Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wj6DJs8VJqPpthlzKGab4nIpwMg.roa
File: wj6DJs8VJqPpthlzKGab4nIpwMg.roa (raw, json)
Hash identifier: /vX5a2luXnhFKpTpKmHdZrFtypZGs694ftrhSKk0bzs=
Subject key identifier: C2:3E:83:26:CF:15:26:A3:E9:B6:19:73:28:66:9B:E2:72:29:C0:C8
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0A4BE449D50ADCB4EF7B6145964D2421F
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wj6DJs8VJqPpthlzKGab4nIpwMg.roa
Signing time: Tue 15 Sep 2026 11:05:27 +0000
ROA not before: Tue 15 Sep 2026 11:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 79.182.40.0/24 maxlen: 24
79.183.87.0/24 maxlen: 24
79.183.123.0/24 maxlen: 24
79.183.132.0/24 maxlen: 24
109.65.15.0/24 maxlen: 24
109.65.29.0/24 maxlen: 24
109.65.62.0/24 maxlen: 24
109.65.79.0/24 maxlen: 24
109.65.113.0/24 maxlen: 24
109.65.127.0/24 maxlen: 24
109.65.167.0/24 maxlen: 24
109.65.176.0/24 maxlen: 24
109.65.182.0/24 maxlen: 24
109.65.189.0/24 maxlen: 24
109.65.191.0/24 maxlen: 24
109.66.57.0/24 maxlen: 24
109.66.59.0/24 maxlen: 24
109.66.104.0/24 maxlen: 24
109.66.128.0/24 maxlen: 24
109.66.196.0/24 maxlen: 24
109.66.229.0/24 maxlen: 24
109.66.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:be:44:9d:50:ad:cb:4e:f7:b6:14:59:64:d2:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 15 11:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c23e8326cf1526a3e9b6197328669be27229c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:36:da:1b:82:99:ef:66:77:5c:43:33:17:
8c:a1:d7:4f:31:49:c9:45:3f:2d:33:e7:e6:e3:93:
d6:66:66:20:1a:20:f4:b9:eb:73:8e:19:46:ab:30:
42:5f:7e:f7:8a:5c:8a:ae:1a:e1:5b:01:f3:f6:07:
3a:cc:a7:11:1b:f7:72:59:ac:97:29:b1:1d:7d:65:
d4:9a:fe:50:e6:b5:b4:0d:90:33:b1:08:f7:b6:21:
20:04:b4:3e:6b:35:db:53:7c:79:66:9a:0e:7a:2c:
97:08:56:36:de:90:25:a3:54:ee:e6:c4:79:76:3e:
1c:c3:6e:eb:b5:b8:34:9f:5b:1e:b7:a4:75:51:63:
60:a0:1a:e4:35:dd:71:38:8a:e2:73:e8:80:5c:cb:
0b:9e:75:bd:5e:ce:48:5d:2c:ae:00:3a:7a:ac:17:
28:b1:24:57:e8:a4:35:94:08:1f:3a:a4:89:15:a9:
9f:a0:fa:f8:47:be:7c:9a:07:58:68:7f:e5:13:79:
0b:64:0d:bb:75:3d:2e:c2:0f:02:b6:0e:8d:73:7c:
62:e1:bf:bd:a0:1b:e5:53:88:76:3f:a0:89:97:80:
43:bd:f3:2e:8c:97:34:ff:50:16:2c:17:de:69:ff:
07:a9:0f:af:0c:a1:9c:66:0c:27:00:f3:e6:3c:95:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:83:26:CF:15:26:A3:E9:B6:19:73:28:66:9B:E2:72:29:C0:C8
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wj6DJs8VJqPpthlzKGab4nIpwMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.40.0/24
79.183.87.0/24
79.183.123.0/24
79.183.132.0/24
109.65.15.0/24
109.65.29.0/24
109.65.62.0/24
109.65.79.0/24
109.65.113.0/24
109.65.127.0/24
109.65.167.0/24
109.65.176.0/24
109.65.182.0/24
109.65.189.0/24
109.65.191.0/24
109.66.57.0/24
109.66.59.0/24
109.66.104.0/24
109.66.128.0/24
109.66.196.0/24
109.66.229.0/24
109.66.237.0/24
Signature Algorithm: sha256WithRSAEncryption
97:94:bc:5d:60:0f:d1:4f:24:44:5a:f4:38:0e:a3:11:4d:00:
f6:44:d9:f7:3a:b3:8f:f6:08:e1:73:bd:d6:20:7e:a0:97:0b:
31:61:6e:86:b0:2f:ad:43:1b:e9:b3:79:47:ee:2a:1f:32:4b:
05:e4:75:fc:27:ce:8e:28:5d:ee:24:5d:65:c4:7b:59:63:9d:
26:cf:2a:74:6d:a1:39:e7:ee:8a:3d:3f:2a:2d:fe:91:cb:c6:
92:8e:72:8a:c9:1d:9b:b3:0f:12:9a:eb:de:6d:21:cc:5e:03:
cd:cb:a7:64:50:28:a2:c2:3a:91:06:24:af:29:36:70:5b:60:
2d:9a:75:ea:ea:19:71:1c:64:22:85:ec:8d:60:d4:ac:bb:e3:
0c:91:da:ce:b0:cd:75:73:bd:f1:2e:31:19:f1:a7:66:f3:c7:
41:44:02:a9:f1:32:70:9b:a0:61:25:ec:32:31:05:fa:86:7b:
26:c7:fc:6b:47:fa:47:56:59:d7:75:d5:2d:56:9d:9a:b9:70:
e4:6a:89:76:bf:ce:9a:47:de:9b:00:b6:4b:54:0b:54:a8:22:
8d:74:57:d6:38:59:6e:6c:5e:0c:0a:a4:c6:c6:a8:a9:1b:55:
fe:90:0c:11:1a:04:6d:69:e9:bd:04:68:77:c2:8d:18:8a:43:
1d:2c:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:51:50 2026 by rpki-client