Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YbF1DuTh2SPA3q06bxtDcRFOtcQ.roa
File: YbF1DuTh2SPA3q06bxtDcRFOtcQ.roa (raw, json)
Hash identifier: uHxVHHsOYnB2/S3WRBuEJsdY68WMrQSI3e6fyQEkEpQ=
Subject key identifier: 61:B1:75:0E:E4:E1:D9:23:C0:DE:AD:3A:6F:1B:43:71:11:4E:B5:C4
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A09A27641F558C21DB67C486ADF77193B4
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YbF1DuTh2SPA3q06bxtDcRFOtcQ.roa
Signing time: Sun 13 Sep 2026 09:44:27 +0000
ROA not before: Sun 13 Sep 2026 09:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 79.182.9.0/24 maxlen: 24
109.66.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:27:64:1f:55:8c:21:db:67:c4:86:ad:f7:71:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 13 09:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61b1750ee4e1d923c0dead3a6f1b4371114eb5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:e1:30:ba:cf:43:cf:8f:88:a8:8e:ec:4e:
a1:77:9d:51:12:19:28:d9:de:93:3c:86:9a:29:15:
1b:a7:16:47:f6:5b:7a:d0:a0:44:f0:ae:12:0e:4a:
4b:11:39:f0:21:40:de:7b:5c:45:f4:17:97:be:cd:
97:e9:ef:4f:cf:31:f2:2c:42:95:2f:8c:9b:be:02:
63:1f:ea:24:ad:86:cf:e5:50:b6:94:33:19:b1:d9:
ac:7f:62:76:bc:34:ce:ef:be:40:01:d1:39:5c:c5:
b4:09:7a:26:fa:b0:fa:35:b4:40:bf:97:93:9a:46:
cf:99:22:3f:2f:e4:c4:f6:f2:bd:ad:2c:95:9a:eb:
4d:45:06:c8:e6:5b:0c:7d:f0:76:fd:a4:72:75:aa:
79:67:04:85:ed:d5:be:1a:ad:47:11:0a:b0:3c:86:
8d:54:42:4c:7a:f7:7a:6d:59:a5:f1:51:47:b4:75:
e9:a3:b1:97:c9:da:8f:03:44:04:6c:cb:fc:cf:52:
5a:e3:82:8e:c0:f7:9a:ce:0d:8b:28:93:db:58:ec:
f4:1b:63:35:dd:62:07:32:df:0c:ae:5a:de:16:26:
30:50:a3:e2:54:94:50:5d:a3:17:68:2f:f1:a2:0b:
3b:1b:a2:b8:a0:17:fd:bb:b0:6b:fa:8a:9b:7a:95:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:75:0E:E4:E1:D9:23:C0:DE:AD:3A:6F:1B:43:71:11:4E:B5:C4
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YbF1DuTh2SPA3q06bxtDcRFOtcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.9.0/24
109.66.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0c:c4:b4:b9:bf:d6:f7:72:95:09:20:39:34:22:a7:30:ba:
f6:69:1b:02:7c:85:00:aa:3b:9e:dd:b0:a0:c2:09:7c:a0:99:
dc:11:40:17:44:d3:09:e2:14:17:6b:fa:cf:54:3f:85:4b:07:
2f:f9:12:f0:51:b2:d4:50:31:e4:04:5a:c1:0f:26:2b:63:df:
d1:0e:63:6f:60:73:97:a3:7f:a8:58:5c:04:9c:28:9e:96:de:
ca:fb:2f:02:74:f6:27:eb:1a:49:f7:83:89:d2:10:c0:a1:7f:
0e:e3:ea:2d:88:dc:51:e5:63:ec:9e:72:4a:cc:31:82:eb:21:
cb:22:70:a2:4a:3b:eb:1e:1d:1a:5f:01:5b:b4:ec:61:da:e5:
ca:36:d3:e7:0c:44:21:1b:27:24:85:1c:36:4f:ab:e9:f3:07:
07:53:dd:57:95:66:4c:d7:99:01:48:7c:8e:1a:93:1f:ae:2d:
65:12:91:d1:f5:c5:1f:57:91:ac:b1:1f:88:df:cb:36:6c:53:
b1:7b:4c:9c:33:b1:5b:00:e0:7c:1b:2d:81:28:51:11:e1:3a:
dd:d3:4d:4e:20:7b:73:2e:98:03:51:a1:a4:41:d4:0a:bb:23:
46:87:11:9d:a0:58:e2:1b:0a:04:fc:b0:ea:5b:17:d9:37:f6:
29:b3:4c:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCaJ2QfVYwh22fEhq33cZO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTEzMDk0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWIxNzUwZWU0ZTFkOTIzYzBkZWFkM2E2ZjFiNDM3MTExNGViNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUrhMLrPQ8+PiKiO7E6hd51REhko
2d6TPIaaKRUbpxZH9lt60KBE8K4SDkpLETnwIUDee1xF9BeXvs2X6e9PzzHyLEKV
L4ybvgJjH+okrYbP5VC2lDMZsdmsf2J2vDTO775AAdE5XMW0CXom+rD6NbRAv5eT
mkbPmSI/L+TE9vK9rSyVmutNRQbI5lsMffB2/aRydap5ZwSF7dW+Gq1HEQqwPIaN
VEJMevd6bVml8VFHtHXpo7GXydqPA0QEbMv8z1Ja44KOwPeazg2LKJPbWOz0G2M1
3WIHMt8MrlreFiYwUKPiVJRQXaMXaC/xogs7G6K4oBf9u7Br+oqbepW1xwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGGxdQ7k4dkjwN6tOm8bQ3ERTrXEMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvWWJGMUR1VGgyU1BBM3EwNmJ4dERjUkZPdGNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT7YJAwQA
bUISMA0GCSqGSIb3DQEBCwUAA4IBAQBKDMS0ub/W93KVCSA5NCKnMLr2aRsCfIUA
qjue3bCgwgl8oJncEUAXRNMJ4hQXa/rPVD+FSwcv+RLwUbLUUDHkBFrBDyYrY9/R
DmNvYHOXo3+oWFwEnCielt7K+y8CdPYn6xpJ94OJ0hDAoX8O4+otiNxR5WPsnnJK
zDGC6yHLInCiSjvrHh0aXwFbtOxh2uXKNtPnDEQhGyckhRw2T6vp8wcHU91XlWZM
15kBSHyOGpMfri1lEpHR9cUfV5GssR+I38s2bFOxe0ycM7FbAOB8Gy2BKFER4Trd
001OIHtzLpgDUaGkQdQKuyNGhxGdoFjiGwoE/LDqWxfZN/Yps0xH
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:10 2026 by rpki-client