Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/FhUSgOPRHKkcN7BlfoIKkEWXCts.roa
File: FhUSgOPRHKkcN7BlfoIKkEWXCts.roa (raw, json)
Hash identifier: IB/mh0pTUI203fVbEYwjNlLzxPkr72/jYenutP+Zzdk=
Subject key identifier: 16:15:12:80:E3:D1:1C:A9:1C:37:B0:65:7E:82:0A:90:45:97:0A:DB
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A031831057E0B4B84264A30E2303A952C6
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/FhUSgOPRHKkcN7BlfoIKkEWXCts.roa
Signing time: Mon 24 Aug 2026 02:04:28 +0000
ROA not before: Mon 24 Aug 2026 02:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 79.176.29.0/24 maxlen: 24
79.176.31.0/24 maxlen: 24
79.176.80.0/24 maxlen: 24
79.176.104.0/24 maxlen: 24
79.176.122.0/24 maxlen: 24
79.176.158.0/24 maxlen: 24
79.176.180.0/24 maxlen: 24
79.176.246.0/24 maxlen: 24
79.182.69.0/24 maxlen: 24
79.182.85.0/24 maxlen: 24
79.182.147.0/24 maxlen: 24
79.182.185.0/24 maxlen: 24
79.182.191.0/24 maxlen: 24
79.182.203.0/24 maxlen: 24
79.182.238.0/24 maxlen: 24
109.66.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:31:83:10:57:e0:b4:b8:42:64:a3:0e:23:03:a9:52:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 24 02:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16151280e3d11ca91c37b0657e820a9045970adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:e1:72:2a:25:77:12:30:84:fb:3e:f1:57:
36:da:ad:96:db:21:c7:98:bd:0b:51:d2:01:a5:56:
e1:e4:d6:14:b2:26:cd:92:d8:15:42:13:5b:a2:80:
37:32:09:e7:ed:6f:5d:dc:73:22:65:e9:61:41:10:
af:25:7e:84:c3:f2:7f:77:33:23:83:49:ff:f8:2c:
28:68:9e:a0:bf:33:66:dc:c8:dc:ce:e9:c8:1c:c6:
9a:43:0d:3c:ae:8e:06:ec:c3:f1:22:a8:19:f7:27:
ec:be:3b:d3:40:9c:b3:e4:9c:66:16:a3:d2:4c:61:
de:d6:97:88:65:c2:82:22:70:e6:8d:0e:56:c9:09:
a1:76:46:4f:f3:68:eb:3a:8d:14:df:b8:82:0a:b6:
d6:dd:e0:67:a1:20:17:9e:d8:57:52:4a:89:9d:38:
0f:6f:72:e0:e0:c8:4e:fb:6e:23:01:e6:b2:4b:a8:
be:21:de:47:0c:d3:3d:41:62:4c:a4:ff:f2:cd:68:
46:c8:9c:f6:82:16:0a:aa:8e:cd:78:3e:ec:0a:a3:
1e:c5:cd:81:57:d9:15:8a:ff:e8:a2:f3:00:dc:1b:
11:38:50:b1:e2:bd:ac:d8:e0:d8:38:a8:58:a0:0a:
cc:b8:bd:e3:84:cb:19:34:d3:a3:8c:7a:df:e6:91:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:12:80:E3:D1:1C:A9:1C:37:B0:65:7E:82:0A:90:45:97:0A:DB
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/FhUSgOPRHKkcN7BlfoIKkEWXCts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.29.0/24
79.176.31.0/24
79.176.80.0/24
79.176.104.0/24
79.176.122.0/24
79.176.158.0/24
79.176.180.0/24
