Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/a4kY_A9CH_wJ34mogRJLjuMcyA8.roa
File: a4kY_A9CH_wJ34mogRJLjuMcyA8.roa (raw, json)
Hash identifier: ABSqspVcmin/qpXK0G3giNG+0voUrlfxLIyyuwUSlb0=
Subject key identifier: 6B:89:18:FC:0F:42:1F:FC:09:DF:89:A8:81:12:4B:8E:E3:1C:C8:0F
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A09DC6D2E87FA1DBEF66A8DFE9E9C0CCB1
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/a4kY_A9CH_wJ34mogRJLjuMcyA8.roa
Signing time: Mon 14 Sep 2026 02:37:28 +0000
ROA not before: Mon 14 Sep 2026 02:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 79.176.6.0/24 maxlen: 24
79.182.4.0/24 maxlen: 24
79.182.11.0/24 maxlen: 24
109.65.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9d:c6:d2:e8:7f:a1:db:ef:66:a8:df:e9:e9:c0:cc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 14 02:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b8918fc0f421ffc09df89a881124b8ee31cc80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:e2:5c:5d:cd:54:4c:7f:f8:a2:8e:18:e9:
14:71:f6:f5:fa:81:52:8e:4e:2d:bb:5e:73:0f:95:
24:d5:d5:f4:e1:4b:db:ce:dd:ea:db:c7:02:5e:95:
5d:6e:e7:8d:e4:0e:1e:da:0e:2c:33:4e:1a:24:9e:
0d:e2:be:df:7f:2d:8a:af:26:d7:d4:67:12:4d:95:
b0:fa:b9:76:dd:33:da:f1:1d:65:01:7e:8d:92:ec:
00:84:5e:f2:b2:f6:cc:ac:58:a1:77:85:50:f9:b6:
59:0e:ac:8c:1a:e2:19:e9:04:1d:d2:bd:d3:a1:2b:
f3:8d:1f:7c:eb:a1:b6:7b:b2:47:14:f5:a6:4e:c5:
aa:a2:74:ea:ef:c9:95:3c:0c:51:ea:9e:1a:c8:19:
9c:e7:b5:62:48:5c:d7:c8:5f:75:22:c3:cd:2e:d8:
fe:cc:eb:26:e7:db:83:02:9d:3e:63:f3:84:d8:d8:
4e:39:db:e6:89:d1:6d:2d:6c:31:8f:51:6f:97:19:
09:4c:a5:d8:0b:dc:62:29:8f:46:8e:33:23:e7:32:
6e:ac:c1:8f:74:98:23:7b:ce:77:ed:03:46:07:fc:
2d:21:86:75:00:4c:5c:41:e2:5f:71:40:f2:c2:e5:
f4:0e:cb:1d:80:d4:1f:8a:72:e8:bd:a8:ee:68:f7:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:18:FC:0F:42:1F:FC:09:DF:89:A8:81:12:4B:8E:E3:1C:C8:0F
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/a4kY_A9CH_wJ34mogRJLjuMcyA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.6.0/24
79.182.4.0/24
79.182.11.0/24
109.65.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5d:45:e5:08:d7:cb:89:18:c9:92:f3:46:25:77:eb:98:dc:
9c:05:49:a3:3f:01:7f:7f:61:ec:ee:2e:32:11:6f:66:68:0b:
0a:77:16:f7:57:89:ac:2d:98:bd:cb:a3:4e:5c:f7:30:d6:98:
ab:6b:ae:c4:6c:11:2e:ac:a2:36:0c:8a:84:04:56:36:81:af:
5b:c6:f2:ec:87:ab:78:04:dc:63:34:d1:20:19:07:50:9f:b4:
1f:4f:5f:dd:d6:b0:fb:e7:3f:cc:32:b4:4d:dc:a8:bd:f6:7d:
19:ac:ad:53:27:fc:bb:14:d2:3f:f9:8c:55:b7:45:bf:61:bd:
48:6e:e0:c1:56:5b:44:c0:25:0e:3e:f5:8d:20:58:79:32:7d:
3f:bf:77:a4:3a:44:af:28:7e:f1:2f:ed:00:fd:d1:d3:cc:56:
56:d9:fa:af:62:cc:bd:ca:4d:46:f0:db:60:26:f3:c4:a3:b5:
04:0d:1c:fc:78:fb:7a:dd:92:77:9f:ed:46:43:dc:09:9b:b5:
c2:d6:84:92:44:8e:bb:49:20:fb:97:ee:ee:74:47:c0:a0:59:
f8:73:ae:dc:dd:b0:78:4f:4b:9c:56:c5:d1:8c:18:49:8b:9d:
21:94:22:54:d1:83:41:5c:f3:da:ff:ef:8d:51:98:ed:e9:78:
2a:36:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:14 2026 by rpki-client