Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9285sExhh3s_WOMGM-44wrWZ1I0.roa
File: 9285sExhh3s_WOMGM-44wrWZ1I0.roa (raw, json)
Hash identifier: eH7h5yUKlxVhfIEqnFYV4DJDinGtU53zsRdAU8yK7wM=
Subject key identifier: F7:6F:39:B0:4C:61:87:7B:3F:58:E3:06:33:EE:38:C2:B5:99:D4:8D
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FDFDD03C2F72C32B4B5FD0D8D96D3CB3F
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9285sExhh3s_WOMGM-44wrWZ1I0.roa
Signing time: Sat 08 Aug 2026 05:33:51 +0000
ROA not before: Sat 08 Aug 2026 05:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 79.182.24.0/24 maxlen: 24
79.183.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 11:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:df:dd:03:c2:f7:2c:32:b4:b5:fd:0d:8d:96:d3:cb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 8 05:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f76f39b04c61877b3f58e30633ee38c2b599d48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:75:aa:ef:4e:40:40:d2:0e:0c:31:1c:74:
1f:6a:2e:b2:f8:f7:63:d3:0a:c7:c5:61:fa:d9:8a:
cc:fe:a7:a9:8c:68:de:17:db:1a:f7:4a:cb:35:1f:
4a:a0:08:29:5c:a7:dc:13:cf:6b:d4:c1:e0:8c:71:
b7:fb:56:d5:2a:63:fc:f6:de:88:19:ab:f1:8c:ad:
22:d0:17:0b:77:fa:66:78:e8:8f:c6:78:83:f5:26:
33:33:71:9b:ba:52:e6:ea:04:54:ff:a5:35:fb:5b:
2f:50:b1:4c:d5:1f:ce:2f:4f:0a:60:b4:95:c4:a6:
9c:13:0b:74:3b:16:f2:09:8a:ae:93:23:cb:49:89:
89:e8:2f:aa:d7:90:d7:f4:1b:61:2e:4d:38:bd:37:
c8:62:c9:57:79:4a:7b:56:a6:da:43:99:22:a6:1e:
e2:e7:f4:52:42:6d:cc:38:99:94:70:88:75:21:85:
97:e3:a6:02:24:61:4e:fd:e6:f8:cf:fc:f2:2c:a2:
b4:10:3b:52:0f:f0:55:5f:e8:79:d8:ac:1b:9a:6c:
5e:70:df:e1:ca:c6:b2:25:79:4f:f0:52:ec:af:2a:
f7:c9:59:65:93:74:c7:a8:a8:a5:b3:41:29:0a:9d:
15:60:29:22:61:90:d9:50:19:87:90:b4:50:00:c3:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:39:B0:4C:61:87:7B:3F:58:E3:06:33:EE:38:C2:B5:99:D4:8D
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/9285sExhh3s_WOMGM-44wrWZ1I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.24.0/24
79.183.0.0/24
Signature Algorithm: sha256WithRSAEncryption
13:53:bf:15:1d:32:df:5a:fe:5f:c0:14:17:54:a2:0b:56:9d:
4c:fd:4b:cf:06:c4:55:39:d8:cb:af:e1:6c:5e:7b:b6:bb:8d:
f0:58:43:0d:67:77:65:3e:c9:4d:50:91:55:a6:57:a8:8f:00:
cc:0f:41:0a:7c:8d:1d:9c:eb:46:1e:39:f6:46:f8:85:6b:28:
a6:01:c7:59:d9:ba:e9:d3:28:a3:bc:72:21:50:e8:fb:97:d1:
8f:ad:e5:ad:33:47:fc:d7:b9:e9:05:89:5c:40:d7:ad:3a:72:
f2:38:15:7e:ab:bc:78:60:00:2d:df:63:e4:ae:d4:69:bb:b2:
b1:9e:d7:c5:2b:94:ca:19:b0:3e:ad:8b:37:8f:9d:81:86:2e:
c3:f0:24:01:ca:35:d2:90:ee:44:0a:e0:5a:34:f7:7f:78:65:
b7:d9:7b:9a:0e:9b:e2:c7:7c:cd:c6:3a:4c:c3:98:7c:f1:15:
4c:6a:81:a0:e1:b3:b9:c6:77:da:d3:d5:fb:b6:77:e6:6a:08:
7e:5b:c8:2e:2b:53:9c:81:97:e9:02:43:fd:89:5d:d0:7e:d1:
43:91:d9:7f:f7:2b:55:7b:e6:cf:50:6d:1c:07:e8:cb:2f:d6:
b3:8e:ff:d5:d6:fb:dd:f5:f1:db:ba:34:06:f0:70:82:d9:18:
e6:cb:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:11:59 2026 by rpki-client