Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ATkiLNVDo0yD_WQdxjWVh7SexvE.roa
File: ATkiLNVDo0yD_WQdxjWVh7SexvE.roa (raw, json)
Hash identifier: Yqo+k7zwBt6QUE4wk531pDIUgGxSewJKF+kgGatjJJw=
Subject key identifier: 01:39:22:2C:D5:43:A3:4C:83:FD:64:1D:C6:35:95:87:B4:9E:C6:F1
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FFFDF8B966B721738C48C510710B03BA3
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ATkiLNVDo0yD_WQdxjWVh7SexvE.roa
Signing time: Fri 14 Aug 2026 10:44:28 +0000
ROA not before: Fri 14 Aug 2026 10:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 79.183.167.0/24 maxlen: 24
79.183.168.0/24 maxlen: 24
109.66.130.0/24 maxlen: 24
109.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:df:8b:96:6b:72:17:38:c4:8c:51:07:10:b0:3b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 14 10:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0139222cd543a34c83fd641dc6359587b49ec6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:4c:ff:62:4c:c7:ee:7e:c0:6e:92:f6:40:
59:1d:02:30:d8:ee:be:0d:a0:99:8c:d5:47:01:fd:
d7:89:d6:05:d6:0f:88:3f:d9:e0:85:3d:ab:f2:4a:
34:c5:76:18:2f:1f:51:d7:6a:e5:11:17:b4:ba:ab:
1d:d1:89:25:f2:f1:00:1b:95:77:95:51:84:5a:50:
75:81:41:ba:5b:ed:66:9e:3c:b8:0d:d9:dc:6c:52:
d4:6b:6a:6d:f6:03:b8:fb:60:c6:41:af:38:b8:50:
1b:69:0d:1e:2a:05:ae:54:47:df:ee:e3:1a:2c:b0:
52:33:70:c4:d5:6e:f5:f0:0a:2c:bd:a8:b7:4a:9d:
c3:31:34:42:84:ba:c9:2e:8e:ab:9b:ea:4f:af:78:
00:f7:fd:20:fd:b5:e3:5e:b6:f7:65:7e:bb:d9:f5:
b6:ce:73:5a:9c:8d:81:35:9a:90:6a:0a:a9:1b:35:
50:60:52:c3:bb:b6:66:f1:1f:d8:93:7b:60:b6:41:
65:cf:6b:de:17:f4:13:e9:a5:95:ed:47:a3:15:be:
ed:62:4f:86:48:45:b6:01:8a:08:f3:75:c0:3c:6d:
d6:5c:a5:53:91:d6:33:03:17:4f:cd:dc:cf:5a:6d:
2f:e2:57:ef:98:5e:42:fb:42:c2:a9:f2:fd:aa:26:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:22:2C:D5:43:A3:4C:83:FD:64:1D:C6:35:95:87:B4:9E:C6:F1
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ATkiLNVDo0yD_WQdxjWVh7SexvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.167.0-79.183.168.255
109.66.130.0/24
109.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0e:6c:7c:30:d7:6a:2c:37:3c:8c:7c:04:b5:f8:96:e9:3f:
fa:1b:0c:00:5e:69:52:e0:85:be:a6:d3:3c:ca:84:8f:66:48:
bd:fc:86:fc:e6:88:36:82:f9:41:5e:46:45:3c:ad:ad:40:0f:
15:63:2c:00:fa:01:89:5f:f6:da:5e:5e:87:07:5c:77:40:af:
06:83:45:72:bf:12:75:21:c2:7c:53:56:1c:56:bf:62:0b:c7:
2d:52:d6:05:79:8a:f5:d0:33:59:88:a2:54:8b:d0:98:b7:bc:
ca:99:6e:88:90:39:0f:55:79:2e:48:74:c7:04:c8:a8:04:5f:
7b:d1:5c:96:10:47:8f:11:2a:7a:da:a6:97:02:16:02:a7:06:
19:cd:e4:15:7d:15:db:9b:22:5f:fb:ae:aa:59:68:88:48:9d:
f2:a2:3c:df:17:9f:93:85:56:1f:60:3f:66:68:16:d9:99:8f:
aa:76:ea:1e:b8:de:bb:ec:16:52:be:b1:e0:04:94:0c:f9:46:
45:33:48:39:ad:ef:94:c3:b0:92:26:f9:8c:fd:f5:9a:85:14:
51:73:ef:f1:60:13:93:cd:46:c8:d8:42:20:22:3d:1d:85:eb:
15:51:d8:d8:15:d5:0f:c1:32:d4:79:f3:b8:51:b2:1a:74:db:
e9:88:2c:1b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ//34uWa3IXOMSMUQcQsDujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODE0MTA0NDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTM5MjIyY2Q1NDNhMzRjODNmZDY0MWRjNjM1OTU4N2I0OWVjNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoodM/2JMx+5+wG6S9kBZHQIw2O6+
DaCZjNVHAf3XidYF1g+IP9nghT2r8ko0xXYYLx9R12rlERe0uqsd0Ykl8vEAG5V3
lVGEWlB1gUG6W+1mnjy4DdncbFLUa2pt9gO4+2DGQa84uFAbaQ0eKgWuVEff7uMa
LLBSM3DE1W718Aosvai3Sp3DMTRChLrJLo6rm+pPr3gA9/0g/bXjXrb3ZX672fW2
znNanI2BNZqQagqpGzVQYFLDu7Zm8R/Yk3tgtkFlz2veF/QT6aWV7UejFb7tYk+G
SEW2AYoI83XAPG3WXKVTkdYzAxdPzdzPWm0v4lfvmF5C+0LCqfL9qiYzCQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAE5IizVQ6NMg/1kHcY1lYe0nsbxMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvQVRraUxOVkRvMHlEX1dRZHhqV1ZoN1NleHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABPt6cD
BABPt6gDBABtQoIDBABtQpQwDQYJKoZIhvcNAQELBQADggEBAFEObHww12osNzyM
fAS1+JbpP/obDABeaVLghb6m0zzKhI9mSL38hvzmiDaC+UFeRkU8ra1ADxVjLAD6
AYlf9tpeXocHXHdArwaDRXK/EnUhwnxTVhxWv2ILxy1S1gV5ivXQM1mIolSL0Ji3
vMqZboiQOQ9VeS5IdMcEyKgEX3vRXJYQR48RKnrappcCFgKnBhnN5BV9FdubIl/7
rqpZaIhInfKiPN8Xn5OFVh9gP2ZoFtmZj6p26h643rvsFlK+seAElAz5RkUzSDmt
75TDsJIm+Yz99ZqFFFFz7/FgE5PNRsjYQiAiPR2F6xVR2NgV1Q/BMtR587hRshp0
2+mILBs=
-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:38 2026 by rpki-client