Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/6VJVqt_dHc7NnL22iFTo5EPnDWU.roa
File: 6VJVqt_dHc7NnL22iFTo5EPnDWU.roa (raw, json)
Hash identifier: idJZaafH5ItnOXCOEuBMKPiHSMjhTA40iAnTP1yhCG0=
Subject key identifier: E9:52:55:AA:DF:DD:1D:CE:CD:9C:BD:B6:88:54:E8:E4:43:E7:0D:65
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0DBBAE8EC5BFD80190A5934BEC3F9D274
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/6VJVqt_dHc7NnL22iFTo5EPnDWU.roa
Signing time: Sat 26 Sep 2026 03:20:54 +0000
ROA not before: Sat 26 Sep 2026 03:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 79.183.58.0/24 maxlen: 24
79.183.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:ba:e8:ec:5b:fd:80:19:0a:59:34:be:c3:f9:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 26 03:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e95255aadfdd1dcecd9cbdb68854e8e443e70d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:fd:48:6c:17:5f:ea:56:8d:87:7b:13:b5:
7e:e0:16:a5:11:ec:fa:01:10:42:02:81:85:3b:1f:
fc:17:a6:18:af:3b:56:5d:09:8e:ad:3e:3e:23:5e:
7f:eb:99:84:06:e0:43:e6:c0:e7:58:00:29:75:47:
48:31:a3:7d:5a:fb:be:48:7a:0e:29:88:14:64:66:
6a:2b:11:4f:85:6a:f5:e2:aa:16:52:80:6d:cd:3f:
60:66:d2:03:92:f6:d4:57:25:1b:76:84:6c:17:fa:
2d:17:b0:37:99:8b:a5:e4:33:22:80:44:fe:36:f8:
dc:3f:e8:81:1d:1e:ca:13:96:21:0b:c5:f2:33:da:
79:ea:b6:3b:f6:49:c4:2a:41:51:c7:0e:d8:40:04:
25:d2:d8:47:6e:63:b7:ec:45:6a:6b:79:be:1f:1a:
9b:ec:f7:9d:d2:88:a4:3c:7c:f4:53:11:60:3f:c2:
33:d8:46:c3:03:a9:81:ae:f0:07:8c:64:4e:8a:8a:
84:aa:e7:10:65:54:e7:58:86:7f:1b:d2:64:b2:bc:
96:bd:a9:56:a8:6e:f3:b6:d6:0a:43:ec:b0:99:05:
b1:b7:ea:f3:31:26:83:97:ce:2e:61:ac:e3:1e:f3:
b9:90:4c:04:3f:30:4a:7e:cf:bf:7a:4f:1d:91:be:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:55:AA:DF:DD:1D:CE:CD:9C:BD:B6:88:54:E8:E4:43:E7:0D:65
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/6VJVqt_dHc7NnL22iFTo5EPnDWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.58.0/24
79.183.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:86:ab:ee:e8:fb:f0:22:b7:56:be:0d:07:20:c3:b6:4d:40:
b8:12:38:65:89:2c:c7:f4:47:7a:1b:e3:b9:29:8a:5b:57:ff:
34:6e:35:45:d3:97:e2:06:25:15:18:d8:1f:2f:18:e7:93:2a:
c2:3b:6f:89:69:fa:d3:e1:ba:cd:dc:a1:b0:49:a8:4a:e6:63:
b1:47:dd:29:b0:b4:db:f3:44:46:83:2b:b4:53:bd:dd:03:f2:
99:bd:2e:35:5a:86:d9:0e:dc:74:4b:86:51:81:cb:e2:13:30:
50:d7:72:5c:ca:25:28:8b:f8:37:33:1c:01:7a:1a:a7:22:c6:
b3:41:4f:97:66:e5:18:43:ae:df:e8:4d:db:18:a4:b0:97:a8:
3b:1f:24:1f:40:54:82:7d:44:22:5c:a4:93:05:73:48:43:63:
4c:a7:d1:26:b6:92:65:2a:4f:0b:bd:ef:45:77:35:70:83:3f:
ba:19:33:7b:cb:07:dd:60:7f:ad:dc:92:6d:7e:6e:b7:66:66:
9d:96:40:98:7f:d8:7b:53:a7:d3:ec:84:24:e8:5a:ea:04:85:
3b:c5:d5:54:8a:cc:de:69:2b:48:a3:c3:5f:7c:da:90:54:64:
fe:80:4b:1d:43:dc:af:c0:f1:3d:c8:7b:51:4e:4d:04:90:3c:
8c:19:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:45:26 2026 by rpki-client