Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5H-YhWuLy9ihT82puTMZy6nrudk.roa
File: 5H-YhWuLy9ihT82puTMZy6nrudk.roa (raw, json)
Hash identifier: mMm69u6hDnKsGY2hgICorauFWriYl5lU7895gWHJrMs=
Subject key identifier: E4:7F:98:85:6B:8B:CB:D8:A1:4F:CD:A9:B9:33:19:CB:A9:EB:B9:D9
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A071101A48DA581449645CD10E51268333
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5H-YhWuLy9ihT82puTMZy6nrudk.roa
Signing time: Sat 05 Sep 2026 10:14:35 +0000
ROA not before: Sat 05 Sep 2026 10:14:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 79.176.142.0/24 maxlen: 24
79.182.46.0/24 maxlen: 24
79.182.47.0/24 maxlen: 24
109.65.3.0/24 maxlen: 24
109.65.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:10:1a:48:da:58:14:49:64:5c:d1:0e:51:26:83:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 5 10:14:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e47f98856b8bcbd8a14fcda9b93319cba9ebb9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:ed:77:c7:e0:7a:b1:45:29:f3:a3:26:8c:
f0:dc:fe:63:d6:c9:29:0d:35:c3:80:71:a9:21:5c:
a9:05:86:6e:c4:ca:76:e1:a2:d5:f2:ec:b6:8b:0e:
a7:08:b1:ab:99:18:0e:45:16:78:f5:70:6d:32:61:
cc:a0:da:e4:01:d0:7f:f6:c6:bc:af:87:a5:4d:71:
b6:ad:ce:4a:6d:e9:5f:6d:c9:40:df:2b:ab:c9:2e:
47:d8:54:2f:be:d8:51:86:2b:24:7b:be:bb:d4:8b:
d0:d4:0a:4c:5a:77:d2:97:f5:3f:e8:c3:f3:df:0e:
fa:6b:f6:48:fd:aa:67:20:ed:ef:1d:9e:5e:4b:fc:
de:d6:fc:5d:d4:b7:30:1b:90:9e:21:89:21:97:11:
a0:95:2f:af:df:84:65:4d:4d:28:0b:f5:f6:19:d1:
16:48:c9:65:ac:94:f8:01:4c:03:bc:71:e9:89:ab:
f5:97:88:29:c4:0f:47:e2:11:77:8e:c9:15:5a:ee:
a2:8c:8e:3e:76:d9:c5:09:92:cf:94:f4:cd:97:27:
a2:bb:3d:2b:ee:b3:f8:ce:48:c7:14:ca:af:62:30:
b3:8f:d5:c2:25:4a:ec:95:a0:e2:af:0f:d6:09:a6:
0e:c3:94:e5:45:27:ca:83:0d:88:dd:63:f5:2c:d4:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:98:85:6B:8B:CB:D8:A1:4F:CD:A9:B9:33:19:CB:A9:EB:B9:D9
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5H-YhWuLy9ihT82puTMZy6nrudk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.142.0/24
79.182.46.0/23
109.65.3.0-109.65.4.255
Signature Algorithm: sha256WithRSAEncryption
06:0f:23:49:d4:f1:58:39:eb:3b:8c:87:bb:0f:60:63:0c:bd:
21:6d:40:9f:c0:3a:ba:3b:0e:8b:c3:e8:a6:73:de:b3:9c:ea:
94:39:ab:b6:2f:4e:1c:33:e2:1e:62:69:60:fe:da:fd:45:9f:
e9:f5:df:8e:b0:8f:df:1a:dc:09:bc:69:a1:8d:89:4b:96:94:
e4:95:47:85:48:1e:35:ee:7e:50:b6:5d:84:11:b3:1c:95:fa:
36:3d:25:28:d9:50:9e:c3:20:1c:f2:bf:e2:ac:03:26:fe:2f:
47:16:22:f7:03:ee:d0:f8:fa:5e:b1:f4:ae:f9:58:fa:00:3e:
24:8e:32:2d:a0:d6:fa:8b:93:34:7d:41:13:75:06:d2:85:89:
e0:d0:ed:67:87:62:96:07:4d:c3:8e:53:16:05:49:b6:17:2f:
60:66:18:4d:26:4d:66:a4:c6:23:f5:fa:83:42:8c:79:b3:3f:
5c:45:ac:bf:c1:d2:ec:90:ed:48:43:b3:1b:7a:05:c3:86:8e:
27:40:88:98:40:4c:fd:f9:3c:e4:44:24:c1:69:3c:2b:45:86:
dc:6c:e6:c6:3f:57:88:c2:77:ee:57:b7:2a:f4:de:55:bf:4b:
b9:63:4b:78:50:9b:15:9d:a0:3d:e7:86:db:d0:c2:70:bd:9c:
af:e1:b5:84
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaBxEBpI2lgUSWRc0Q5RJoMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTA1MTAxNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDdmOTg4NTZiOGJjYmQ4YTE0ZmNkYTliOTMzMTljYmE5ZWJiOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCntd8fgerFFKfOjJozw3P5j1skp
DTXDgHGpIVypBYZuxMp24aLV8uy2iw6nCLGrmRgORRZ49XBtMmHMoNrkAdB/9sa8
r4elTXG2rc5KbelfbclA3yuryS5H2FQvvthRhiske7671IvQ1ApMWnfSl/U/6MPz
3w76a/ZI/apnIO3vHZ5eS/ze1vxd1LcwG5CeIYkhlxGglS+v34RlTU0oC/X2GdEW
SMllrJT4AUwDvHHpiav1l4gpxA9H4hF3jskVWu6ijI4+dtnFCZLPlPTNlyeiuz0r
7rP4zkjHFMqvYjCzj9XCJUrslaDirw/WCaYOw5TlRSfKgw2I3WP1LNR9uQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOR/mIVri8vYoU/NqbkzGcup67nZMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvNUgtWWhXdUx5OWloVDgycHVUTVp5Nm5ydWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAT7COAwQB
T7YuMAwDBABtQQMDBABtQQQwDQYJKoZIhvcNAQELBQADggEBAAYPI0nU8Vg56zuM
h7sPYGMMvSFtQJ/AOro7DovD6KZz3rOc6pQ5q7YvThwz4h5iaWD+2v1Fn+n1346w
j98a3Am8aaGNiUuWlOSVR4VIHjXuflC2XYQRsxyV+jY9JSjZUJ7DIBzyv+KsAyb+
L0cWIvcD7tD4+l6x9K75WPoAPiSOMi2g1vqLkzR9QRN1BtKFieDQ7WeHYpYHTcOO
UxYFSbYXL2BmGE0mTWakxiP1+oNCjHmzP1xFrL/B0uyQ7UhDsxt6BcOGjidAiJhA
TP35POREJMFpPCtFhtxs5sY/V4jCd+5Xtyr03lW/S7ljS3hQmxWdoD3nhtvQwnC9
nK/htYQ=
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:21 2026 by rpki-client