Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mPCLAQ45_1tRQeKT51L2nTZgy-k.roa
File: mPCLAQ45_1tRQeKT51L2nTZgy-k.roa (raw, json)
Hash identifier: aQOMNt8zxPrWq3XybiJjQWJmHs7AY6TQ2+7wKSsDL0U=
Subject key identifier: 98:F0:8B:01:0E:39:FF:5B:51:41:E2:93:E7:52:F6:9D:36:60:CB:E9
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C50CD53141B742476FEF8C57B04AD90E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mPCLAQ45_1tRQeKT51L2nTZgy-k.roa
Signing time: Mon 21 Sep 2026 17:39:07 +0000
ROA not before: Mon 21 Sep 2026 17:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 79.182.68.0/24 maxlen: 24
79.182.237.0/24 maxlen: 24
79.183.32.0/24 maxlen: 24
79.183.34.0/24 maxlen: 24
79.183.36.0/24 maxlen: 24
79.183.38.0/24 maxlen: 24
79.183.45.0/24 maxlen: 24
79.183.47.0/24 maxlen: 24
79.183.49.0/24 maxlen: 24
79.183.51.0/24 maxlen: 24
79.183.53.0/24 maxlen: 24
79.183.55.0/24 maxlen: 24
79.183.57.0/24 maxlen: 24
79.183.84.0/24 maxlen: 24
79.183.86.0/24 maxlen: 24
79.183.95.0/24 maxlen: 24
79.183.97.0/24 maxlen: 24
79.183.99.0/24 maxlen: 24
79.183.104.0/24 maxlen: 24
79.183.117.0/24 maxlen: 24
79.183.119.0/24 maxlen: 24
79.183.121.0/24 maxlen: 24
79.183.124.0/24 maxlen: 24
79.183.127.0/24 maxlen: 24
109.66.36.0/24 maxlen: 24
109.66.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:0c:d5:31:41:b7:42:47:6f:ef:8c:57:b0:4a:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 21 17:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98f08b010e39ff5b5141e293e752f69d3660cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:ae:d5:71:a9:f6:91:21:62:0f:6d:ef:28:
42:77:71:68:0f:a3:4a:0e:c1:0a:20:75:54:af:43:
4c:b0:5b:38:09:c4:5b:6e:1f:8e:77:4c:6f:06:30:
1a:5f:55:20:58:09:cc:4e:1e:41:d4:6d:17:08:28:
21:ca:3e:3f:ab:ac:b1:5a:b4:6d:14:44:68:da:4c:
91:9a:aa:8b:3d:57:a5:3b:91:fd:63:a8:0c:86:65:
c0:f5:39:3e:e2:cd:cf:e5:f7:23:db:4a:51:42:d1:
bb:a5:a8:94:16:4e:73:8d:1d:56:9e:38:aa:a8:32:
4b:7f:88:eb:a6:dc:3e:a1:a6:42:17:68:92:d4:12:
4b:2b:50:80:47:4c:ed:4b:b9:8c:80:ee:41:37:2c:
4c:9c:6d:1a:76:de:8a:8b:53:6c:5a:66:c1:79:9e:
fb:b7:8a:e5:7f:a9:43:7b:a9:61:9b:8f:cf:26:c9:
f5:0d:19:df:66:f2:e0:14:bd:39:5e:92:03:64:07:
63:f5:83:9e:9c:06:7a:d8:1d:bd:e9:29:c0:a0:54:
bd:a5:d9:2d:24:46:6e:4d:77:5f:72:43:7c:0b:07:
fe:0f:ca:9f:f0:df:dc:79:6c:3c:6d:2e:38:7f:17:
9a:61:3b:9e:57:50:ab:4b:e1:2c:44:b6:9e:5f:f1:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:8B:01:0E:39:FF:5B:51:41:E2:93:E7:52:F6:9D:36:60:CB:E9
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mPCLAQ45_1tRQeKT51L2nTZgy-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.68.0/24
79.182.237.0/24
79.183.32.0/24
79.183.34.0/24
79.183.36.0/24
79.183.38.0/24
79.183.45.0/24
79.183.47.0/24
79.183.49.0/24
79.183.51.0/24
79.183.53.0/24
79.183.55.0/24
79.183.57.0/24
79.183.84.0/24
79.183.86.0/24
79.183.95.0/24
79.183.97.0/24
79.183.99.0/24
79.183.104.0/24
79.183.117.0/24
79.183.119.0/24
79.183.121.0/24
79.183.124.0/24
79.183.127.0/24
109.66.36.0/24
109.66.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cc:d8:ec:b2:56:99:38:4e:d8:b0:01:c6:7a:1e:3e:a4:b6:
ca:c9:22:29:bd:37:0c:fa:3c:fa:68:7c:86:5d:4c:01:fa:b6:
fc:68:43:31:79:38:ac:c6:10:13:ab:e0:82:8f:e0:73:a0:bd:
dd:2f:e1:3a:d8:1a:9e:f7:4b:d1:2a:46:85:d7:1c:0c:a9:4f:
08:6b:07:64:c5:9a:94:6b:95:7f:e8:84:5c:a6:e7:d6:2a:db:
b6:bc:56:61:df:e3:11:fa:de:d6:f3:e9:e4:9f:74:dd:c9:9b:
a1:2a:a4:42:52:a3:12:de:85:db:37:2c:90:b4:03:1b:04:3e:
84:b6:c8:d0:8f:a3:5b:20:53:3e:d4:76:b5:2c:03:c4:7c:0a:
e3:a0:2e:65:a8:d6:7e:ba:38:14:c5:2d:09:eb:26:37:1a:c2:
70:43:0b:59:70:b9:ef:5a:56:74:79:68:17:6d:e2:e4:57:88:
07:5a:f3:d8:c1:51:e1:5c:38:86:6a:b6:a5:9b:9d:ca:e5:21:
b7:9b:1e:77:dc:8f:6d:55:85:04:42:69:21:ef:c3:16:de:e2:
eb:6f:e1:34:1d:3f:06:51:66:cb:5f:90:14:ac:1d:2b:dd:72:
c0:4b:1a:ab:65:35:50:9b:9e:28:44:dc:c8:c9:c1:28:10:35:
89:d5:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:16 2026 by rpki-client