Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/btiY9G4Cq5xuGod0_E85_A87rWc.roa
File: btiY9G4Cq5xuGod0_E85_A87rWc.roa (raw, json)
Hash identifier: k0FTNOnaJ7XLrnb2Rb1elFc4A/dkfvVIASun8f0fRFg=
Subject key identifier: 6E:D8:98:F4:6E:02:AB:9C:6E:1A:87:74:FC:4F:39:FC:0F:3B:AD:67
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A08A9444720ABCFEA97591C9C72ED6F8B5
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/btiY9G4Cq5xuGod0_E85_A87rWc.roa
Signing time: Thu 10 Sep 2026 09:09:27 +0000
ROA not before: Thu 10 Sep 2026 09:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38186
IP address blocks: 79.176.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:94:44:72:0a:bc:fe:a9:75:91:c9:c7:2e:d6:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 10 09:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ed898f46e02ab9c6e1a8774fc4f39fc0f3bad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:6b:8c:f0:6c:96:28:d2:01:e5:4f:5e:43:
0c:c9:19:07:50:51:7e:90:02:d1:e6:c6:6e:08:4d:
34:c6:85:76:12:46:fe:27:b2:b0:1a:db:0b:76:d6:
ae:ae:c5:90:f6:a6:9e:6f:8f:39:82:b0:a6:26:ec:
58:18:79:99:2a:c9:29:87:c3:c7:3b:76:fa:dd:1d:
48:97:a2:16:9e:3d:31:50:96:13:70:f9:b2:30:9f:
3c:c6:30:ad:71:90:08:5f:65:7e:31:d4:d8:70:9f:
b0:25:31:4a:5a:5d:25:c1:eb:37:46:09:4d:3b:39:
8a:ff:c6:4d:2b:2f:83:c9:f2:5d:e1:ef:ad:07:35:
79:d7:eb:b3:70:3e:2a:fd:fa:b8:ee:d3:14:25:0b:
fd:6d:5b:a4:58:b2:8a:6c:a0:8c:de:a2:3d:7d:ce:
69:10:1b:61:ab:6f:0c:ca:e0:0b:30:e5:d2:19:e0:
5b:2e:51:b9:fd:0a:e4:d2:76:e0:cc:4f:8a:e5:58:
83:ac:73:20:ec:c6:a4:1d:f6:21:03:cf:a8:2c:34:
ee:5b:81:d0:e8:3c:4d:d0:77:d7:f1:a3:10:fe:bb:
85:55:a8:72:1a:16:a3:93:75:eb:c9:ae:c5:6d:f1:
58:c4:27:43:c0:96:e8:68:91:1b:c9:ce:42:46:f2:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:98:F4:6E:02:AB:9C:6E:1A:87:74:FC:4F:39:FC:0F:3B:AD:67
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/btiY9G4Cq5xuGod0_E85_A87rWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.18.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4f:7f:a1:52:71:51:fa:b8:3d:38:0f:2d:03:d3:0b:e7:c8:
a4:71:5c:bd:bc:18:2f:5d:bd:73:eb:2e:c1:b4:3c:72:ae:aa:
28:a8:e7:71:9f:c6:7d:71:94:1d:67:00:1e:bd:c9:7a:98:ce:
9f:b5:c6:8d:cc:7a:15:99:4b:f5:bc:08:07:fd:82:e7:2f:4d:
78:e0:85:e9:5b:2b:d2:a3:60:db:64:7e:2e:e6:61:07:32:f0:
9f:ac:74:23:8d:b0:ee:4f:7d:45:0c:fc:a4:b8:f8:8e:87:e5:
92:81:9e:20:f3:76:61:c9:20:80:69:2e:a1:ea:4c:f8:bf:42:
43:e0:58:21:5f:bc:ee:97:a9:e9:37:0b:61:d1:43:15:3c:45:
22:2a:54:ca:e6:84:b3:c1:53:a7:54:f4:8b:3c:e0:96:ff:82:
3a:74:78:b7:e3:19:30:9e:dd:62:11:87:0a:3b:29:35:54:b9:
30:d2:d5:f8:f9:1b:82:fb:6a:32:3d:fa:8f:25:7c:dc:11:23:
e7:55:da:8c:90:46:56:3c:25:aa:ca:b3:61:a6:bd:41:ee:4c:
a9:6a:86:80:61:46:0a:7b:d7:ba:ea:d2:58:27:65:8a:4a:ef:
5d:09:13:c4:d7:ae:b3:99:c1:ae:df:59:e0:0f:1a:bf:44:11:
19:ad:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:28:20 2026 by rpki-client