Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/26SAJPkJqKdsaNcw0LRpHJxKuWs.roa
File: 26SAJPkJqKdsaNcw0LRpHJxKuWs.roa (raw, json)
Hash identifier: YEUwbJrptjZbj+nIDxeevtSypeFNHNFRrgkqMRLTtJI=
Subject key identifier: DB:A4:80:24:F9:09:A8:A7:6C:68:D7:30:D0:B4:69:1C:9C:4A:B9:6B
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A029F3A32CDBF17F00263ADDA84DB06120
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/26SAJPkJqKdsaNcw0LRpHJxKuWs.roa
Signing time: Sat 22 Aug 2026 14:50:27 +0000
ROA not before: Sat 22 Aug 2026 14:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 79.176.2.0/24 maxlen: 24
79.182.2.0/24 maxlen: 24
79.183.4.0/24 maxlen: 24
79.183.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:f3:a3:2c:db:f1:7f:00:26:3a:dd:a8:4d:b0:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 22 14:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dba48024f909a8a76c68d730d0b4691c9c4ab96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:52:77:fd:de:1a:7e:7c:a5:c2:25:5d:1c:
98:08:65:69:e1:d5:46:84:17:22:0c:0e:ad:f8:45:
b9:b7:b0:3f:70:d2:fe:57:9f:1f:7b:da:d1:1a:64:
ac:07:cf:cf:0d:35:58:00:b5:5b:96:04:c8:45:66:
1f:62:45:67:79:da:a3:a2:f2:97:cc:c2:39:8b:86:
63:f0:ae:41:8a:c1:5c:bc:07:c7:2d:b6:a6:9e:e3:
a4:ce:20:f8:10:48:77:70:e4:47:9c:79:e3:67:18:
40:3f:00:5b:00:dd:3a:c5:07:59:4b:5f:1e:39:da:
c0:08:5c:d1:bd:36:c0:0f:ae:2f:5e:c7:af:e1:7c:
d6:af:8b:40:23:5d:00:f7:4d:b8:af:6d:f0:f7:5c:
13:5f:5d:45:69:7e:33:38:db:7e:6d:e1:1e:61:ad:
8b:a8:24:c4:65:fb:5b:b7:00:29:47:b7:57:b0:29:
5f:bb:7c:23:bb:42:c8:ce:de:5c:d6:99:e5:ff:08:
7b:f3:12:6c:62:e1:c2:c5:46:49:f9:c8:5d:c3:a5:
88:7c:d2:e4:98:d9:df:4e:83:1f:f0:6b:a2:6f:52:
86:39:d5:9c:ca:e8:3b:0d:08:1e:8d:56:c9:4c:e9:
4e:38:de:1f:9d:1c:25:a0:ce:1b:e2:86:11:07:7d:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A4:80:24:F9:09:A8:A7:6C:68:D7:30:D0:B4:69:1C:9C:4A:B9:6B
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/26SAJPkJqKdsaNcw0LRpHJxKuWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.2.0/24
79.182.2.0/24
79.183.4.0/24
79.183.8.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6c:0a:d0:07:f4:2e:d5:34:c5:78:80:27:55:bf:75:29:ec:
21:49:af:12:ee:80:8a:f7:bd:f0:79:52:10:45:47:15:b6:89:
93:72:c4:f5:06:71:0d:4e:81:3a:94:70:b7:43:c6:05:23:b3:
f5:b4:9d:a8:89:35:cc:4a:3a:27:81:12:e8:e3:4a:89:79:5b:
76:49:d0:48:1b:73:ba:34:c1:93:89:80:80:cd:86:84:f8:3c:
eb:7e:7d:ae:47:da:a3:ef:51:bb:83:70:df:ba:e2:37:6a:6a:
3f:86:fb:02:2f:c4:a7:99:08:8f:81:c4:46:df:96:4d:de:8d:
b7:59:44:f6:3e:15:a0:be:4e:ac:44:4c:f6:1e:22:b1:0d:58:
7e:eb:a8:1f:85:56:de:49:30:ce:91:54:7d:a4:00:5f:a8:a3:
6e:46:b8:c7:56:f7:d3:94:76:1c:b9:ca:b5:7d:f1:b3:cc:58:
6a:56:aa:82:ad:fb:6a:eb:3a:71:ef:d9:ab:ea:54:ac:24:34:
1e:e2:85:85:20:72:d9:3e:9b:48:41:5f:eb:b4:ad:e5:0c:a4:
4b:75:2a:62:e6:f6:15:42:1a:0f:c4:82:dd:a1:c1:ab:d8:1b:
2c:99:fe:c9:73:c0:d5:bc:a5:d6:03:b0:4b:1e:cc:22:bf:14:
1e:ba:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:31:30 2026 by rpki-client