 by rpki-client