Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n1Eghu5GctSC6b_zjh7b7sPFX6A.roa
File: n1Eghu5GctSC6b_zjh7b7sPFX6A.roa (raw, json)
Hash identifier: AJ1oO8SuzoenYwtpAdtlo6p444vSEbrNiEuvmb3Nc68=
Subject key identifier: 9F:51:20:86:EE:46:72:D4:82:E9:BF:F3:8E:1E:DB:EE:C3:C5:5F:A0
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B9A7F7062423EC33B2A9E2262E979CCF
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n1Eghu5GctSC6b_zjh7b7sPFX6A.roa
Signing time: Sat 19 Sep 2026 12:33:07 +0000
ROA not before: Sat 19 Sep 2026 12:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 79.182.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:a7:f7:06:24:23:ec:33:b2:a9:e2:26:2e:97:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 19 12:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f512086ee4672d482e9bff38e1edbeec3c55fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:37:f0:b2:09:8b:8c:ed:3f:be:3a:f9:89:
4f:80:d2:df:b9:c1:3d:a2:32:c2:2e:78:89:6c:13:
c9:c7:c9:ab:0c:77:47:70:6c:ab:80:f9:92:bb:07:
07:f9:9d:a1:62:74:cd:f2:89:37:b8:9b:5d:75:85:
99:64:ad:30:9e:13:a6:a3:e4:a0:32:cb:2b:12:b4:
1b:89:b1:47:ee:05:95:04:5a:a5:63:08:37:9a:81:
e2:ed:54:67:2b:ba:43:15:ce:04:d2:82:cd:b2:22:
8f:4c:42:00:c5:63:f1:8c:0b:c5:46:6e:77:3c:4c:
93:9d:89:77:1a:19:9a:fe:97:f0:a8:ca:37:f6:2b:
10:96:d1:25:90:8f:7b:72:eb:7a:e9:d8:70:26:ce:
f8:76:8e:79:85:44:43:d6:b1:be:89:dc:17:28:c5:
a9:ed:69:6b:41:06:98:c9:72:fa:2d:c3:c5:04:6e:
f2:a1:c6:87:c7:60:a1:bb:95:bd:73:98:30:f3:b9:
12:76:7e:21:c3:bb:7f:eb:28:fe:78:84:59:14:21:
e4:d8:16:e0:ab:9c:a4:eb:87:72:fd:ea:f7:53:db:
0f:d5:4f:c2:66:39:e6:77:34:7a:a7:2e:ce:00:b7:
6e:8f:81:b7:9e:9a:d6:06:ca:f0:91:cf:03:3e:e0:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:51:20:86:EE:46:72:D4:82:E9:BF:F3:8E:1E:DB:EE:C3:C5:5F:A0
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n1Eghu5GctSC6b_zjh7b7sPFX6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.2.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c8:be:37:0c:70:96:e4:66:74:73:56:5a:d2:d9:3f:42:32:
55:c2:af:0d:f6:3e:cf:4e:ca:f7:f2:8f:ed:06:a6:ed:2c:0f:
bb:6c:33:81:2e:3e:35:07:ef:c0:ac:d9:ee:72:31:76:82:06:
0d:dd:52:2d:46:31:d9:1d:41:68:b0:02:ef:f7:3e:4c:0a:0b:
f7:be:49:3c:cb:0d:75:77:3a:a0:b3:c8:55:1d:48:9c:0e:9c:
f7:53:b8:d9:9c:b0:4e:54:a9:67:8c:52:cb:07:29:f1:cc:05:
f5:a3:24:3b:79:10:74:2a:a4:18:1f:40:34:a5:9c:30:fc:20:
95:e1:a8:0b:97:58:87:68:19:94:f9:3a:91:df:3a:1a:87:f7:
c1:ca:3b:70:65:c3:21:26:ae:f1:f9:c7:8e:bc:fd:f0:45:1a:
d5:49:b1:d0:16:0f:8c:4f:c3:29:1f:91:5e:dd:94:38:e1:44:
76:3a:0f:c0:9e:5b:eb:f9:82:30:ab:3e:ef:ff:1a:8a:2b:2b:
93:a7:42:02:c2:c3:45:f3:02:67:ff:ce:8b:8b:1c:e8:f0:05:
cd:64:ff:a7:d0:ca:bf:ab:28:0a:7c:f8:93:56:2c:fd:2e:4e:
fa:71:84:f8:75:42:95:40:98:2b:7c:cd:20:d5:1e:5c:f6:41:
4d:b4:4d:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC5p/cGJCPsM7Kp4iYul5zPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTE5MTIzMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjUxMjA4NmVlNDY3MmQ0ODJlOWJmZjM4ZTFlZGJlZWMzYzU1ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cI38LIJi4ztP746+YlPgNLfucE9
ojLCLniJbBPJx8mrDHdHcGyrgPmSuwcH+Z2hYnTN8ok3uJtddYWZZK0wnhOmo+Sg
MssrErQbibFH7gWVBFqlYwg3moHi7VRnK7pDFc4E0oLNsiKPTEIAxWPxjAvFRm53
PEyTnYl3Ghma/pfwqMo39isQltElkI97cut66dhwJs74do55hURD1rG+idwXKMWp
7WlrQQaYyXL6LcPFBG7yocaHx2Chu5W9c5gw87kSdn4hw7t/6yj+eIRZFCHk2Bbg
q5yk64dy/er3U9sP1U/CZjnmdzR6py7OALduj4G3nprWBsrwkc8DPuAm9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9RIIbuRnLUgum/844e2+7DxV+gMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvbjFFZ2h1NUdjdFNDNmJfempoN2I3c1BGWDZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT7YCMA0G
CSqGSIb3DQEBCwUAA4IBAQCDyL43DHCW5GZ0c1Za0tk/QjJVwq8N9j7PTsr38o/t
BqbtLA+7bDOBLj41B+/ArNnucjF2ggYN3VItRjHZHUFosALv9z5MCgv3vkk8yw11
dzqgs8hVHUicDpz3U7jZnLBOVKlnjFLLBynxzAX1oyQ7eRB0KqQYH0A0pZww/CCV
4agLl1iHaBmU+TqR3zoah/fByjtwZcMhJq7x+ceOvP3wRRrVSbHQFg+MT8MpH5Fe
3ZQ44UR2Og/Anlvr+YIwqz7v/xqKKyuTp0ICwsNF8wJn/86Lixzo8AXNZP+n0Mq/
qygKfPiTViz9Lk76cYT4dUKVQJgrfM0g1R5c9kFNtE26
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:47 2026 by rpki-client