Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/1-38yfpnm5QQccaJ3BYrPwcGEn-Y.roa
File: 1-38yfpnm5QQccaJ3BYrPwcGEn-Y.roa (raw, json)
Hash identifier: aaV0qNhXF0a2/gX3F54s9c7XzLno7e4lLil7lqYHNaY=
Subject key identifier: FB:7F:32:7E:99:E6:E5:04:1C:71:A2:77:05:8A:CF:C1:C1:84:9F:E6
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A0778946EB4A4E82322E879B3ED6FD2088
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/1-38yfpnm5QQccaJ3BYrPwcGEn-Y.roa
Signing time: Sun 06 Sep 2026 16:24:40 +0000
ROA not before: Sun 06 Sep 2026 16:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 79.98.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:89:46:eb:4a:4e:82:32:2e:87:9b:3e:d6:fd:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 6 16:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb7f327e99e6e5041c71a277058acfc1c1849fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:9c:da:93:e2:da:2c:e6:a5:1a:de:04:61:
bf:34:95:d4:b5:fd:13:b3:b3:12:07:f1:76:2e:de:
e8:e5:b5:31:2f:69:60:f7:98:81:f0:ff:92:5d:3a:
74:db:0f:ce:c7:c9:6d:e4:49:ba:9c:65:f1:9b:df:
b5:33:26:06:34:d6:ce:3c:34:74:c1:ff:92:4c:d6:
c7:90:9c:58:7a:13:81:3f:d5:e7:17:ed:fb:92:7a:
4f:ac:71:4a:4a:b0:80:23:2f:16:3b:00:ce:a0:5b:
b7:b0:19:ef:aa:e6:95:02:1a:7e:88:f5:a7:08:50:
69:24:8c:ae:88:a3:4c:5d:23:e8:fc:a7:0f:de:bc:
78:f4:d9:1a:d9:c5:0a:25:05:9a:a1:55:a4:75:48:
43:2f:57:c0:bb:c2:67:5a:12:9c:df:49:43:64:51:
51:ef:ff:75:fe:ed:65:64:96:d3:f4:c7:01:dd:d4:
11:28:fa:59:30:e8:05:e6:74:30:0d:1e:0e:9a:d3:
a0:04:da:6f:16:3f:b0:1b:f0:73:94:18:a1:ec:3a:
70:71:7f:67:55:e1:bc:09:30:5f:79:67:09:e8:ed:
5b:55:6c:d1:27:c5:a2:bc:83:d3:c9:61:98:2c:e2:
4e:5c:b2:16:ff:81:88:6a:ae:cd:c6:bb:bc:d6:c1:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:32:7E:99:E6:E5:04:1C:71:A2:77:05:8A:CF:C1:C1:84:9F:E6
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/1-38yfpnm5QQccaJ3BYrPwcGEn-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ae:41:c9:8c:53:ab:c3:b6:5a:ad:3a:92:e5:d5:9b:97:b3:
b3:75:27:52:16:55:f2:82:37:dc:1e:5c:a0:bf:2f:0c:1a:12:
d5:e7:2f:27:55:83:3b:3a:95:9e:1d:72:8f:84:5d:29:1a:e8:
ac:19:77:ab:7d:29:db:13:ea:04:2a:8f:50:65:da:91:fc:87:
1f:78:dc:37:93:b4:e1:05:82:f9:cb:2b:e6:b6:46:dd:1a:e5:
df:55:cf:48:87:97:8c:5b:38:56:41:e6:c4:e0:52:e0:b5:41:
71:13:2b:ee:63:94:23:d6:24:c2:a2:79:be:b7:15:9d:bc:81:
1d:7e:da:f6:90:c4:04:49:8b:34:d1:b2:9d:3e:12:18:76:b6:
ae:49:60:dc:3e:35:9b:c8:ad:bd:56:47:25:79:ee:e5:f0:a9:
3a:75:86:5f:1f:94:af:6d:68:10:82:ef:8f:57:42:1d:f3:9b:
9b:d2:68:4f:da:c1:16:c0:5d:20:12:ac:30:07:bc:33:82:97:
ab:0c:77:08:c3:5d:f9:c6:96:41:7b:33:fb:5e:1b:8d:c9:1e:
65:d1:bd:39:95:d5:12:32:aa:df:5b:d5:ed:55:09:d4:8b:07:
1d:90:7e:5c:bd:34:7c:11:9c:72:21:86:20:c1:e2:cf:12:ea:
b5:87:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:23:38 2026 by rpki-client