Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa
File: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (raw, json)
Hash identifier: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=
Subject key identifier: DC:46:A3:EB:2C:86:CA:6A:19:22:C7:85:D0:8C:87:67:00:EC:0F:B4
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019C9D3D9E368F0E3C6AD8041F7AA0B0FECF
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa
Signing time: Fri 27 Feb 2026 03:56:26 +0000
ROA not before: Fri 27 Feb 2026 03:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4593
IP address blocks: 79.98.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9d:3d:9e:36:8f:0e:3c:6a:d8:04:1f:7a:a0:b0:fe:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 27 03:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc46a3eb2c86ca6a1922c785d08c876700ec0fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:37:d6:57:f0:ee:4d:d0:90:a1:30:1e:3d:
af:75:8b:cb:6f:dd:58:70:e0:9a:4a:5b:ac:55:48:
38:72:05:14:a6:75:c4:5d:5d:7e:64:5f:94:79:2b:
08:1e:3a:2e:7a:22:c2:6b:cd:c2:6a:b0:50:50:65:
5b:9c:c7:fe:60:85:23:b2:b8:36:65:9b:16:d4:8c:
04:32:b3:e4:fb:b9:9d:68:6b:76:79:7d:10:2d:79:
50:7f:c5:de:7a:23:98:ce:8d:21:a2:1e:a7:9c:6f:
c9:00:d3:ed:20:4f:95:7b:97:2d:c1:9e:93:83:0d:
3b:d5:74:fd:b7:6c:d8:a9:33:c1:ab:b2:b7:a7:99:
23:f2:ff:b4:4c:dd:1b:b7:b6:f4:5c:ce:db:66:a9:
be:94:f5:3d:e5:1c:a1:c1:d8:6e:84:e4:88:57:1a:
cb:6c:d6:09:59:b7:ed:0e:ab:1c:33:a4:68:77:ce:
b2:5f:d2:44:ff:2e:4d:14:d2:9f:2b:4b:7e:80:11:
00:10:9b:67:81:39:49:a1:68:8d:b4:5e:73:5d:ba:
c7:3c:2f:a2:62:fa:cf:d4:b3:a2:6a:1e:fa:52:da:
6f:51:5c:24:83:4f:59:09:8e:59:de:e9:3d:ea:89:
33:e6:45:44:4d:ed:94:9e:a3:5c:7c:3b:8d:c1:24:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:A3:EB:2C:86:CA:6A:19:22:C7:85:D0:8C:87:67:00:EC:0F:B4
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5c:54:97:06:cb:f8:20:d2:3e:2f:3e:93:0e:c1:e3:4d:06:
7d:ba:22:c2:4b:c1:59:28:d1:e5:1e:c5:55:b8:d3:cf:46:ac:
99:e1:59:ae:5a:cf:d5:1f:20:70:e9:d2:9f:9c:68:23:9d:30:
b5:94:c0:30:94:27:19:54:77:a1:1e:d2:28:a3:e3:c7:f5:95:
e0:06:75:44:43:a7:95:e3:b5:f4:53:1c:35:cc:18:db:03:56:
d6:ca:d7:c7:58:07:46:98:f9:61:5f:a5:9d:7d:44:25:22:e8:
a0:c4:98:45:55:fc:34:a4:78:1b:c5:45:1a:23:93:3b:b3:d9:
ae:fb:d4:40:9d:ff:c4:fe:c3:0d:aa:5e:f9:bc:b5:fb:23:1f:
1e:05:f9:29:9c:1e:0f:ad:12:3b:ff:80:8d:0b:28:5b:8f:9d:
d9:81:23:be:6a:a4:9c:16:cb:28:03:51:9e:f3:70:cc:4d:82:
bd:5a:9d:f8:f1:41:02:8b:1f:2d:3c:bd:c2:1e:d4:f6:0f:ef:
d7:1c:8a:89:9c:04:a7:87:25:ba:2f:2f:45:f4:20:16:c1:a3:
98:22:eb:1f:16:89:b2:dd:9a:c8:01:66:0c:07:a2:60:72:23:
b2:93:94:a3:1c:d8:1f:23:4f:04:45:c8:7a:db:54:49:91:f8:
67:b2:d6:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZydPZ42jw48atgEH3qgsP7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwMjI3MDM1NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzQ2YTNlYjJjODZjYTZhMTkyMmM3ODVkMDhjODc2NzAwZWMwZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NY31lfw7k3QkKEwHj2vdYvLb91Y
cOCaSlusVUg4cgUUpnXEXV1+ZF+UeSsIHjoueiLCa83CarBQUGVbnMf+YIUjsrg2
ZZsW1IwEMrPk+7mdaGt2eX0QLXlQf8XeeiOYzo0hoh6nnG/JANPtIE+Ve5ctwZ6T
gw071XT9t2zYqTPBq7K3p5kj8v+0TN0bt7b0XM7bZqm+lPU95RyhwdhuhOSIVxrL
bNYJWbftDqscM6Rod86yX9JE/y5NFNKfK0t+gBEAEJtngTlJoWiNtF5zXbrHPC+i
YvrP1LOiah76UtpvUVwkg09ZCY5Z3uk96okz5kVETe2UnqNcfDuNwSRmVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNxGo+sshspqGSLHhdCMh2cA7A+0MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvM0VhajZ5eUd5bW9aSXNlRjBJeUhad0RzRDdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2K0MA0G
CSqGSIb3DQEBCwUAA4IBAQAsXFSXBsv4INI+Lz6TDsHjTQZ9uiLCS8FZKNHlHsVV
uNPPRqyZ4VmuWs/VHyBw6dKfnGgjnTC1lMAwlCcZVHehHtIoo+PH9ZXgBnVEQ6eV
47X0Uxw1zBjbA1bWytfHWAdGmPlhX6WdfUQlIuigxJhFVfw0pHgbxUUaI5M7s9mu
+9RAnf/E/sMNql75vLX7Ix8eBfkpnB4PrRI7/4CNCyhbj53ZgSO+aqScFssoA1Ge
83DMTYK9Wp348UECix8tPL3CHtT2D+/XHIqJnASnhyW6Ly9F9CAWwaOYIusfFomy
3ZrIAWYMB6JgciOyk5SjHNgfI08ERch621RJkfhnstYi
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:45 2026 by rpki-client