79.176.246.0/24
79.182.69.0/24
79.182.85.0/24
79.182.147.0/24
79.182.185.0/24
79.182.191.0/24
79.182.203.0/24
79.182.238.0/24
109.66.136.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f0:1e:2b:57:f7:e4:90:60:1f:eb:81:49:b8:83:4f:f1:72:
fd:39:a1:98:76:62:ae:ce:2c:f2:ee:80:be:28:7d:19:11:b2:
62:55:65:70:4b:a0:c8:1d:1a:ac:85:45:b0:65:52:88:19:ad:
66:df:c6:77:f4:4d:c1:48:59:d0:ba:11:88:01:1b:11:b2:31:
6c:90:a0:54:6a:8a:95:7b:4c:6a:4a:db:66:b3:0e:8d:91:08:
cd:aa:bb:da:20:7e:b2:b0:79:1a:9b:56:a4:67:a6:57:37:0e:
cd:6d:aa:fe:56:33:a9:37:86:3e:2b:24:36:73:45:d0:3b:4d:
b3:ca:93:98:0b:72:8a:94:e9:36:e9:0c:da:48:06:30:cc:98:
19:4b:7f:7a:d7:41:a9:69:98:be:bf:aa:31:12:c2:dd:7e:55:
ad:b4:fe:b2:a9:a3:88:c1:15:1a:14:83:31:e4:56:46:a8:c8:
57:79:05:65:7b:f7:41:b8:32:7f:ca:9c:ee:8c:17:72:dd:10:
c5:83:2c:ee:a9:8a:f5:f9:46:d8:5d:19:d6:1d:df:3d:14:fa:
f8:48:f2:52:22:97:2b:f0:57:b9:ac:b5:1f:01:62:db:95:85:
74:cf:5b:b6:e0:d8:41:26:b5:15:37:b4:81:c2:b6:b3:a0:15:
0d:f1:2e:e7
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAaAxgxBX4LS4QmSjDiMDqVLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODI0MDIwNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjE1MTI4MGUzZDExY2E5MWMzN2IwNjU3ZTgyMGE5MDQ1OTcwYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPLhcioldxIwhPs+8Vc22q2W2yHH
mL0LUdIBpVbh5NYUsibNktgVQhNbooA3Mgnn7W9d3HMiZelhQRCvJX6Ew/J/dzMj
g0n/+CwoaJ6gvzNm3MjczunIHMaaQw08ro4G7MPxIqgZ9yfsvjvTQJyz5JxmFqPS
TGHe1peIZcKCInDmjQ5WyQmhdkZP82jrOo0U37iCCrbW3eBnoSAXnthXUkqJnTgP
b3Lg4MhO+24jAeayS6i+Id5HDNM9QWJMpP/yzWhGyJz2ghYKqo7NeD7sCqMexc2B
V9kViv/oovMA3BsROFCx4r2s2ODYOKhYoArMuL3jhMsZNNOjjHrf5pGxOQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFBYVEoDj0RypHDewZX6CCpBFlwrbMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvRmhVU2dPUFJIS2tjTjdCbGZvSUtrRVdYQ3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAT7AdAwQA
T7AfAwQAT7BQAwQAT7BoAwQAT7B6AwQAT7CeAwQAT7C0AwQAT7D2AwQAT7ZFAwQA
T7ZVAwQAT7aTAwQAT7a5AwQAT7a/AwQAT7bLAwQAT7buAwQAbUKIMA0GCSqGSIb3
DQEBCwUAA4IBAQAF8B4rV/fkkGAf64FJuINP8XL9OaGYdmKuzizy7oC+KH0ZEbJi
VWVwS6DIHRqshUWwZVKIGa1m38Z39E3BSFnQuhGIARsRsjFskKBUaoqVe0xqSttm
sw6NkQjNqrvaIH6ysHkam1akZ6ZXNw7Nbar+VjOpN4Y+KyQ2c0XQO02zypOYC3KK
lOk26QzaSAYwzJgZS39610GpaZi+v6oxEsLdflWttP6yqaOIwRUaFIMx5FZGqMhX
eQVle/dBuDJ/ypzujBdy3RDFgyzuqYr1+UbYXRnWHd89FPr4SPJSIpcr8Fe5rLUf
AWLblYV0z1u24NhBJrUVN7SBwrazoBUN8S7n
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:54 2026 by rpki-client