Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iGl6evogUWEcPE48SurVRzZFAPU.roa
File: iGl6evogUWEcPE48SurVRzZFAPU.roa (raw, json)
Hash identifier: 4ehbpokyIHuqnQg79jHwDgiI24YCvMoqaPTSgcbzLdI=
Subject key identifier: 88:69:7A:7A:FA:20:51:61:1C:3C:4E:3C:4A:EA:D5:47:36:45:00:F5
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0BE3397B44A68296CECA653236D72ED34
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iGl6evogUWEcPE48SurVRzZFAPU.roa
Signing time: Sun 20 Sep 2026 09:44:07 +0000
ROA not before: Sun 20 Sep 2026 09:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 79.183.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:33:97:b4:4a:68:29:6c:ec:a6:53:23:6d:72:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 20 09:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88697a7afa2051611c3c4e3c4aead547364500f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:ae:d2:2a:9a:07:d1:c3:a3:aa:b6:4d:a4:
62:e0:0d:b3:52:49:6a:65:9c:60:c6:c8:f5:b7:a9:
f1:14:e5:c0:87:58:5e:7a:8a:b3:14:8b:4b:a7:ad:
0b:63:0e:c1:6e:55:0d:15:4c:fc:0c:a4:b8:49:41:
56:89:3f:b7:d6:e7:b3:91:a1:f0:cd:e0:8e:0c:f1:
da:85:80:07:5d:28:5b:4e:6c:73:cb:1f:bc:71:ea:
1a:c2:b8:c1:81:d8:d6:8c:75:65:7e:e9:ad:d2:14:
1b:da:b1:c2:5d:c9:fb:d3:b6:de:fd:69:33:e7:8a:
9f:58:8a:8a:07:22:dc:1b:51:45:67:94:a1:63:1e:
28:d8:c7:1d:52:69:fa:a3:da:78:22:0c:90:f2:fb:
b2:21:36:76:0e:86:a0:47:71:1d:8b:67:bd:b7:1b:
9c:b3:85:6a:86:4a:e9:0d:60:09:bd:a1:08:5a:b6:
76:c9:e2:fe:0f:de:3c:64:4c:0e:a7:e0:cb:29:93:
40:20:06:d1:cf:71:d9:66:84:99:bc:40:b3:86:9e:
cc:83:b9:3d:d9:e0:72:ba:bb:0b:ad:8b:04:7f:66:
96:2c:f5:5f:92:95:7b:88:bc:d1:f7:76:f5:b2:28:
cf:03:c6:89:10:99:ad:b3:be:f2:fe:30:aa:60:45:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:7A:7A:FA:20:51:61:1C:3C:4E:3C:4A:EA:D5:47:36:45:00:F5
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iGl6evogUWEcPE48SurVRzZFAPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9c:ed:46:5a:95:85:bf:05:44:d4:97:22:73:84:77:46:b4:
e0:e9:f8:b1:fe:27:4e:a9:a6:46:88:17:93:86:06:26:7b:71:
27:be:a2:90:cd:9d:0a:8d:fd:44:52:89:31:22:f9:39:63:2a:
eb:c8:7f:02:22:b5:b0:29:9d:03:3d:ad:ee:fd:59:5e:3d:f9:
c1:ad:6f:1c:44:05:92:6e:0a:6f:7f:3c:e9:75:94:a6:ab:f4:
7c:31:a2:26:40:49:20:1d:04:e4:d3:c0:b8:8b:c8:74:11:b3:
01:ec:02:fc:22:a7:21:2c:a5:fd:10:d5:d3:79:43:01:6b:46:
e2:da:0e:34:c4:5c:74:13:65:12:da:87:cb:10:fc:bd:00:cb:
89:b1:e1:1d:85:56:fd:7e:a3:9d:0a:0e:76:8b:90:77:c8:0b:
4f:ef:27:11:dd:a3:a5:da:64:c3:6b:eb:68:33:49:ec:99:7e:
80:a7:55:1f:d7:05:aa:29:1f:43:d5:04:6a:87:6a:d5:2e:98:
c3:e4:0b:a8:b8:bb:38:98:f1:5b:46:38:04:16:fa:61:60:b4:
04:bc:17:84:0b:09:e7:40:6d:4a:03:db:bd:41:56:c8:a3:9e:
50:08:70:74:20:e9:1d:9f:2f:f0:3e:27:3e:a7:32:80:d6:a9:
17:aa:00:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC+M5e0SmgpbOymUyNtcu00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTIwMDk0NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODY5N2E3YWZhMjA1MTYxMWMzYzRlM2M0YWVhZDU0NzM2NDUwMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2u0iqaB9HDo6q2TaRi4A2zUklq
ZZxgxsj1t6nxFOXAh1heeoqzFItLp60LYw7BblUNFUz8DKS4SUFWiT+31uezkaHw
zeCODPHahYAHXShbTmxzyx+8ceoawrjBgdjWjHVlfumt0hQb2rHCXcn707be/Wkz
54qfWIqKByLcG1FFZ5ShYx4o2McdUmn6o9p4IgyQ8vuyITZ2DoagR3Edi2e9txuc
s4VqhkrpDWAJvaEIWrZ2yeL+D948ZEwOp+DLKZNAIAbRz3HZZoSZvECzhp7Mg7k9
2eByursLrYsEf2aWLPVfkpV7iLzR93b1sijPA8aJEJmts77y/jCqYEVdzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhpenr6IFFhHDxOPErq1Uc2RQD1MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvaUdsNmV2b2dVV0VjUEU0OFN1clZSelpGQVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT7d4MA0G
CSqGSIb3DQEBCwUAA4IBAQAEnO1GWpWFvwVE1Jcic4R3RrTg6fix/idOqaZGiBeT
hgYme3EnvqKQzZ0Kjf1EUokxIvk5YyrryH8CIrWwKZ0DPa3u/VlePfnBrW8cRAWS
bgpvfzzpdZSmq/R8MaImQEkgHQTk08C4i8h0EbMB7AL8IqchLKX9ENXTeUMBa0bi
2g40xFx0E2US2ofLEPy9AMuJseEdhVb9fqOdCg52i5B3yAtP7ycR3aOl2mTDa+to
M0nsmX6Ap1Uf1wWqKR9D1QRqh2rVLpjD5AuouLs4mPFbRjgEFvphYLQEvBeECwnn
QG1KA9u9QVbIo55QCHB0IOkdny/wPic+pzKA1qkXqgBS
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:06:45 2026 by rpki-client