Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/3o17edMLEVsTxIFy6n0mV9RqRIQ.roa
File: 3o17edMLEVsTxIFy6n0mV9RqRIQ.roa (raw, json)
Hash identifier: iwvYkT8QV3OdbRGUbm5eRb2qviRhz8Tcy8AqMj3PZTk=
Subject key identifier: DE:8D:7B:79:D3:0B:11:5B:13:C4:81:72:EA:7D:26:57:D4:6A:44:84
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A05C363A18FF06D7FCBA8593C390241A23
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/3o17edMLEVsTxIFy6n0mV9RqRIQ.roa
Signing time: Tue 01 Sep 2026 09:04:12 +0000
ROA not before: Tue 01 Sep 2026 09:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205245
IP address blocks: 79.176.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:36:3a:18:ff:06:d7:fc:ba:85:93:c3:90:24:1a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 1 09:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de8d7b79d30b115b13c48172ea7d2657d46a4484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:c1:eb:fe:99:22:31:4d:9e:cf:27:ef:aa:
e6:f4:ee:15:01:3f:3e:56:98:50:5a:56:95:2c:e4:
78:41:55:6d:fa:3d:5c:93:40:e5:e8:db:a4:31:34:
31:df:ed:0d:82:69:aa:b3:bb:fd:95:14:24:f3:57:
3d:98:7b:49:0d:35:da:71:dd:f1:0b:aa:57:3d:6c:
0b:35:2d:b7:3e:8d:c6:6f:4b:06:a9:ed:52:4b:79:
91:0e:a5:e3:c9:0b:64:08:10:9f:6f:36:df:cf:30:
12:02:11:2d:e3:d0:aa:d2:47:9d:f3:8a:0d:e4:a5:
1d:8d:0c:63:cf:ce:f4:c9:14:af:39:79:5e:07:7c:
1e:72:0e:5b:19:bf:a7:2f:90:76:70:bf:7a:69:9c:
97:40:6f:44:bf:85:f3:e8:be:ea:13:e5:32:93:93:
c8:f3:bc:b9:b2:2b:af:0d:a1:83:70:30:b7:dc:bb:
2d:27:e7:c3:ac:c2:50:9e:1e:62:59:14:97:47:62:
dc:72:62:84:53:10:73:45:53:c0:87:17:c0:cf:6f:
2e:89:be:e6:aa:8b:11:3b:c1:cc:4b:f8:0d:2a:d5:
bb:bb:31:34:84:fb:81:58:01:82:65:1b:23:8d:11:
84:e8:47:d5:7e:fb:cb:6c:25:a4:5f:c0:f1:f5:d5:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:7B:79:D3:0B:11:5B:13:C4:81:72:EA:7D:26:57:D4:6A:44:84
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/3o17edMLEVsTxIFy6n0mV9RqRIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:21:4e:15:e7:d8:70:1c:2d:d4:b6:97:34:c9:9e:47:b9:b5:
b9:ff:dc:00:a6:8c:52:d7:42:50:84:92:b0:c6:f5:0a:ed:2b:
de:8b:9d:d0:b0:ac:64:28:1d:70:84:da:cc:db:34:83:8a:b6:
0b:e8:92:e2:6e:b4:a3:f5:62:cb:1e:70:98:2d:c3:f8:7a:5d:
de:6e:09:c9:5c:c0:70:b6:3a:c0:fc:97:04:a0:2b:7b:1e:17:
13:b7:97:3c:38:16:1e:a9:45:1f:cb:2b:91:2c:8d:90:a5:9c:
4f:2c:49:b4:6d:be:34:8e:55:4e:3b:0a:61:1d:52:ea:bd:82:
49:6e:0e:44:e0:25:af:31:67:99:80:e9:12:62:c1:07:f2:cd:
5b:30:68:d3:84:c7:4e:4a:84:45:c7:7e:7e:da:83:a7:0f:da:
e0:69:b0:22:a5:32:5a:c8:45:c4:17:ea:cc:46:11:cb:d3:e6:
f0:1d:f4:4b:93:d4:54:e3:14:ac:98:ca:f3:26:31:e4:b5:c0:
a5:cf:63:f8:b2:90:b6:dc:2f:f7:54:8b:64:11:04:18:2d:56:
82:74:b6:4b:89:f0:79:83:fa:e2:d8:ad:ae:88:10:43:f1:e4:
21:be:0c:8a:8d:39:a4:84:f1:00:e1:21:92:70:8c:b1:0a:36:
f0:12:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:31 2026 by rpki-client