Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/eNmtNYboW-S4uV14oJxj7T1rdiw.roa
File: eNmtNYboW-S4uV14oJxj7T1rdiw.roa (raw, json)
Hash identifier: ywxr4Wx9r4J6/8qd6svQs7epkj/mR8G4ZaOnOlDRkYQ=
Subject key identifier: 78:D9:AD:35:86:E8:5B:E4:B8:B9:5D:78:A0:9C:63:ED:3D:6B:76:2C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A09461BB36EBA4D6FFC2DC49A2764E0149
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/eNmtNYboW-S4uV14oJxj7T1rdiw.roa
Signing time: Sat 12 Sep 2026 06:50:27 +0000
ROA not before: Sat 12 Sep 2026 06:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 79.176.4.0/24 maxlen: 24
79.182.10.0/24 maxlen: 24
79.183.58.0/24 maxlen: 24
79.183.66.0/24 maxlen: 24
79.183.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:61:bb:36:eb:a4:d6:ff:c2:dc:49:a2:76:4e:01:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 12 06:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78d9ad3586e85be4b8b95d78a09c63ed3d6b762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:26:d7:03:24:c9:20:15:74:69:97:20:2d:
f0:0a:3a:9c:f4:91:b5:97:86:92:73:1c:2d:ef:42:
65:d7:76:b8:bd:7f:d7:2f:7a:87:f4:97:e6:18:53:
3c:48:e6:72:02:92:27:5a:47:29:38:b5:77:35:14:
22:17:e5:ad:be:ae:50:90:f3:28:0e:e8:84:96:12:
80:99:18:e6:e9:f0:94:38:5b:3d:58:a8:6b:6b:2e:
9a:67:26:d2:a7:3f:73:66:22:6a:6f:80:75:46:f7:
c3:49:49:a0:48:46:5a:f8:88:83:b7:5b:98:36:0a:
54:a1:c2:3f:69:1c:a7:7f:79:f8:f8:c0:99:63:6a:
30:0c:a9:31:a3:7b:eb:1b:23:e0:d2:3d:bd:8a:c4:
1d:a5:88:62:ae:e9:7d:c8:e2:bc:d2:29:fa:51:4e:
80:ba:85:e7:9a:c5:c3:00:96:e1:bc:31:be:a2:05:
fa:5a:d0:fc:76:6e:df:c4:db:60:db:4f:38:fa:f4:
a9:79:fb:a1:48:69:7b:15:26:20:a1:be:c1:68:81:
21:df:53:88:d2:39:f1:28:a9:9d:e4:3f:67:2b:4f:
df:23:01:7e:33:fa:de:f9:07:ce:e0:e5:e6:99:1a:
d0:68:75:10:df:e0:1d:ba:e8:30:e9:ab:e3:95:32:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:AD:35:86:E8:5B:E4:B8:B9:5D:78:A0:9C:63:ED:3D:6B:76:2C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/eNmtNYboW-S4uV14oJxj7T1rdiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.4.0/24
79.182.10.0/24
79.183.58.0/24
79.183.66.0/24
79.183.183.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4e:67:a2:1e:0a:76:94:d1:77:37:af:38:93:f8:c3:8b:d1:
77:a2:a9:a3:3d:8f:e6:b1:40:ec:4e:dc:0e:55:b7:74:bc:bc:
10:f9:dc:09:ec:62:d9:7b:4b:be:0d:74:9e:f3:b4:a5:8e:0b:
53:a8:cf:01:06:3d:b0:e2:94:b6:2c:5e:fb:38:04:25:85:aa:
76:57:80:50:fa:ed:4a:bb:ce:ab:3f:4e:c9:0e:61:e9:3c:66:
cf:f7:79:48:46:fb:11:8d:81:ab:dc:67:6e:64:f9:e0:30:6c:
0c:d1:0f:4c:cc:91:07:fa:89:f0:6b:5b:9c:1d:af:c4:76:74:
bc:4f:c1:53:f5:54:21:b3:c3:7b:35:ce:cc:16:b8:30:83:b1:
23:65:d4:e6:66:93:5a:79:fc:4f:68:43:33:aa:33:01:05:24:
7e:21:d3:67:bb:7d:53:11:df:90:35:01:9d:6b:3d:47:9c:60:
35:81:1b:e9:1b:aa:07:f5:0e:cf:80:16:34:2a:2a:5c:04:51:
bd:9d:8b:0d:1c:63:73:e8:d0:d8:95:88:61:b2:b3:eb:df:20:
90:7e:59:bb:1f:87:02:42:ec:b0:43:85:cc:17:44:f2:87:80:
62:60:6d:60:67:81:59:77:c4:ff:c6:a8:08:be:2a:bd:ea:08:
73:be:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:15 2026 by rpki-client