Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/8KFPa4sDwtI_RMXqQMZqBlips5o.roa
File: 8KFPa4sDwtI_RMXqQMZqBlips5o.roa (raw, json)
Hash identifier: LmSYARdjID20Q0UNwMMR5CF1iJILX9N7exyM50Wa00U=
Subject key identifier: F0:A1:4F:6B:8B:03:C2:D2:3F:44:C5:EA:40:C6:6A:06:58:A9:B3:9A
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A060011D6016199106DAF1FA4549F01BF6
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/8KFPa4sDwtI_RMXqQMZqBlips5o.roa
Signing time: Wed 02 Sep 2026 02:44:40 +0000
ROA not before: Wed 02 Sep 2026 02:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 79.176.1.0/24 maxlen: 24
79.176.8.0/24 maxlen: 24
79.176.11.0/24 maxlen: 24
79.182.0.0/24 maxlen: 24
79.182.6.0/24 maxlen: 24
109.66.25.0/24 maxlen: 24
109.66.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:01:1d:60:16:19:91:06:da:f1:fa:45:49:f0:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 2 02:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0a14f6b8b03c2d23f44c5ea40c66a0658a9b39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:55:a2:be:73:2b:f8:59:ed:48:d1:75:dd:
f6:38:ee:44:0d:13:ad:a5:77:37:4c:3b:6d:f4:32:
ad:25:21:8f:ff:cd:c6:17:4d:56:14:d7:8e:12:3e:
6e:4c:d0:73:b5:ec:89:3d:53:cc:8c:10:11:ee:dd:
f6:12:44:68:79:ee:b2:2c:2a:fe:ee:9c:b7:24:f0:
45:c2:fb:32:4a:7d:53:40:27:d9:a1:d0:93:89:b6:
b7:47:75:2a:59:ad:91:78:f8:da:e2:0a:6f:b0:e6:
17:15:07:41:ae:23:47:da:8c:e0:c1:94:9d:ac:e6:
b6:39:03:53:4f:f2:3f:e3:d0:b5:9a:ac:88:e7:87:
d1:29:d7:54:22:ce:dd:31:d8:c8:3d:61:c5:59:54:
77:30:69:b4:fb:f4:ed:ea:18:b1:16:3e:a3:bb:f7:
68:47:b6:09:3e:f8:04:3f:2d:c7:06:6d:bc:04:34:
3d:fd:3b:52:42:78:12:51:03:d2:d3:e1:41:95:e3:
05:1c:c0:e3:d6:47:61:f5:e3:16:22:47:7b:e0:2d:
bd:70:a0:c2:46:08:49:6b:58:2c:dd:00:85:1c:c6:
7d:46:e0:56:cf:af:dd:f1:ed:31:ef:a0:13:83:49:
11:7f:5a:0b:35:0b:2f:39:db:b5:ea:b7:b9:30:b8:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:4F:6B:8B:03:C2:D2:3F:44:C5:EA:40:C6:6A:06:58:A9:B3:9A
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/8KFPa4sDwtI_RMXqQMZqBlips5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.1.0/24
79.176.8.0/24
79.176.11.0/24
79.182.0.0/24
79.182.6.0/24
109.66.25.0/24
109.66.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:36:01:90:e9:3d:4d:dc:54:f5:18:0d:3a:23:7e:b6:69:0a:
fa:df:cb:fe:71:b1:39:40:80:3e:11:22:80:8d:3f:c8:aa:b2:
10:fd:ed:d2:79:3e:80:82:53:b9:54:11:33:9e:d3:0f:c7:c2:
28:89:95:4c:b7:cd:a3:3d:ce:23:57:4d:14:63:d9:5f:86:69:
1e:ee:b5:77:88:98:c6:92:4b:27:b9:f8:41:b3:00:ad:8c:3d:
11:c1:26:84:9b:36:45:8f:c3:dc:a2:d5:f5:52:76:6a:de:6a:
38:24:e7:2f:e6:34:92:af:7c:c3:13:cf:cb:0d:4f:ec:22:a1:
57:cc:07:b9:e2:93:a6:f7:ef:1b:09:a7:7d:49:06:7f:ae:b4:
27:45:4e:04:c0:8c:9c:69:0e:b4:ae:dd:fd:23:ed:18:8a:01:
64:f6:96:0e:1d:09:f3:89:da:64:19:d8:e3:3b:2e:94:8c:83:
98:68:d1:2c:a7:de:bf:f7:36:f5:33:fa:e0:71:21:24:e0:0e:
ce:c5:42:6b:20:95:5d:74:16:fc:95:b1:2d:4c:03:cc:21:54:
d0:55:a1:25:cd:bc:cc:a2:40:c3:c2:24:e1:16:4a:ab:1c:b8:
55:dc:eb:92:e9:da:d1:79:09:b2:68:fb:ac:0d:83:e3:b2:92:
a1:0e:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:17 2026 by rpki-client