Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xyXdh3ZVsHzfTFqjpNxz78kIXGc.roa
File: xyXdh3ZVsHzfTFqjpNxz78kIXGc.roa (raw, json)
Hash identifier: es6DyL0m9A5JyFhP4ejOn3aHKOgJxGhopVcRmB7GM0o=
Subject key identifier: C7:25:DD:87:76:55:B0:7C:DF:4C:5A:A3:A4:DC:73:EF:C9:08:5C:67
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B1D4CAB19843FDFC958B84DC094FFC52
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xyXdh3ZVsHzfTFqjpNxz78kIXGc.roa
Signing time: Fri 18 Sep 2026 00:05:07 +0000
ROA not before: Fri 18 Sep 2026 00:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 79.176.24.0/24 maxlen: 24
79.176.25.0/24 maxlen: 24
79.176.46.0/24 maxlen: 24
79.176.48.0/24 maxlen: 24
79.176.69.0/24 maxlen: 24
79.176.92.0/24 maxlen: 24
79.176.105.0/24 maxlen: 24
79.176.144.0/24 maxlen: 24
79.176.182.0/24 maxlen: 24
79.176.204.0/24 maxlen: 24
79.176.209.0/24 maxlen: 24
79.176.233.0/24 maxlen: 24
79.182.28.0/24 maxlen: 24
79.182.40.0/24 maxlen: 24
79.182.55.0/24 maxlen: 24
79.182.89.0/24 maxlen: 24
79.182.112.0/24 maxlen: 24
79.182.152.0/24 maxlen: 24
79.182.153.0/24 maxlen: 24
79.182.164.0/24 maxlen: 24
79.182.176.0/24 maxlen: 24
79.182.186.0/24 maxlen: 24
79.182.212.0/24 maxlen: 24
79.182.223.0/24 maxlen: 24
109.65.37.0/24 maxlen: 24
109.65.53.0/24 maxlen: 24
109.65.88.0/24 maxlen: 24
109.65.101.0/24 maxlen: 24
109.65.140.0/24 maxlen: 24
109.65.151.0/24 maxlen: 24
109.65.188.0/24 maxlen: 24
109.65.190.0/24 maxlen: 24
109.65.199.0/24 maxlen: 24
109.65.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:d4:ca:b1:98:43:fd:fc:95:8b:84:dc:09:4f:fc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 18 00:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c725dd877655b07cdf4c5aa3a4dc73efc9085c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:1f:6e:bf:41:d9:f3:89:6f:ec:30:c4:a5:
ad:84:26:64:4c:4d:f6:0e:81:56:e0:72:f4:20:b9:
d2:3f:27:da:9d:4c:4c:ff:89:38:83:06:d8:45:58:
b4:8f:f0:84:c7:ef:62:4e:a4:37:57:9d:8a:76:4f:
86:a3:e8:59:3c:c1:05:83:dc:b8:28:63:dd:b5:43:
72:59:1c:7b:ac:f9:49:f3:33:63:f8:1e:31:60:06:
d3:8b:a9:a4:af:94:83:9b:8b:7c:d8:8d:2f:50:59:
eb:d9:2a:ac:6c:03:68:46:2b:d0:ca:7e:0e:de:67:
e1:fd:92:e0:4d:e4:e7:ab:68:b7:47:7a:13:c1:4a:
df:e7:ff:cf:28:a8:15:94:f7:f0:8c:b2:f9:2f:35:
fd:a0:0e:1d:17:8a:b6:d9:a9:ff:be:49:81:b9:58:
04:47:ad:2f:71:40:31:2a:cd:2b:d3:e4:0b:b0:bb:
b8:9c:84:a3:28:06:42:0b:34:fd:f1:38:4e:8a:bd:
be:77:db:45:8b:fb:05:22:d4:f3:30:e9:48:70:bf:
da:86:e6:13:33:ab:5f:f5:8b:8b:26:b2:58:68:d5:
ad:f0:65:ca:cd:14:b3:9e:c6:6d:e6:0d:a4:d5:ab:
f6:58:1d:86:76:04:36:8a:e2:cf:1b:7b:fc:c7:be:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:DD:87:76:55:B0:7C:DF:4C:5A:A3:A4:DC:73:EF:C9:08:5C:67
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xyXdh3ZVsHzfTFqjpNxz78kIXGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.24.0/23
79.176.46.0/24
79.176.48.0/24
79.176.69.0/24
79.176.92.0/24
79.176.105.0/24
79.176.144.0/24
79.176.182.0/24
79.176.204.0/24
79.176.209.0/24
79.176.233.0/24
79.182.28.0/24
79.182.40.0/24
79.182.55.0/24
79.182.89.0/24
79.182.112.0/24
79.182.152.0/23
79.182.164.0/24
79.182.176.0/24
79.182.186.0/24
79.182.212.0/24
79.182.223.0/24
109.65.37.0/24
109.65.53.0/24
109.65.88.0/24
109.65.101.0/24
109.65.140.0/24
109.65.151.0/24
109.65.188.0/24
109.65.190.0/24
109.65.199.0/24
109.65.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a8:1f:cf:aa:6c:d4:82:78:ae:51:2f:59:ca:ae:1c:48:a6:
cd:59:45:09:b0:09:00:2d:6e:29:d1:e5:03:8e:6b:5f:48:80:
d0:86:f3:71:51:10:29:1c:80:3f:63:e4:a1:cd:3b:11:5b:21:
03:31:7c:ad:a5:6d:14:7e:78:a2:d7:c8:a4:14:a5:67:cc:a4:
1b:af:f3:65:03:9e:79:8f:d6:2c:6a:88:43:09:b4:36:d5:ec:
dd:e4:d2:1c:4b:17:7b:af:a8:b8:47:c7:75:88:64:c0:d2:3b:
c4:b7:b3:68:16:43:82:c3:40:8a:1d:a7:9c:1a:4e:b6:ba:01:
f1:a2:78:a6:7a:b1:6a:5f:d5:9f:01:bd:dc:f7:b7:f0:39:fa:
00:de:0e:b8:c2:dd:36:b4:24:e0:36:9b:d7:6f:73:0b:db:35:
09:89:46:60:59:65:4e:4a:7f:be:fa:12:c6:2b:c1:3d:56:98:
ab:bb:3b:40:9f:ac:b3:d1:1c:67:84:a1:42:c9:c7:e9:09:f4:
ea:ac:00:0d:10:59:8e:9f:7e:c3:74:82:f7:1f:40:7c:ac:6d:
3f:6f:4f:31:73:ec:ac:57:91:5b:c9:99:70:c0:2b:38:26:9b:
40:8d:fd:bf:b8:79:f9:8b:b5:38:dc:75:d9:50:44:d5:40:c9:
72:3a:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:56:19 2026 by rpki-client