Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/yHfpA5v5XvIUSQkOxCDHupjOIlQ.roa
File: yHfpA5v5XvIUSQkOxCDHupjOIlQ.roa (raw, json)
Hash identifier: H4Qtsg+GBGW5oyl9RggzStvYTM8q9EciUOsORu9E3dA=
Subject key identifier: C8:77:E9:03:9B:F9:5E:F2:14:49:09:0E:C4:20:C7:BA:98:CE:22:54
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A075B0DD3D4F7A2F289A098EFE1DB40313
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/yHfpA5v5XvIUSQkOxCDHupjOIlQ.roa
Signing time: Sun 06 Sep 2026 07:48:40 +0000
ROA not before: Sun 06 Sep 2026 07:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197137
IP address blocks: 79.98.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:b0:dd:3d:4f:7a:2f:28:9a:09:8e:fe:1d:b4:03:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 6 07:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c877e9039bf95ef21449090ec420c7ba98ce2254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:2c:6f:25:1f:52:a0:b5:11:71:77:49:4e:
d9:a8:83:f2:3f:d9:9f:62:5c:4f:a4:31:64:a0:f6:
2e:22:4f:6d:54:11:0d:de:88:42:f0:c5:73:be:9d:
51:4a:81:6c:09:5f:91:09:23:72:10:ae:8a:ec:95:
15:52:e8:1e:d1:7f:44:cd:00:a1:f5:b5:8d:34:03:
73:23:f5:c7:c3:09:43:53:72:6e:b2:cf:85:ec:d9:
f5:a4:78:9c:5e:71:43:88:5d:e8:d8:a4:7c:04:a5:
f9:19:5d:a6:25:0a:9b:bd:54:7f:c7:1d:49:aa:e0:
eb:d8:2d:65:76:71:63:ff:3e:83:14:98:72:5a:54:
e7:45:32:a7:6b:1a:91:6c:62:82:b0:cb:bc:5c:3f:
fb:ad:be:23:37:52:5b:2a:5c:08:38:a0:7b:45:61:
3e:a8:6d:90:17:fd:a8:24:35:d3:f9:91:f3:c0:a6:
0a:4b:07:2a:13:74:24:d1:5e:af:ed:3a:c3:df:58:
67:dc:98:da:50:0a:e5:b8:69:ae:88:3c:b6:be:ed:
c1:28:9b:49:51:5f:03:ac:f1:ed:10:9c:30:07:6a:
ce:6a:cc:d8:cd:f6:bc:63:50:90:f2:99:fc:72:27:
c1:7d:27:4c:56:11:65:e2:c5:56:9a:cd:df:f3:50:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:E9:03:9B:F9:5E:F2:14:49:09:0E:C4:20:C7:BA:98:CE:22:54
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/yHfpA5v5XvIUSQkOxCDHupjOIlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:30:a3:90:d4:3b:0c:a2:c4:f0:8d:0f:d2:99:ef:f1:7e:4a:
ae:72:eb:a5:93:04:d7:c4:81:be:62:39:d8:27:6b:42:e3:8d:
3d:8a:45:4f:43:d9:18:f3:94:ef:e1:29:e2:b0:fc:e8:fc:f5:
19:ce:32:a6:fe:16:57:7d:a4:04:99:82:18:d2:d9:01:44:50:
15:5e:3e:c1:16:8b:98:69:07:3c:71:12:fe:30:03:44:fd:7d:
fd:ea:37:04:23:6d:1a:14:0f:a8:f0:4d:64:21:d8:f5:8a:cc:
c2:e6:93:54:d5:dd:7d:d0:e3:af:19:c3:0a:08:f4:e5:79:b0:
f7:a3:04:00:53:aa:ad:bd:5c:af:91:b7:88:21:ed:20:f7:1d:
4b:ad:df:3b:ef:3f:b6:e9:a4:ca:2c:7c:93:4a:d4:82:dc:2d:
08:11:59:89:ec:df:ba:0a:9c:50:e6:5e:b8:f5:28:2f:c5:a6:
7d:c0:ba:30:07:e9:80:e6:5a:1c:51:35:f3:0a:d4:5c:fd:02:
a3:d7:95:22:82:d0:38:81:b1:6b:82:56:7b:31:2b:ed:37:53:
4e:ab:d3:e2:a8:70:80:31:5c:75:b9:b0:13:59:de:49:c7:e5:
00:ee:38:0c:a9:a7:3c:18:38:37:80:82:6b:75:73:1e:51:55:
e3:46:6d:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB1sN09T3ovKJoJjv4dtAMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2
ZDYzNDkwHhcNMjYwOTA2MDc0ODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODc3ZTkwMzliZjk1ZWYyMTQ0OTA5MGVjNDIwYzdiYTk4Y2UyMjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGgsbyUfUqC1EXF3SU7ZqIPyP9mf
YlxPpDFkoPYuIk9tVBEN3ohC8MVzvp1RSoFsCV+RCSNyEK6K7JUVUuge0X9EzQCh
9bWNNANzI/XHwwlDU3Juss+F7Nn1pHicXnFDiF3o2KR8BKX5GV2mJQqbvVR/xx1J
quDr2C1ldnFj/z6DFJhyWlTnRTKnaxqRbGKCsMu8XD/7rb4jN1JbKlwIOKB7RWE+
qG2QF/2oJDXT+ZHzwKYKSwcqE3Qk0V6v7TrD31hn3JjaUArluGmuiDy2vu3BKJtJ
UV8DrPHtEJwwB2rOaszYzfa8Y1CQ8pn8cifBfSdMVhFl4sVWms3f81B23QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMh36QOb+V7yFEkJDsQgx7qYziJUMB8GA1UdIwQY
MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct
MTY2ZmI5ZGI2ZGIzLzEveUhmcEE1djVYdklVU1FrT3hDREh1cGpPSWxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz
LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2ImMA0G
CSqGSIb3DQEBCwUAA4IBAQCcMKOQ1DsMosTwjQ/Sme/xfkqucuulkwTXxIG+YjnY
J2tC4409ikVPQ9kY85Tv4SnisPzo/PUZzjKm/hZXfaQEmYIY0tkBRFAVXj7BFouY
aQc8cRL+MANE/X396jcEI20aFA+o8E1kIdj1iszC5pNU1d190OOvGcMKCPTlebD3
owQAU6qtvVyvkbeIIe0g9x1Lrd877z+26aTKLHyTStSC3C0IEVmJ7N+6CpxQ5l64
9SgvxaZ9wLowB+mA5locUTXzCtRc/QKj15UigtA4gbFrglZ7MSvtN1NOq9PiqHCA
MVx1ubATWd5Jx+UA7jgMqac8GDg3gIJrdXMeUVXjRm0S
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:05 2026 by rpki-client