Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/FuVGzPvkQJkG9eNFZe0POcK14m8.roa
File: FuVGzPvkQJkG9eNFZe0POcK14m8.roa (raw, json)
Hash identifier: BIOPaWgTG96pxjQBN7n1F1OrLDWISAorA7btKvOT3n4=
Subject key identifier: 16:E5:46:CC:FB:E4:40:99:06:F5:E3:45:65:ED:0F:39:C2:B5:E2:6F
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A024CD47C61E9868A5AB5AD19397070824
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/FuVGzPvkQJkG9eNFZe0POcK14m8.roa
Signing time: Fri 21 Aug 2026 14:50:28 +0000
ROA not before: Fri 21 Aug 2026 14:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 79.176.64.0/24 maxlen: 24
79.176.110.0/24 maxlen: 24
79.176.112.0/24 maxlen: 24
109.66.51.0/24 maxlen: 24
109.66.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:cd:47:c6:1e:98:68:a5:ab:5a:d1:93:97:07:08:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 21 14:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e546ccfbe4409906f5e34565ed0f39c2b5e26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:63:fc:e4:99:ad:0a:82:25:01:2a:16:ab:
19:bb:d7:84:7d:2b:e6:f1:24:3e:3a:8f:59:71:4e:
e4:4d:8d:32:51:9a:68:51:5d:47:a0:52:97:be:be:
5f:c9:2a:d7:75:b8:ea:ad:e5:94:6a:b3:01:df:0f:
00:d7:aa:36:b0:c4:b7:3d:69:bc:ca:f4:bf:29:73:
20:68:a3:30:4b:14:ed:d3:fe:70:88:7d:2f:8d:cf:
5e:b4:8b:51:47:be:f2:31:ec:aa:a6:61:ec:c0:ea:
26:27:00:25:23:b5:fb:62:b3:b1:b7:00:62:90:c8:
6e:ed:f8:ea:a7:35:3d:63:f0:ca:8d:60:ab:d1:13:
d9:fa:6f:bb:78:3e:f3:34:56:57:87:6d:1c:a8:ff:
e1:4a:5a:53:bf:ed:db:8d:b0:49:c1:3d:8e:88:fb:
d7:74:a0:1c:1d:d9:34:43:ae:f4:16:09:01:05:23:
9c:85:8a:71:f8:69:a1:37:1c:cb:3c:6f:91:66:4f:
fb:47:f4:85:fd:0d:89:3b:7b:ee:9d:3e:35:a5:c7:
2f:ed:c9:87:74:63:80:0e:d4:20:a4:42:8f:04:18:
4d:fd:ae:f1:b3:73:90:3b:3d:aa:9a:03:61:13:39:
a3:43:e4:91:d7:c7:0e:8e:25:a0:78:c8:4c:68:dd:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:46:CC:FB:E4:40:99:06:F5:E3:45:65:ED:0F:39:C2:B5:E2:6F
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/FuVGzPvkQJkG9eNFZe0POcK14m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.64.0/24
79.176.110.0/24
79.176.112.0/24
109.66.51.0/24
109.66.54.0/24
Signature Algorithm: sha256WithRSAEncryption
90:25:2b:d2:83:7b:03:93:eb:58:54:2c:12:61:16:a4:43:34:
8f:b3:1b:50:07:29:f8:51:5b:03:db:c2:69:df:31:8c:94:54:
2d:57:21:dc:f8:86:02:35:e4:bb:0e:78:04:3e:b6:23:cc:73:
39:76:26:58:99:c8:80:56:da:d5:36:85:f1:11:dc:d7:e7:e4:
47:ee:3c:33:65:a0:72:2f:1c:d9:7c:d2:9f:f9:00:c5:e4:84:
95:dc:d0:db:3d:bd:4e:da:a8:7e:d5:4c:70:24:73:df:e8:78:
94:40:7c:27:79:ec:6e:77:71:a1:12:6b:db:56:dc:e3:70:ad:
27:b0:5e:99:15:ad:c0:18:84:e1:6b:5e:6d:ef:26:81:2e:2c:
b6:94:a8:4c:e5:11:04:37:f5:c1:b7:68:bb:f5:0f:40:d8:fb:
1c:d2:f5:36:fa:c2:e7:8f:7c:ad:1a:a6:96:fe:0a:60:b8:fc:
43:5d:74:3c:ee:b1:a4:1d:46:98:ea:ed:82:b9:ae:62:d9:68:
b9:6b:85:74:c1:2d:13:7d:91:a2:1d:b9:ad:4e:64:00:bd:55:
3e:58:8a:79:af:fd:83:6f:be:3e:62:fa:94:8f:e3:d9:91:48:
56:66:ed:ec:e0:fb:15:67:a4:19:1d:3f:2e:e7:34:b3:5d:a2:
57:9f:00:60
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaAkzUfGHphopata0ZOXBwgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODIxMTQ1MDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmU1NDZjY2ZiZTQ0MDk5MDZmNWUzNDU2NWVkMGYzOWMyYjVlMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBj/OSZrQqCJQEqFqsZu9eEfSvm
8SQ+Oo9ZcU7kTY0yUZpoUV1HoFKXvr5fySrXdbjqreWUarMB3w8A16o2sMS3PWm8
yvS/KXMgaKMwSxTt0/5wiH0vjc9etItRR77yMeyqpmHswOomJwAlI7X7YrOxtwBi
kMhu7fjqpzU9Y/DKjWCr0RPZ+m+7eD7zNFZXh20cqP/hSlpTv+3bjbBJwT2OiPvX
dKAcHdk0Q670FgkBBSOchYpx+GmhNxzLPG+RZk/7R/SF/Q2JO3vunT41pccv7cmH
dGOADtQgpEKPBBhN/a7xs3OQOz2qmgNhEzmjQ+SR18cOjiWgeMhMaN0XJQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBblRsz75ECZBvXjRWXtDznCteJvMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvRnVWR3pQdmtRSmtHOWVORlplMFBPY0sxNG04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAT7BAAwQA
T7BuAwQAT7BwAwQAbUIzAwQAbUI2MA0GCSqGSIb3DQEBCwUAA4IBAQCQJSvSg3sD
k+tYVCwSYRakQzSPsxtQByn4UVsD28Jp3zGMlFQtVyHc+IYCNeS7DngEPrYjzHM5
diZYmciAVtrVNoXxEdzX5+RH7jwzZaByLxzZfNKf+QDF5ISV3NDbPb1O2qh+1Uxw
JHPf6HiUQHwneexud3GhEmvbVtzjcK0nsF6ZFa3AGITha15t7yaBLiy2lKhM5REE
N/XBt2i79Q9A2Psc0vU2+sLnj3ytGqaW/gpguPxDXXQ87rGkHUaY6u2Cua5i2Wi5
a4V0wS0TfZGiHbmtTmQAvVU+WIp5r/2Db74+YvqUj+PZkUhWZu3s4PsVZ6QZHT8u
5zSzXaJXnwBg
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:43 2026 by rpki-client