Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/85tzZUw0x2a1BbXN327IbD_eSIk.roa
File: 85tzZUw0x2a1BbXN327IbD_eSIk.roa (raw, json)
Hash identifier: vjQ7IfI9uRdKewna7RIs5ac9LLLiiV3ADkKyZcXdQwI=
Subject key identifier: F3:9B:73:65:4C:34:C7:66:B5:05:B5:CD:DF:6E:C8:6C:3F:DE:48:89
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A061B2279A92CFFD141075E6E9F44C28EC
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/85tzZUw0x2a1BbXN327IbD_eSIk.roa
Signing time: Wed 02 Sep 2026 10:37:40 +0000
ROA not before: Wed 02 Sep 2026 10:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 79.176.23.0/24 maxlen: 24
79.176.24.0/24 maxlen: 24
79.176.25.0/24 maxlen: 24
79.176.42.0/24 maxlen: 24
79.176.46.0/24 maxlen: 24
79.176.48.0/24 maxlen: 24
79.176.63.0/24 maxlen: 24
79.176.69.0/24 maxlen: 24
79.176.92.0/24 maxlen: 24
79.176.100.0/24 maxlen: 24
79.176.105.0/24 maxlen: 24
79.176.118.0/24 maxlen: 24
79.176.144.0/24 maxlen: 24
79.176.170.0/24 maxlen: 24
79.176.182.0/24 maxlen: 24
79.176.204.0/24 maxlen: 24
79.176.209.0/24 maxlen: 24
79.176.220.0/24 maxlen: 24
79.176.233.0/24 maxlen: 24
79.182.28.0/24 maxlen: 24
79.182.40.0/24 maxlen: 24
79.182.55.0/24 maxlen: 24
79.182.89.0/24 maxlen: 24
79.182.112.0/24 maxlen: 24
79.182.152.0/24 maxlen: 24
79.182.153.0/24 maxlen: 24
79.182.164.0/24 maxlen: 24
79.182.176.0/24 maxlen: 24
79.182.186.0/24 maxlen: 24
79.182.201.0/24 maxlen: 24
79.182.212.0/24 maxlen: 24
79.182.223.0/24 maxlen: 24
109.65.37.0/24 maxlen: 24
109.65.53.0/24 maxlen: 24
109.65.88.0/24 maxlen: 24
109.65.101.0/24 maxlen: 24
109.65.140.0/24 maxlen: 24
109.65.151.0/24 maxlen: 24
109.65.188.0/24 maxlen: 24
109.65.190.0/24 maxlen: 24
109.65.199.0/24 maxlen: 24
109.65.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:b2:27:9a:92:cf:fd:14:10:75:e6:e9:f4:4c:28:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 2 10:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f39b73654c34c766b505b5cddf6ec86c3fde4889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:f3:03:28:d8:c3:7a:f5:e6:e8:e9:54:a4:
1b:55:e0:d3:02:80:87:c0:9e:65:11:c8:e4:89:75:
58:3c:75:67:5d:8c:dd:ba:3b:32:b8:1c:e2:fe:68:
0d:44:1d:3f:5d:a5:d2:53:dd:31:fa:79:20:02:c9:
14:40:90:71:dd:41:68:a9:ff:99:9e:c5:b4:98:bf:
b1:c0:70:ae:fb:4e:72:1f:90:f4:18:a9:c1:8f:2d:
9c:e5:9d:37:c6:cf:ee:7c:74:01:75:a2:c7:80:be:
92:d5:8f:be:bf:de:8e:4d:9e:b3:6c:55:37:b1:78:
bc:05:e2:22:c6:4c:e2:b6:f6:a9:e7:9e:3f:f2:be:
cc:ee:fa:78:1f:96:cc:11:d4:dd:e3:c6:84:30:75:
73:c2:77:55:09:26:d4:de:19:7f:ce:a2:d9:0d:1e:
91:0c:61:84:01:6d:ca:f3:54:cc:32:1f:a2:d8:b3:
75:6d:07:01:7b:3b:8d:c2:ff:92:7a:59:9a:5b:0f:
aa:da:6d:71:fc:97:b3:76:79:00:3c:e8:57:92:57:
29:a0:fb:f2:4b:0b:79:d6:9d:ac:82:13:b7:3a:da:
e2:79:32:1e:d8:96:04:7c:f2:05:fb:6c:b4:ff:99:
ab:9e:a1:d5:fb:dc:a8:4b:a5:f6:ad:f9:9d:d6:ec:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:73:65:4C:34:C7:66:B5:05:B5:CD:DF:6E:C8:6C:3F:DE:48:89
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/85tzZUw0x2a1BbXN327IbD_eSIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.23.0-79.176.25.255
79.176.42.0/24
