Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/XyWdQkEWDNLhpDNjkbwlMYMZ3ls.roa
File: XyWdQkEWDNLhpDNjkbwlMYMZ3ls.roa (raw, json)
Hash identifier: PyWFGOgDUZTDhIxWHy11cAu/T0e2CMeU7zq7uFdYOpo=
Subject key identifier: 5F:25:9D:42:41:16:0C:D2:E1:A4:33:63:91:BC:25:31:83:19:DE:5B
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0AAA6B7831D988AF2A011906B1DE1D1C4
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/XyWdQkEWDNLhpDNjkbwlMYMZ3ls.roa
Signing time: Wed 16 Sep 2026 14:37:27 +0000
ROA not before: Wed 16 Sep 2026 14:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 79.182.0.0/24 maxlen: 24
79.182.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:a6:b7:83:1d:98:8a:f2:a0:11:90:6b:1d:e1:d1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 16 14:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f259d4241160cd2e1a4336391bc25318319de5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:ba:da:14:45:bd:76:70:11:4e:ee:24:f8:
57:87:e1:14:09:c8:18:9c:16:8b:d9:46:e7:76:52:
df:08:5a:16:27:f7:66:f4:70:09:55:00:82:5a:d8:
9c:bc:b7:3c:ac:05:ec:a8:46:8a:d5:f7:76:d9:98:
98:33:fa:36:8d:e5:d0:76:76:b0:30:b1:18:13:ed:
bd:47:55:87:cd:0a:e1:07:9d:fc:1d:68:2f:b8:72:
bf:39:b2:0a:2b:08:75:2d:9f:bf:73:7e:e7:5e:26:
af:ef:e1:2f:d6:e2:ff:77:73:69:b3:35:cd:cf:ab:
cd:ab:06:2f:5c:97:e3:4c:32:f5:3f:75:39:1f:8c:
13:4d:7c:1a:95:d8:84:f5:e4:91:a9:fe:d1:db:8d:
76:e1:5e:95:a6:9a:ea:c7:1c:40:b5:2e:8a:a9:9d:
75:bc:46:22:65:b6:77:cf:0a:be:00:65:26:9f:ff:
7e:4d:40:f7:c3:56:55:16:3d:75:c7:e5:08:36:14:
b4:c1:f7:ed:52:95:ba:b3:f6:48:1a:07:af:ee:dc:
e6:93:42:c3:d2:cb:fb:65:21:e8:bb:fb:2a:6d:e1:
e5:d6:89:a4:1a:69:f8:d2:14:ed:10:11:c4:a4:4c:
3c:3e:86:02:a4:e7:e8:df:d7:8c:b3:33:6d:36:f0:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:9D:42:41:16:0C:D2:E1:A4:33:63:91:BC:25:31:83:19:DE:5B
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/XyWdQkEWDNLhpDNjkbwlMYMZ3ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.0.0/24
79.182.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:59:26:9a:7b:5f:54:d7:6e:b6:f8:7a:da:9c:5f:b1:d4:4c:
42:81:a2:59:d0:39:d4:e6:25:38:6b:8a:2f:42:1d:d1:59:a1:
f3:28:3c:90:7e:60:54:49:3f:08:37:68:75:3d:16:17:39:e2:
d6:45:be:85:54:ee:83:63:c5:b4:15:46:67:7b:27:f8:b4:44:
44:46:fe:15:49:ad:cc:c5:22:20:45:79:73:77:ca:af:40:6b:
b8:2a:4b:31:dc:35:77:02:9e:04:74:2a:53:e0:f9:ce:ac:ea:
f3:85:40:37:ed:b8:59:b1:f6:28:7d:dc:56:0b:37:e9:c6:85:
56:23:37:80:91:49:6f:c0:ad:52:24:06:56:66:5a:be:a5:5a:
df:8e:57:ed:73:91:c3:6f:0c:8c:ab:3c:3d:2e:f8:4d:d2:26:
58:4d:3d:e4:2a:35:ea:31:36:5d:3c:a9:25:5a:28:ce:be:d9:
54:c2:22:18:36:c5:de:3c:82:a9:7d:36:01:c2:70:48:08:2a:
4f:b6:37:69:f6:59:76:27:d7:33:7f:19:68:fb:93:8c:89:47:
4f:9d:cd:c4:a9:7a:6f:80:11:dd:e1:56:54:8d:6b:92:b6:76:
7b:9e:96:13:b5:85:03:c2:2c:03:41:8f:7e:2b:2f:4f:87:e5:
7b:29:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:38 2026 by rpki-client