Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZT-Y6H05fpD9vID_PQIqkWgZG7E.roa
File: ZT-Y6H05fpD9vID_PQIqkWgZG7E.roa (raw, json)
Hash identifier: c+uCIxP+3nmX4oWeR5m6hrrCXGktJD+jp/pRX1VIAxs=
Subject key identifier: 65:3F:98:E8:7D:39:7E:90:FD:BC:80:FF:3D:02:2A:91:68:19:1B:B1
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B1D20B0711781D5C8E5F18CE684365E5
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZT-Y6H05fpD9vID_PQIqkWgZG7E.roa
Signing time: Fri 18 Sep 2026 00:02:07 +0000
ROA not before: Fri 18 Sep 2026 00:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 79.176.29.0/24 maxlen: 24
79.176.80.0/24 maxlen: 24
79.176.104.0/24 maxlen: 24
79.176.122.0/24 maxlen: 24
79.176.180.0/24 maxlen: 24
79.176.246.0/24 maxlen: 24
79.182.69.0/24 maxlen: 24
79.182.85.0/24 maxlen: 24
79.182.147.0/24 maxlen: 24
79.182.191.0/24 maxlen: 24
79.182.203.0/24 maxlen: 24
79.182.238.0/24 maxlen: 24
109.66.68.0/24 maxlen: 24
109.66.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:d2:0b:07:11:78:1d:5c:8e:5f:18:ce:68:43:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 18 00:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=653f98e87d397e90fdbc80ff3d022a9168191bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:d3:6c:fb:84:ff:8f:1e:52:74:ac:05:05:
0d:2d:cf:82:dc:b0:0b:80:58:a7:c1:59:78:4b:38:
23:f7:70:71:44:6d:9a:65:26:3d:3e:8d:1b:86:a0:
94:37:d5:93:d6:e2:09:9c:29:4f:d5:4f:d4:39:8c:
29:bc:dd:e9:d1:df:cc:13:b0:07:ab:be:2d:44:ed:
51:b4:a2:33:14:2e:80:ba:6c:62:be:2a:a8:d6:46:
eb:40:ae:42:a7:7a:04:53:21:fc:7f:f7:7a:3f:f3:
91:f1:39:40:91:28:9b:5e:85:33:0d:93:aa:ae:17:
61:0f:d4:a9:4d:b6:38:be:f1:c5:9b:bc:59:ac:8a:
c6:22:0a:b1:62:c8:36:85:5c:55:bf:2b:23:cd:d5:
71:b7:24:c0:8e:6c:7c:60:65:17:11:97:44:8d:15:
ee:d4:d6:75:f4:eb:e0:05:9e:25:8f:43:48:1c:9b:
ce:3e:34:19:47:ed:cb:af:3b:a0:87:0b:c2:81:dd:
50:eb:2d:5f:78:1d:68:3d:f7:80:ba:7e:71:9c:da:
5b:cd:28:bd:18:29:1a:30:b8:54:44:56:21:79:fb:
a8:56:ac:b1:d5:9a:c6:be:67:ba:88:bc:cc:f9:ee:
77:72:d5:3b:31:b7:7d:2e:77:3d:d6:aa:2b:52:61:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:98:E8:7D:39:7E:90:FD:BC:80:FF:3D:02:2A:91:68:19:1B:B1
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZT-Y6H05fpD9vID_PQIqkWgZG7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.29.0/24
79.176.80.0/24
79.176.104.0/24
79.176.122.0/24
79.176.180.0/24
79.176.246.0/24
79.182.69.0/24
79.182.85.0/24
79.182.147.0/24
79.182.191.0/24
79.182.203.0/24
79.182.238.0/24
109.66.68.0/24
109.66.87.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d9:52:5f:ae:ce:51:06:45:0d:94:3b:db:6e:04:23:d9:fe:
0f:fa:82:5b:93:5e:eb:8d:58:7f:d1:22:e6:1e:d6:2a:bc:2e:
07:fc:7c:d2:96:1c:cd:ae:8a:5d:43:5b:76:c4:d0:15:0a:94:
54:44:79:d6:bb:14:22:34:37:69:88:d4:c2:c4:c1:27:d5:c1:
d4:56:37:36:44:e6:1a:54:ee:b7:43:1e:92:bb:0d:8f:81:a0:
54:c1:cd:34:ee:76:e7:d2:c0:b4:40:bd:81:c5:dc:58:f9:fa:
cd:bf:e3:ce:08:8b:31:26:30:ab:db:11:a1:db:72:86:7d:43:
22:d6:f3:36:bc:fd:00:5f:ad:8a:60:9d:4d:d9:bc:32:50:87:
99:aa:5f:36:c4:21:ff:69:00:0c:f3:cd:68:72:f1:e3:d7:bd:
b3:05:2d:49:c2:78:e1:36:72:fa:29:b4:16:47:6b:96:8b:db:
7e:26:de:97:f4:3a:ab:2e:2e:63:4b:51:e8:70:65:93:7a:65:
2c:e3:13:34:ab:f6:8d:48:24:95:5c:44:8a:15:6c:0f:2f:52:
98:40:4c:a5:ff:2f:14:a6:d7:b4:ce:3d:89:e6:53:fb:fd:7a:
f4:23:4e:34:6f:56:35:c2:73:40:47:2b:57:94:a1:e3:8e:70:
53:14:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:39 2026 by rpki-client