Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wSS4BJ2U76e4Dyurfaq4avuSQoc.roa
File: wSS4BJ2U76e4Dyurfaq4avuSQoc.roa (raw, json)
Hash identifier: znF5EZMOm9zY/HcSGKCnQAjVgNjtIbUIosdWWRONibw=
Subject key identifier: C1:24:B8:04:9D:94:EF:A7:B8:0F:2B:AB:7D:AA:B8:6A:FB:92:42:87
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0BAB26025E113FCBE742E9AD724042E61
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wSS4BJ2U76e4Dyurfaq4avuSQoc.roa
Signing time: Sat 19 Sep 2026 17:24:07 +0000
ROA not before: Sat 19 Sep 2026 17:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 79.98.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:b2:60:25:e1:13:fc:be:74:2e:9a:d7:24:04:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 19 17:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c124b8049d94efa7b80f2bab7daab86afb924287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:79:32:3d:2f:0e:77:75:28:18:59:aa:cd:
eb:7f:28:43:da:a4:fd:52:bc:89:19:d5:7d:98:a9:
ad:0a:79:ef:cd:72:d8:28:82:95:37:26:08:29:a0:
c8:08:45:0b:63:7e:23:f2:eb:ac:fd:1b:3c:ca:09:
55:4b:fa:a0:36:4e:8c:af:07:ca:e4:b2:9b:24:ff:
a4:5c:81:59:91:a2:6e:39:c5:61:0c:df:ee:82:be:
a8:79:02:ea:00:94:4d:b3:97:3a:5e:86:69:8a:b6:
08:d0:9d:a1:0c:e4:81:a4:e3:6a:50:3d:fd:cb:dd:
26:91:00:7a:1b:df:00:06:f6:e9:3a:a1:72:ed:87:
2c:14:e9:04:c9:2a:92:a3:da:6d:2a:02:99:bf:f2:
20:3a:5a:9c:68:f4:3f:7f:7c:f9:5a:c8:3c:c3:08:
5c:be:53:22:af:2d:07:42:da:43:f2:a3:99:4e:df:
8f:57:95:65:8b:6b:32:f5:35:69:84:ff:d5:44:06:
00:06:35:6e:45:28:da:c2:83:e2:c9:cf:b2:50:82:
36:90:9b:03:a9:50:58:1d:c0:b4:38:04:11:25:67:
fe:f0:e1:46:9e:fc:36:80:8e:96:66:29:7d:04:bb:
2a:34:1f:6a:69:b1:54:ce:db:f7:21:1b:dc:bb:56:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:B8:04:9D:94:EF:A7:B8:0F:2B:AB:7D:AA:B8:6A:FB:92:42:87
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wSS4BJ2U76e4Dyurfaq4avuSQoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.245.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8d:ab:a9:e7:01:75:06:e1:95:8d:3a:9f:77:81:ca:49:31:
4c:5c:07:f7:ba:f4:0e:55:ec:8d:5a:12:d0:69:63:02:33:86:
a7:92:6a:e4:4e:43:ca:13:64:fa:af:b4:37:a6:64:e8:eb:57:
03:41:9c:db:da:f1:af:71:96:44:f2:dd:b5:df:00:a9:5f:4b:
bf:e8:99:21:eb:f2:35:ff:85:76:e9:f9:86:49:01:7c:45:00:
66:32:a6:0d:95:e3:5f:89:d5:4d:be:6e:8a:38:42:ec:e9:53:
0c:f4:d8:fb:9f:f6:1b:23:40:61:b7:40:66:97:f6:68:30:6b:
ef:61:8c:7d:3d:ec:55:a7:5f:e0:c0:66:5d:04:e5:29:f2:db:
c2:6d:e7:c8:50:15:2b:31:fc:25:5d:1b:c5:59:31:12:0c:f0:
7a:3c:2e:b9:cb:90:c2:a9:03:cd:65:93:4c:47:ac:eb:0e:11:
0a:17:f4:c4:2a:f5:ea:0b:fa:60:24:f6:f5:bc:0d:97:45:53:
1b:b1:2f:80:fe:ea:6b:1c:2a:7c:70:01:6b:7e:7e:5b:50:7f:
34:c7:80:37:e4:1b:d1:ba:eb:e9:a0:14:16:d3:d0:70:df:bc:
f6:fe:42:6e:3e:0e:c3:62:7c:f9:b9:9c:61:24:b3:91:3c:8c:
79:65:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:59 2026 by rpki-client