79.176.46.0/24
79.176.48.0/24
79.176.63.0/24
79.176.69.0/24
79.176.92.0/24
79.176.100.0/24
79.176.105.0/24
79.176.118.0/24
79.176.144.0/24
79.176.170.0/24
79.176.182.0/24
79.176.204.0/24
79.176.209.0/24
79.176.220.0/24
79.176.233.0/24
79.182.28.0/24
79.182.40.0/24
79.182.55.0/24
79.182.89.0/24
79.182.112.0/24
79.182.152.0/23
79.182.164.0/24
79.182.176.0/24
79.182.186.0/24
79.182.201.0/24
79.182.212.0/24
79.182.223.0/24
109.65.37.0/24
109.65.53.0/24
109.65.88.0/24
109.65.101.0/24
109.65.140.0/24
109.65.151.0/24
109.65.188.0/24
109.65.190.0/24
109.65.199.0/24
109.65.205.0/24
Signature Algorithm: sha256WithRSAEncryption
43:90:06:56:50:dc:e4:29:4b:44:c8:0e:2b:ee:0e:5c:20:d6:
3a:69:93:1c:0b:72:eb:74:58:8b:cd:a1:f3:a5:9b:85:57:40:
00:2c:78:3e:fc:d9:03:e9:f8:8d:6a:d0:1a:1e:35:28:43:61:
82:a4:a7:a1:3e:eb:32:49:2c:0d:30:cd:49:00:54:9f:d8:32:
33:7f:58:dd:7d:90:93:88:af:54:cf:22:2a:b5:ab:4d:b7:ff:
47:f6:8a:88:57:ff:a3:9f:a7:bd:cc:0a:6d:f9:1d:67:ea:7a:
62:7f:ad:3a:8f:71:ec:2a:71:8e:8b:fd:5c:87:04:6e:62:bc:
39:a6:b8:68:ac:88:ea:56:93:28:4d:1b:03:94:81:ce:94:26:
24:59:80:a9:60:51:2d:70:14:55:a0:f1:d8:6a:9b:9f:69:fd:
33:c0:46:36:8a:bc:7a:58:32:c9:c6:f2:dc:4c:2a:24:85:c6:
da:a6:aa:58:3f:64:38:3f:af:5e:25:e2:c9:c7:e8:6a:9f:d8:
2d:4e:6e:12:8f:24:70:78:c4:2c:0d:ef:02:fb:72:46:b3:20:
6f:76:9a:bb:b0:db:49:b0:e9:06:81:e0:a6:f6:20:df:4d:86:
13:e5:42:88:51:cd:7c:85:56:8c:f3:bb:67:4f:49:c6:43:7b:
8e:1b:12:41
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISAaBhsieaks/9FBB15un0TCjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTAyMTAzNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzliNzM2NTRjMzRjNzY2YjUwNWI1Y2RkZjZlYzg2YzNmZGU0ODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLvzAyjYw3r15ujpVKQbVeDTAoCH
wJ5lEcjkiXVYPHVnXYzdujsyuBzi/mgNRB0/XaXSU90x+nkgAskUQJBx3UFoqf+Z
nsW0mL+xwHCu+05yH5D0GKnBjy2c5Z03xs/ufHQBdaLHgL6S1Y++v96OTZ6zbFU3
sXi8BeIixkzitvap554/8r7M7vp4H5bMEdTd48aEMHVzwndVCSbU3hl/zqLZDR6R
DGGEAW3K81TMMh+i2LN1bQcBezuNwv+SelmaWw+q2m1x/JezdnkAPOhXklcpoPvy
Swt51p2sghO3OtrieTIe2JYEfPIF+2y0/5mrnqHV+9yoS6X2rfmd1uyHWQIDAQAB
o4IC+zCCAvcwHQYDVR0OBBYEFPObc2VMNMdmtQW1zd9uyGw/3kiJMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvODV0elpVdzB4MmExQmJYTjMyN0liRF9lU0lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgfkEAgABMIHyMAwD
BABPsBcDBAFPsBgDBABPsCoDBABPsC4DBABPsDADBABPsD8DBABPsEUDBABPsFwD
BABPsGQDBABPsGkDBABPsHYDBABPsJADBABPsKoDBABPsLYDBABPsMwDBABPsNED
BABPsNwDBABPsOkDBABPthwDBABPtigDBABPtjcDBABPtlkDBABPtnADBAFPtpgD
BABPtqQDBABPtrADBABPtroDBABPtskDBABPttQDBABPtt8DBABtQSUDBABtQTUD
BABtQVgDBABtQWUDBABtQYwDBABtQZcDBABtQbwDBABtQb4DBABtQccDBABtQc0w
DQYJKoZIhvcNAQELBQADggEBAEOQBlZQ3OQpS0TIDivuDlwg1jppkxwLcut0WIvN
ofOlm4VXQAAseD782QPp+I1q0BoeNShDYYKkp6E+6zJJLA0wzUkAVJ/YMjN/WN19
kJOIr1TPIiq1q023/0f2iohX/6Ofp73MCm35HWfqemJ/rTqPcewqcY6L/VyHBG5i
vDmmuGisiOpWkyhNGwOUgc6UJiRZgKlgUS1wFFWg8dhqm59p/TPARjaKvHpYMsnG
8txMKiSFxtqmqlg/ZDg/r14l4snH6Gqf2C1ObhKPJHB4xCwN7wL7ckazIG92mruw
20mw6QaB4Kb2IN9NhhPlQohRzXyFVozzu2dPScZDe44bEkE=
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:24 2026 by rpki-client