Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Qav4M9PHpnIT-vNpRVZMD2-453Y.roa
File: Qav4M9PHpnIT-vNpRVZMD2-453Y.roa (raw, json)
Hash identifier: PDnYd67i7zd+/uon5FQTHHZDfbx0eFDXR1+fklFDsMI=
Subject key identifier: 41:AB:F8:33:D3:C7:A6:72:13:FA:F3:69:45:56:4C:0F:6F:B8:E7:76
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B447EB6367DBAA647DCF673E406579D9
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Qav4M9PHpnIT-vNpRVZMD2-453Y.roa
Signing time: Fri 18 Sep 2026 11:30:07 +0000
ROA not before: Fri 18 Sep 2026 11:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 79.176.6.0/24 maxlen: 24
109.64.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:47:eb:63:67:db:aa:64:7d:cf:67:3e:40:65:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 18 11:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41abf833d3c7a67213faf36945564c0f6fb8e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:d2:c7:15:73:23:0c:d7:2d:00:f1:36:4b:
17:23:25:6f:93:a3:1d:3a:1b:13:9d:b6:83:a8:ff:
34:4e:ee:a8:0e:16:43:6b:2c:65:11:54:9e:47:e4:
4c:67:4e:8f:35:25:21:86:49:51:0c:f7:4f:b1:c5:
44:bb:ef:18:7f:34:29:11:35:91:92:a4:2f:3d:0b:
3a:53:18:ce:9c:22:e8:23:72:2e:28:99:25:1d:8b:
f0:51:6c:e6:2f:35:d6:cb:43:24:b9:8a:98:2d:76:
5b:4a:37:bd:98:3d:cd:74:d6:28:1e:6e:eb:3e:94:
5a:19:5e:20:3c:2e:ef:c9:78:7e:44:5b:11:3a:c9:
87:7a:c5:50:71:f2:22:0e:7c:41:03:f8:26:64:3a:
63:79:90:7b:23:2d:2e:18:05:9f:77:f2:bd:80:25:
e9:00:35:52:88:db:7f:04:92:67:e5:56:da:47:26:
a0:8f:c9:54:2f:0a:a1:ba:1a:e9:5c:15:ef:1d:8b:
40:6f:83:80:f5:be:5b:95:7d:23:9b:c3:3a:17:95:
47:53:22:8b:56:6f:84:ae:0a:a7:b2:7c:cc:05:f2:
25:d6:28:35:b0:cc:70:fd:e1:9c:26:49:6d:5b:e5:
04:92:34:0c:ad:81:69:7f:aa:9c:55:33:0c:8e:88:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:F8:33:D3:C7:A6:72:13:FA:F3:69:45:56:4C:0F:6F:B8:E7:76
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Qav4M9PHpnIT-vNpRVZMD2-453Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.6.0/24
109.64.0.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1d:b3:eb:3e:16:9d:75:14:dd:ea:52:7c:c4:d2:db:9f:6e:
36:95:a7:60:7b:a7:4a:bb:7a:ba:f7:2d:4b:8b:13:95:6e:3d:
1f:ca:0a:89:9b:63:93:4b:5b:59:02:ce:28:b3:e7:60:8d:9b:
27:ae:dd:4b:f3:1e:45:6f:58:49:c4:38:ed:70:f9:96:e5:4a:
fd:33:76:29:13:18:8e:8c:d7:27:89:7b:53:ea:81:77:95:c7:
35:d1:7f:06:e4:b2:5a:5a:63:63:44:28:92:93:eb:31:e1:0b:
60:09:55:63:a6:55:a8:20:0b:2a:fd:1f:96:f6:18:ff:c1:5b:
a9:df:44:f8:ab:89:1d:18:ad:7c:9d:2b:a1:ee:90:47:0b:72:
48:e6:d6:42:55:2f:d7:cc:9a:7e:3d:7d:e9:c8:49:1b:69:35:
ab:8a:d8:30:03:f8:09:bf:ec:6c:8d:5c:9f:4f:36:b6:d1:10:
7a:8c:e8:e6:8d:28:0f:78:46:89:38:3e:07:74:68:70:46:aa:
6e:06:0c:52:f4:74:e6:35:07:8b:8c:d9:4c:5f:ef:c7:53:30:
4d:f0:00:fd:a5:92:26:75:55:d1:04:3b:5a:9d:21:6a:77:11:
e3:53:c1:38:5f:fa:5d:34:28:b7:aa:98:30:42:b1:cc:58:4d:
6a:02:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:40 2026 by rpki-client