Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cz93gSYka5r9M3XyNAtdEFn57xo.roa
File: cz93gSYka5r9M3XyNAtdEFn57xo.roa (raw, json)
Hash identifier: neoZb+n0N47lMAEDcu6FOLVy7+Gjx8R64bg6HqCzDEs=
Subject key identifier: 73:3F:77:81:26:24:6B:9A:FD:33:75:F2:34:0B:5D:10:59:F9:EF:1A
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0AE4367FB7B27A1D2760B20C6BB8C40EA
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cz93gSYka5r9M3XyNAtdEFn57xo.roa
Signing time: Thu 17 Sep 2026 07:27:27 +0000
ROA not before: Thu 17 Sep 2026 07:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399275
IP address blocks: 79.182.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:43:67:fb:7b:27:a1:d2:76:0b:20:c6:bb:8c:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 17 07:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=733f778126246b9afd3375f2340b5d1059f9ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:a7:25:fc:a0:30:6e:54:8b:11:bf:08:35:
09:cc:f7:03:bf:11:04:c8:ec:d9:b8:f2:3c:33:c6:
1d:c6:5f:6b:a2:86:e0:a3:cd:93:d6:23:10:30:8a:
41:86:32:10:5b:1f:90:95:66:0b:ff:a7:38:34:93:
18:f9:a1:b8:e4:2d:2c:19:79:1c:67:00:21:b3:0c:
a7:4f:ae:86:b3:06:a5:40:79:d0:18:5b:8c:0b:86:
1a:09:43:4c:85:7d:b6:5e:c4:82:6d:2f:f6:88:5a:
d4:db:15:0c:42:59:64:39:3b:42:35:07:3f:9b:24:
27:9c:29:2d:44:e8:6f:9c:36:c0:4b:a8:04:04:49:
6d:a6:1f:2d:db:ff:93:0b:1d:2f:88:91:46:9b:cc:
be:82:49:dd:16:c8:d9:2f:9b:ef:16:38:7a:43:92:
52:ac:80:1b:0b:62:0f:36:ae:47:b7:46:39:92:d1:
a1:d5:cf:a8:95:57:ad:40:c9:9b:96:e6:f7:32:1f:
eb:dc:a7:5f:f1:d9:de:c8:c6:df:1f:be:06:ec:a5:
93:9d:75:b8:9e:d3:7d:0b:fa:f0:23:db:47:8c:5e:
54:54:56:47:f6:3a:fc:16:80:a8:c0:89:12:a7:02:
bb:77:24:71:6d:20:6e:3c:aa:68:6b:7b:39:1b:e2:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:77:81:26:24:6B:9A:FD:33:75:F2:34:0B:5D:10:59:F9:EF:1A
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cz93gSYka5r9M3XyNAtdEFn57xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ac:5e:a0:94:4c:eb:23:7f:bb:eb:79:db:41:a9:2a:29:0f:
30:51:b5:ba:3f:92:da:22:51:7c:96:16:67:04:12:e6:5a:e0:
42:ad:4c:bd:54:49:6c:64:16:6a:0b:e3:4f:06:ae:a5:be:a9:
02:ec:81:8b:5b:de:25:b8:7d:d6:3b:dc:53:fd:3f:52:05:50:
c1:e8:e1:9b:8c:3b:d2:be:68:0a:05:92:21:ca:0c:d7:ea:15:
1a:a3:b4:b6:eb:c5:f8:fb:62:f7:63:dd:e1:b0:14:8a:8f:86:
ba:51:8e:71:83:0f:13:8d:c0:ce:8a:2d:a3:d1:8b:bf:0b:32:
ea:68:8b:89:6e:73:29:01:82:6f:57:4e:91:7f:ef:16:07:d9:
e9:96:4c:d8:47:95:3a:bf:3a:58:a3:31:47:7f:40:68:69:45:
35:30:cc:1b:c8:ce:98:3f:1b:ca:6c:ac:1b:d6:c4:ed:0c:15:
ad:cb:12:9f:b4:55:61:bd:2b:78:90:d0:e3:09:34:a4:47:da:
28:9a:6b:80:19:eb:b2:29:26:97:19:21:89:d1:b2:55:dd:fa:
b7:53:a1:69:43:3e:fc:aa:c4:2d:d4:bd:e1:d7:0f:9b:48:34:
05:08:bb:00:98:c0:74:ae:36:e7:d3:4c:75:0f:48:7a:73:80:
6e:07:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:46 2026 by rpki-client