Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/XX80IvIgyEeDLkgZVPKrtZGTDxA.roa
File: XX80IvIgyEeDLkgZVPKrtZGTDxA.roa (raw, json)
Hash identifier: EbuZUX+5jFP2Jqpv/jr2b+ImqIlnXudN6g3f+AeV+Do=
Subject key identifier: 5D:7F:34:22:F2:20:C8:47:83:2E:48:19:54:F2:AB:B5:91:93:0F:10
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A09A735FC120A604F7F1E7A52BD6241EFB
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/XX80IvIgyEeDLkgZVPKrtZGTDxA.roa
Signing time: Sun 13 Sep 2026 11:07:27 +0000
ROA not before: Sun 13 Sep 2026 11:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 79.182.9.0/24 maxlen: 24
109.66.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:73:5f:c1:20:a6:04:f7:f1:e7:a5:2b:d6:24:1e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 13 11:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d7f3422f220c847832e481954f2abb591930f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:fd:53:3e:84:18:40:6e:74:e6:df:c7:0a:
3e:ae:bc:7d:1e:ee:4c:47:bb:e1:66:3f:fa:6e:03:
8d:a2:eb:cc:b9:64:32:4a:6f:ed:8d:0c:97:49:be:
85:08:bb:1b:d2:1e:ed:7e:f1:a2:c0:86:37:54:40:
a5:bc:bd:f2:40:4c:38:94:de:b5:8b:aa:0f:31:a8:
94:27:a6:9e:9e:87:90:b7:98:cd:34:a6:70:36:45:
a9:10:c6:03:27:bc:21:bb:6d:8d:8f:ca:a5:ca:8c:
7a:63:bd:60:b7:22:c1:a9:0b:bd:b3:43:42:20:40:
e5:6b:83:aa:60:04:c3:86:50:44:6e:06:d6:53:5e:
dc:67:35:43:a3:03:00:12:d2:13:20:36:4a:71:fc:
c3:51:86:29:ac:17:52:cd:e6:ae:b6:18:74:d7:c0:
3e:5f:3d:66:04:61:05:04:33:26:d2:c3:02:03:9a:
46:a9:b8:27:e8:a8:5f:a2:cf:bd:e6:59:ce:9b:0a:
71:ec:0c:59:fc:c6:4c:f0:5b:71:85:bd:70:93:f3:
e3:3a:57:80:d9:ff:73:b4:3b:73:59:eb:94:48:90:
c5:4a:c6:20:1d:bc:2d:9c:3e:aa:a0:6e:f9:14:70:
52:54:ee:36:88:fb:94:b9:aa:44:2c:12:19:63:17:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:34:22:F2:20:C8:47:83:2E:48:19:54:F2:AB:B5:91:93:0F:10
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/XX80IvIgyEeDLkgZVPKrtZGTDxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.9.0/24
109.66.18.0/24
Signature Algorithm: sha256WithRSAEncryption
94:86:27:c3:33:d4:32:65:46:d2:68:82:0c:1c:76:51:eb:ad:
f9:b1:fd:d7:15:ed:08:da:6f:14:bc:75:d3:0a:9b:f1:71:97:
f0:29:09:eb:a4:03:dd:27:ae:61:6e:82:f5:dd:d6:da:0b:e0:
ba:38:7d:17:21:91:d0:67:38:68:19:84:4b:0a:5e:06:fe:c3:
54:fd:18:c3:ce:87:3f:18:69:f5:92:c1:b5:49:1a:9e:78:54:
5d:8c:78:8c:db:a0:1d:a6:6c:4d:c6:4d:0d:cb:59:f8:8f:b4:
19:84:b9:ea:2b:5f:cc:8c:d9:c5:03:dd:18:03:60:4e:ce:90:
fd:bf:c4:a9:fc:31:de:9e:38:56:4c:1e:66:17:c5:47:50:3a:
4b:0f:0f:ca:95:1e:c9:df:65:cd:24:d5:21:92:cb:2e:ae:d7:
83:a4:71:dd:9a:8a:49:61:d3:e5:71:22:24:09:0d:ea:6f:0a:
a8:aa:44:08:f0:6d:15:63:69:df:bb:7b:33:b9:1a:69:41:7e:
41:34:34:50:61:4c:53:b6:bc:9b:b3:e4:7d:b6:78:a4:9b:df:
15:56:63:f1:d7:71:dd:0c:93:b5:2c:29:8b:d9:22:44:f0:14:
13:07:d2:bf:94:a8:f5:db:69:00:9f:5c:c6:76:fe:ae:33:e6:
29:90:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:25 2026 by rpki-client