Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/EsVnIwwHGjqmqL4jpyXGIacxkiY.roa
File: EsVnIwwHGjqmqL4jpyXGIacxkiY.roa (raw, json)
Hash identifier: oZ2WL2riBemG1ObAyNhHL7eqQGbsnXCwEeBbDF6jM6k=
Subject key identifier: 12:C5:67:23:0C:07:1A:3A:A6:A8:BE:23:A7:25:C6:21:A7:31:92:26
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A05A95AA24D31FDF17B47A419AB967320A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/EsVnIwwHGjqmqL4jpyXGIacxkiY.roa
Signing time: Tue 01 Sep 2026 01:29:12 +0000
ROA not before: Tue 01 Sep 2026 01:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 79.176.10.0/24 maxlen: 24
79.176.79.0/24 maxlen: 24
109.66.24.0/24 maxlen: 24
109.66.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:95:aa:24:d3:1f:df:17:b4:7a:41:9a:b9:67:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 1 01:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12c567230c071a3aa6a8be23a725c621a7319226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:ff:77:32:57:42:c9:55:85:df:e2:9e:7d:
70:89:2f:20:44:4e:7b:26:56:f0:2b:03:5e:45:b4:
72:d9:fa:96:10:9e:20:10:e4:9e:79:ad:ed:24:1d:
ae:77:15:e7:3d:86:22:48:14:1f:fa:b8:37:a1:f3:
b9:d2:a4:ae:01:fe:c1:a0:a7:16:0f:57:cb:3d:2c:
6d:d9:ba:4e:69:9b:5e:c8:67:93:f7:7c:7f:42:62:
c9:bc:8f:99:af:57:14:d9:e1:41:9f:c3:1a:37:6f:
99:21:13:cc:0e:e9:12:c4:70:23:4c:0e:cd:65:4c:
7d:51:5f:20:5a:12:a4:d2:9f:74:11:5f:9e:37:ab:
62:9e:50:43:0c:89:26:3d:3e:e5:f9:40:99:f0:4b:
30:2e:66:a7:8d:24:41:02:3d:5c:14:ca:b9:b9:01:
99:5c:b7:de:fd:c5:7e:e4:1c:6e:eb:ba:fd:54:46:
3e:0c:93:26:b8:54:80:3f:88:d4:91:9c:df:8b:f6:
63:67:f4:87:85:c1:f1:7b:be:94:40:1e:bd:c2:b2:
a1:df:e4:85:ee:b6:24:c9:76:e9:74:24:02:f9:aa:
45:1c:04:35:60:56:9b:84:8a:e5:9e:9f:16:af:72:
af:de:72:f0:ca:6c:c6:25:6d:e8:f3:4d:4e:e7:bc:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:67:23:0C:07:1A:3A:A6:A8:BE:23:A7:25:C6:21:A7:31:92:26
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/EsVnIwwHGjqmqL4jpyXGIacxkiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.10.0/24
79.176.79.0/24
109.66.24.0/24
109.66.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:98:e6:9d:d9:dd:16:5d:2d:50:78:05:00:61:77:1c:2a:e7:
ab:6e:d0:e5:d3:f5:94:e6:ab:47:cb:d1:e7:92:de:f0:1b:32:
55:86:64:a8:b2:d1:f0:59:0a:0f:bc:74:3e:e1:f5:f2:28:48:
e9:76:08:be:b5:85:7a:30:a6:58:8d:ac:a2:4b:79:a7:3c:0a:
6d:c7:a4:0d:a7:87:1c:e6:ab:91:a4:53:86:9c:b9:bf:e5:b2:
57:e4:f3:da:91:8b:0d:f2:a2:b8:a2:53:0a:61:db:b9:d0:41:
ee:19:82:b6:4a:dc:04:61:64:d5:9c:f8:c1:7a:c6:78:fb:85:
58:12:f7:cf:b0:b6:d1:4b:38:78:52:ba:10:d5:bf:40:bf:47:
7e:da:99:3c:3d:73:da:2f:b7:d4:c5:c0:bd:bd:ef:2d:52:8e:
f0:ff:ba:b9:35:e8:c3:b5:4b:81:69:ed:c5:13:d5:93:10:3b:
8c:7f:80:94:1b:29:e9:82:5d:58:74:0a:31:3f:e7:53:15:d4:
74:2c:56:e1:48:10:ed:65:c2:c1:09:bd:ca:aa:86:67:62:64:
a9:37:32:23:a5:ee:37:2d:02:24:d1:f7:f5:3b:45:ba:08:45:
85:40:46:f7:31:4b:49:65:f5:23:5e:88:f1:01:a8:82:ba:ad:
71:9b:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:24 2026 by rpki-client