Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/aBpZ9Fg_ucqL7tPNl4_XIwSlY-g.roa
File: aBpZ9Fg_ucqL7tPNl4_XIwSlY-g.roa (raw, json)
Hash identifier: yL/byL8y2wRAPxbqm8wiyUVNHbqv7BqS5+DGtgRZpgE=
Subject key identifier: 68:1A:59:F4:58:3F:B9:CA:8B:EE:D3:CD:97:8F:D7:23:04:A5:63:E8
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C493104AE08DA664D4E8D5A5FFFCA1C4
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/aBpZ9Fg_ucqL7tPNl4_XIwSlY-g.roa
Signing time: Mon 21 Sep 2026 15:26:07 +0000
ROA not before: Mon 21 Sep 2026 15:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 79.180.100.0/24 maxlen: 24
109.64.229.0/24 maxlen: 24
109.66.16.0/24 maxlen: 24
109.66.19.0/24 maxlen: 24
109.66.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:93:10:4a:e0:8d:a6:64:d4:e8:d5:a5:ff:fc:a1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 21 15:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=681a59f4583fb9ca8beed3cd978fd72304a563e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:d4:4a:3c:c2:e3:4c:1e:68:ed:8f:f1:da:
64:99:76:e5:99:db:74:d1:d3:46:0c:b5:04:32:64:
db:a3:05:2b:9d:44:32:78:04:e1:b0:80:fd:1a:63:
5a:84:eb:9a:a1:88:bb:64:3a:95:84:77:b8:6c:01:
25:81:14:a2:b0:4e:d9:20:a1:27:5f:27:17:de:35:
11:a0:c7:f2:11:8b:9d:8d:66:60:4a:c2:8b:1c:51:
c0:8d:83:01:0a:aa:ab:3d:24:22:6f:7b:41:97:55:
21:6a:a6:45:5b:e0:72:d4:2b:b2:22:8d:66:1f:3d:
e8:e1:1e:dd:d6:ed:a7:5f:98:62:cb:7e:82:e2:6e:
2e:4a:c4:de:2b:db:22:f1:38:8d:3e:c5:99:7a:dc:
21:77:2b:1d:7b:7d:c4:3b:79:4c:d3:fd:a2:e6:0b:
5e:8a:13:32:97:02:d4:22:78:5d:7d:e4:fd:63:02:
42:f5:42:c7:47:d9:07:ec:cf:32:b7:6c:16:3e:d7:
2b:fa:25:e5:b0:dd:70:bf:03:5e:ec:f3:48:12:c8:
39:2e:86:56:db:60:9d:2c:85:e0:cf:de:13:20:ee:
d0:14:36:36:1d:96:18:36:3d:94:89:9f:72:50:84:
96:dc:d6:9e:58:ed:12:b1:08:1d:01:6e:be:76:b9:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:59:F4:58:3F:B9:CA:8B:EE:D3:CD:97:8F:D7:23:04:A5:63:E8
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/aBpZ9Fg_ucqL7tPNl4_XIwSlY-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.100.0/24
109.64.229.0/24
109.66.16.0/24
109.66.19.0/24
109.66.69.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:7e:3a:7a:9d:4c:0c:af:9d:10:f5:00:c8:13:be:11:3d:
96:64:64:2a:37:90:9b:1c:b8:52:51:f9:14:bf:50:04:ca:74:
e0:11:75:05:c4:d2:9c:da:b8:eb:13:38:6d:a4:80:21:5e:f3:
13:f4:11:29:ba:fc:17:9b:7e:a7:27:1b:ae:c3:c0:88:d6:6c:
fe:3f:de:28:bc:b7:b9:79:55:e7:99:e7:86:f1:95:35:86:28:
4c:5d:cd:3e:44:5b:6f:2e:e2:e7:e6:f4:37:44:2c:43:4d:8a:
67:d9:00:4d:88:bb:35:0f:a0:d0:1d:69:fa:0c:e7:e7:ac:3b:
ee:ed:54:35:48:f8:65:72:be:c8:c2:07:1c:06:f1:90:ef:81:
7e:4a:71:5d:ab:16:48:f0:20:14:54:7a:e0:47:44:99:32:34:
75:29:cd:6f:e9:27:d5:7e:85:1c:9b:e6:fb:5e:67:29:46:32:
32:9a:aa:c9:51:75:01:b8:7a:4e:93:8f:ee:d4:71:f8:e7:c6:
59:2c:fc:eb:c1:7e:0c:d6:f1:44:fe:dc:24:99:fd:1d:f3:ea:
b3:25:52:f9:69:81:0a:88:6e:f7:86:c2:55:13:38:87:71:75:
2d:0d:43:e1:70:b8:fc:db:71:1b:7a:d6:4a:7c:01:7b:d2:4d:
9b:13:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:31:35 2026 by rpki-client