Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/0no4Vc5DkKZYTC4yxk61gsFYDZA.roa
File: 0no4Vc5DkKZYTC4yxk61gsFYDZA.roa (raw, json)
Hash identifier: wq/WrUkZs3OtH/QkSRuveBH4UlpgsUWQZCql0jNW35Y=
Subject key identifier: D2:7A:38:55:CE:43:90:A6:58:4C:2E:32:C6:4E:B5:82:C1:58:0D:90
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A07E185A53A04D7BF1BDCAD32D8CA9DD8D
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/0no4Vc5DkKZYTC4yxk61gsFYDZA.roa
Signing time: Mon 07 Sep 2026 22:58:40 +0000
ROA not before: Mon 07 Sep 2026 22:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 79.98.32.0/24 maxlen: 24
79.98.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7e:18:5a:53:a0:4d:7b:f1:bd:ca:d3:2d:8c:a9:dd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 7 22:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d27a3855ce4390a6584c2e32c64eb582c1580d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:92:6d:bf:6e:a6:39:44:48:92:94:05:d3:
2d:79:00:4b:cb:6c:e2:58:15:1f:a7:d0:11:bc:40:
88:85:a4:d9:cb:05:ef:ea:95:03:29:1e:af:36:fc:
6e:c6:49:e7:8d:c4:6b:c7:e0:ea:35:42:0f:be:12:
6f:fc:e7:bc:9a:a4:3a:f5:37:08:5e:3b:b0:c2:6e:
5c:46:16:05:99:61:14:b4:30:96:52:6f:60:c9:8a:
89:a8:08:8d:4b:83:11:b8:70:0a:cb:42:ee:78:16:
46:1e:27:f4:c5:8c:d2:0e:ab:24:40:bc:cc:b4:eb:
6d:25:ac:a5:8f:6d:a4:6a:f1:f4:b2:f4:f3:27:d2:
be:43:24:7a:ca:6e:15:45:aa:fc:03:df:7f:e2:e5:
af:1f:15:d1:4b:7a:a7:6c:15:17:27:cc:c8:21:b6:
4b:9b:81:bb:56:69:8c:f2:36:ac:21:c6:e7:d8:ea:
5f:62:33:bc:96:ae:be:a4:e4:c6:65:93:b8:f8:2e:
06:de:63:fc:db:67:a2:d0:d4:9e:81:83:41:1e:27:
4f:c5:fd:87:7d:52:b2:8f:21:9f:2a:45:63:12:2a:
76:f8:fa:f7:4e:46:38:ff:78:ec:59:ad:a6:62:d1:
c2:67:44:64:74:e1:7a:44:90:10:e0:4b:44:18:99:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:38:55:CE:43:90:A6:58:4C:2E:32:C6:4E:B5:82:C1:58:0D:90
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/0no4Vc5DkKZYTC4yxk61gsFYDZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.32.0/24
79.98.34.0/24
Signature Algorithm: sha256WithRSAEncryption
42:65:b5:93:6e:68:48:96:18:f9:cb:41:a2:3f:21:42:5e:4e:
72:42:8d:03:ab:f3:96:b2:66:bc:cc:a5:2f:b5:ce:f6:6c:c7:
c6:c3:13:8b:aa:f7:68:56:35:0f:3a:1d:8c:eb:18:22:44:63:
60:3f:77:aa:41:39:15:6b:67:3d:cd:4c:d9:e4:d1:b4:f1:0b:
e2:ad:80:2b:17:94:a1:47:80:69:c2:15:36:e7:7e:b0:71:87:
5b:9e:35:97:07:4c:bc:db:d5:3f:38:5f:9a:91:02:8e:26:d8:
c1:5d:41:1b:8e:77:90:75:c1:06:67:10:1c:97:77:99:1a:0b:
fd:ee:4a:36:85:e0:5b:1d:7f:fc:89:ac:62:90:05:2f:fe:da:
58:ca:88:b1:ca:57:12:37:a6:7b:b5:79:73:d5:55:14:0a:47:
00:39:21:f9:08:69:66:0a:32:b2:86:31:42:dc:fb:02:8d:f7:
de:e5:28:89:0c:c3:9f:64:bc:54:c7:9d:70:d7:3c:7f:e7:67:
1c:84:ac:da:e7:5e:2b:95:67:79:e1:4d:35:26:de:fc:3b:48:
e6:c2:ff:da:ce:d8:ad:a3:9a:b9:aa:aa:5f:cd:58:dd:0c:1c:
53:99:ea:14:16:00:74:53:33:96:0f:35:90:e2:b2:ca:33:29:
86:27:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:05 2026 by rpki-client