Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/oqTDyi0eQoNl5CsoGIavr4e2fxs.roa
File: oqTDyi0eQoNl5CsoGIavr4e2fxs.roa (raw, json)
Hash identifier: 7Hc5gYDINmjrpQPftZTzSBnmCBGZlTVLDdrSUei9FVk=
Subject key identifier: A2:A4:C3:CA:2D:1E:42:83:65:E4:2B:28:18:86:AF:AF:87:B6:7F:1B
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B9B207A1B223DF282586F1E6BACD9121
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/oqTDyi0eQoNl5CsoGIavr4e2fxs.roa
Signing time: Sat 19 Sep 2026 12:44:07 +0000
ROA not before: Sat 19 Sep 2026 12:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 79.176.53.0/24 maxlen: 24
79.176.67.0/24 maxlen: 24
79.176.218.0/24 maxlen: 24
79.182.22.0/24 maxlen: 24
79.182.41.0/24 maxlen: 24
79.182.66.0/24 maxlen: 24
79.183.244.0/24 maxlen: 24
109.66.188.0/24 maxlen: 24
109.66.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:b2:07:a1:b2:23:df:28:25:86:f1:e6:ba:cd:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 19 12:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2a4c3ca2d1e428365e42b281886afaf87b67f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:76:7f:dd:cc:70:10:0d:6b:47:c6:70:85:
8e:0f:1d:77:e7:6f:45:a1:74:d6:01:01:08:10:cb:
c7:89:e1:d8:55:49:36:41:34:34:38:3b:95:ae:47:
bc:c0:5a:01:e5:04:18:81:46:f9:54:72:d6:ce:92:
75:32:50:57:87:9b:c9:b9:b4:49:76:f8:e8:d4:6f:
f3:9d:1a:60:d5:9e:09:ad:1f:36:62:84:28:e7:3d:
63:69:77:e6:f6:fd:0f:4f:d3:bb:d7:8b:18:e5:d5:
3e:8f:54:db:99:87:73:d2:71:f6:9c:64:2e:6b:90:
11:d3:79:7a:60:a6:00:92:87:e4:3a:d5:90:a8:70:
db:1a:b0:e0:9b:59:2c:4e:3c:73:6a:fc:55:11:1a:
ed:0a:16:89:42:e5:2e:84:a6:15:7f:1f:05:4e:2d:
5a:35:b9:f1:81:11:0a:5f:58:d3:e7:4a:5c:e3:49:
31:2f:27:3f:16:5b:05:d7:da:ba:e8:cb:5b:bf:64:
0a:01:f4:2f:bb:4b:6d:bc:6b:44:a3:f9:88:fb:89:
02:a1:98:17:bc:98:36:e0:35:1f:f3:82:b9:85:94:
53:4d:63:ac:55:d1:c4:59:9c:ed:bd:40:1e:fd:12:
7f:18:17:1f:7b:f5:bf:46:82:c8:78:b2:e9:0d:31:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:C3:CA:2D:1E:42:83:65:E4:2B:28:18:86:AF:AF:87:B6:7F:1B
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/oqTDyi0eQoNl5CsoGIavr4e2fxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.53.0/24
79.176.67.0/24
79.176.218.0/24
79.182.22.0/24
79.182.41.0/24
79.182.66.0/24
79.183.244.0/24
109.66.188.0/24
109.66.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a5:9b:bc:da:60:a6:02:39:1e:0a:3d:af:6d:c5:42:c4:fe:
b0:aa:dc:03:b3:c8:ea:7a:2a:bc:8f:97:af:a4:c3:35:fa:d1:
60:ee:65:5a:a3:f1:25:d9:79:c7:16:12:a0:7f:9e:f3:25:eb:
cc:fa:3c:92:10:2a:8f:c6:62:7c:06:51:13:6d:87:c3:f7:73:
71:ac:31:01:0d:77:c5:f9:a3:76:ed:0f:9c:97:2f:2b:3b:a8:
b3:cf:90:8d:b8:f7:eb:e1:c0:a2:8c:5f:28:7a:25:ed:83:30:
4f:1f:82:4f:f6:59:a8:54:fb:6e:9f:0a:a5:df:ff:d6:21:96:
06:fa:57:5a:c9:87:6f:24:be:19:5e:e8:9b:4e:79:71:06:4b:
ff:7a:b3:ad:3a:61:ae:6c:0b:61:2f:c5:2a:40:ee:a8:05:9b:
26:d8:cf:d2:41:df:1e:8f:83:3e:a2:9a:b9:9c:44:ae:e2:59:
8a:db:ec:e8:d6:8c:fe:91:10:a3:58:3d:d6:6b:a4:61:d2:28:
2b:5f:ad:a6:87:80:73:27:fa:da:fd:9c:5f:29:15:e6:16:8d:
c2:37:20:c9:6c:b4:ed:8e:c2:62:7c:4a:23:50:09:3b:66:fa:
e1:01:38:c6:b8:9d:86:1a:55:d9:c2:f5:83:f2:f9:1c:ea:87:
c3:44:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:16:48 2026 by rpki-client