Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/CJIiUxNUjoRh7TYEIsIf6XOA2rs.roa
File: CJIiUxNUjoRh7TYEIsIf6XOA2rs.roa (raw, json)
Hash identifier: rvw0xQsEwi3SCFt/7Ml5lo8nXyGLV/aTXvxOQiwQO7o=
Subject key identifier: 08:92:22:53:13:54:8E:84:61:ED:36:04:22:C2:1F:E9:73:80:DA:BB
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A061B227D64B48981CE92E94C9B685E8CF
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/CJIiUxNUjoRh7TYEIsIf6XOA2rs.roa
Signing time: Wed 02 Sep 2026 10:37:40 +0000
ROA not before: Wed 02 Sep 2026 10:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 79.182.40.0/24 maxlen: 24
79.183.87.0/24 maxlen: 24
79.183.123.0/24 maxlen: 24
79.183.132.0/24 maxlen: 24
109.65.15.0/24 maxlen: 24
109.65.29.0/24 maxlen: 24
109.65.62.0/24 maxlen: 24
109.65.79.0/24 maxlen: 24
109.65.113.0/24 maxlen: 24
109.65.127.0/24 maxlen: 24
109.65.167.0/24 maxlen: 24
109.65.176.0/24 maxlen: 24
109.65.182.0/24 maxlen: 24
109.65.189.0/24 maxlen: 24
109.65.191.0/24 maxlen: 24
109.66.57.0/24 maxlen: 24
109.66.59.0/24 maxlen: 24
109.66.60.0/24 maxlen: 24
109.66.104.0/24 maxlen: 24
109.66.128.0/24 maxlen: 24
109.66.196.0/24 maxlen: 24
109.66.229.0/24 maxlen: 24
109.66.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:b2:27:d6:4b:48:98:1c:e9:2e:94:c9:b6:85:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 2 10:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0892225313548e8461ed360422c21fe97380dabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:2e:77:d5:f7:05:83:a9:54:bc:a0:97:27:
81:ad:f0:ff:51:05:ac:61:41:c4:75:6d:85:9e:fb:
33:73:38:82:3a:3b:c9:de:cb:d0:ed:c7:39:d0:6a:
d1:44:e0:c8:3c:8c:8f:70:c4:7f:47:e3:65:13:c1:
3b:2c:72:e1:15:08:90:07:eb:be:ab:21:41:7d:a2:
54:18:e0:35:1b:97:15:d1:43:64:28:6e:30:5e:de:
a6:f6:a3:45:07:83:25:26:08:47:f0:24:74:f8:82:
25:17:32:90:a5:4d:d9:2e:bb:67:bd:06:5d:b0:d6:
7e:30:22:d3:0f:8b:49:59:84:00:e6:48:63:71:77:
03:06:ef:91:00:36:92:25:bb:45:75:c1:eb:c2:95:
d8:c4:61:18:b4:d1:ce:91:ca:5a:60:77:fb:8d:7e:
85:05:34:5e:cf:a9:cc:77:67:4b:28:8a:ea:d2:99:
81:91:6d:e6:11:0b:af:ff:b2:df:63:56:82:30:57:
46:96:f3:bb:14:3e:63:86:e2:e7:47:5d:e3:a2:57:
96:8f:f0:9e:26:80:b1:cf:21:0a:86:5d:44:49:17:
4f:f4:d1:92:d9:63:75:ea:d4:72:09:c7:90:8b:f3:
48:0a:f6:ba:4d:f7:7b:67:7a:bc:f3:83:58:54:85:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:22:53:13:54:8E:84:61:ED:36:04:22:C2:1F:E9:73:80:DA:BB
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/CJIiUxNUjoRh7TYEIsIf6XOA2rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.40.0/24
79.183.87.0/24
79.183.123.0/24
79.183.132.0/24
109.65.15.0/24
109.65.29.0/24
109.65.62.0/24
109.65.79.0/24
109.65.113.0/24
109.65.127.0/24
109.65.167.0/24
109.65.176.0/24
109.65.182.0/24
109.65.189.0/24
109.65.191.0/24
109.66.57.0/24
109.66.59.0-109.66.60.255
109.66.104.0/24
109.66.128.0/24
109.66.196.0/24
109.66.229.0/24
109.66.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4b:4e:d2:63:f1:7b:e7:e1:93:7c:26:e0:85:45:8f:21:93:
20:3c:4b:47:b4:68:ef:c7:1b:a1:05:83:3e:9f:b0:9e:fc:8e:
30:ac:63:90:d9:44:60:b2:ba:10:4d:04:93:0f:ca:9a:fb:a4:
78:1c:ef:51:a5:c1:f3:a0:22:65:6e:0d:41:f7:10:f8:f9:be:
e6:f1:fa:01:e6:82:9e:68:15:e2:cc:f3:d7:0c:30:46:b2:38:
dd:5a:d5:07:66:e6:f9:c0:66:7c:48:29:e8:dd:8d:0e:ed:19:
fc:00:77:14:d4:0f:af:6f:69:57:d5:23:0e:bd:f0:2b:80:15:
0a:03:0e:70:7b:67:f7:2c:fc:d8:44:a3:0b:45:dd:d7:50:67:
aa:21:1b:10:f4:25:97:f7:aa:e8:a1:1c:20:2f:6f:c0:d8:18:
0b:ce:37:ca:0d:59:85:1b:56:ed:62:a2:d6:4a:43:98:9a:64:
99:cb:02:af:1e:5c:1f:fe:9d:b1:89:7f:d2:e9:93:fe:cb:ef:
2f:d6:56:21:86:25:eb:44:1b:75:d7:61:16:7d:70:b4:c7:ac:
c9:d2:24:1e:a3:37:39:57:af:6d:27:77:11:0b:f3:24:1f:59:
ef:bb:e8:05:4b:25:4b:39:55:4b:ef:bc:cb:aa:fb:a2:df:38:
b1:e8:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:17 2026 by rpki-client