Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/GxAJvfNu_YAx1xmPlVB70w4vxao.roa
File: GxAJvfNu_YAx1xmPlVB70w4vxao.roa (raw, json)
Hash identifier: 2o38jEWtVHNdNnYvzz36iEDym9g15UThVPFrUcmHsuM=
Subject key identifier: 1B:10:09:BD:F3:6E:FD:80:31:D7:19:8F:95:50:7B:D3:0E:2F:C5:AA
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FEEA05048C7AA8F9D96DCF51A21E94E24
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/GxAJvfNu_YAx1xmPlVB70w4vxao.roa
Signing time: Tue 11 Aug 2026 02:21:51 +0000
ROA not before: Tue 11 Aug 2026 02:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 79.176.23.0/24 maxlen: 24
79.176.24.0/24 maxlen: 24
79.176.25.0/24 maxlen: 24
79.176.27.0/24 maxlen: 24
79.176.30.0/24 maxlen: 24
79.176.32.0/24 maxlen: 24
79.176.34.0/24 maxlen: 24
79.176.37.0/24 maxlen: 24
79.176.42.0/24 maxlen: 24
79.176.44.0/24 maxlen: 24
79.176.46.0/24 maxlen: 24
79.176.48.0/24 maxlen: 24
79.176.50.0/24 maxlen: 24
79.176.53.0/24 maxlen: 24
79.176.54.0/24 maxlen: 24
79.176.58.0/24 maxlen: 24
79.176.60.0/24 maxlen: 24
79.176.62.0/24 maxlen: 24
79.176.63.0/24 maxlen: 24
79.176.65.0/24 maxlen: 24
79.176.66.0/24 maxlen: 24
79.176.67.0/24 maxlen: 24
79.176.69.0/24 maxlen: 24
79.176.74.0/24 maxlen: 24
79.176.75.0/24 maxlen: 24
79.176.81.0/24 maxlen: 24
79.176.90.0/24 maxlen: 24
79.176.92.0/24 maxlen: 24
79.176.100.0/24 maxlen: 24
79.176.101.0/24 maxlen: 24
79.176.105.0/24 maxlen: 24
79.176.118.0/24 maxlen: 24
79.176.125.0/24 maxlen: 24
79.176.126.0/24 maxlen: 24
79.176.127.0/24 maxlen: 24
79.176.129.0/24 maxlen: 24
79.176.135.0/24 maxlen: 24
79.176.139.0/24 maxlen: 24
79.176.141.0/24 maxlen: 24
79.176.144.0/24 maxlen: 24
79.176.155.0/24 maxlen: 24
79.176.168.0/24 maxlen: 24
79.176.169.0/24 maxlen: 24
79.176.170.0/24 maxlen: 24
79.176.174.0/24 maxlen: 24
79.176.178.0/24 maxlen: 24
79.176.182.0/24 maxlen: 24
79.176.184.0/24 maxlen: 24
79.176.187.0/24 maxlen: 24
79.176.189.0/24 maxlen: 24
79.176.195.0/24 maxlen: 24
79.176.198.0/24 maxlen: 24
79.176.201.0/24 maxlen: 24
79.176.204.0/24 maxlen: 24
79.176.209.0/24 maxlen: 24
79.176.211.0/24 maxlen: 24
79.176.215.0/24 maxlen: 24
79.176.218.0/24 maxlen: 24
79.176.220.0/24 maxlen: 24
79.176.225.0/24 maxlen: 24
79.176.233.0/24 maxlen: 24
79.176.237.0/24 maxlen: 24
79.176.238.0/24 maxlen: 24
79.176.240.0/24 maxlen: 24
79.176.241.0/24 maxlen: 24
79.176.253.0/24 maxlen: 24
79.182.22.0/24 maxlen: 24
79.182.23.0/24 maxlen: 24
79.182.26.0/24 maxlen: 24
79.182.27.0/24 maxlen: 24
79.182.28.0/24 maxlen: 24
79.182.36.0/24 maxlen: 24
79.182.38.0/24 maxlen: 24
79.182.40.0/24 maxlen: 24
79.182.44.0/24 maxlen: 24
79.182.51.0/24 maxlen: 24
79.182.55.0/24 maxlen: 24
79.182.56.0/24 maxlen: 24
79.182.58.0/24 maxlen: 24
79.182.63.0/24 maxlen: 24
79.182.64.0/24 maxlen: 24
79.182.66.0/24 maxlen: 24
79.182.72.0/24 maxlen: 24
79.182.75.0/24 maxlen: 24
79.182.76.0/24 maxlen: 24
79.182.78.0/24 maxlen: 24
79.182.82.0/24 maxlen: 24
79.182.83.0/24 maxlen: 24
79.182.89.0/24 maxlen: 24
79.182.99.0/24 maxlen: 24
79.182.102.0/24 maxlen: 24
79.182.103.0/24 maxlen: 24
79.182.104.0/24 maxlen: 24
79.182.105.0/24 maxlen: 24
79.182.107.0/24 maxlen: 24
79.182.111.0/24 maxlen: 24
79.182.112.0/24 maxlen: 24
79.182.113.0/24 maxlen: 24
79.182.114.0/24 maxlen: 24
79.182.116.0/24 maxlen: 24
79.182.120.0/24 maxlen: 24
79.182.128.0/24 maxlen: 24
79.182.130.0/24 maxlen: 24
79.182.131.0/24 maxlen: 24
79.182.139.0/24 maxlen: 24
79.182.142.0/24 maxlen: 24
79.182.143.0/24 maxlen: 24
79.182.145.0/24 maxlen: 24
79.182.146.0/24 maxlen: 24
79.182.149.0/24 maxlen: 24
79.182.152.0/24 maxlen: 24
79.182.153.0/24 maxlen: 24
79.182.156.0/24 maxlen: 24
79.182.158.0/24 maxlen: 24
79.182.164.0/24 maxlen: 24
79.182.169.0/24 maxlen: 24
79.182.170.0/24 maxlen: 24
79.182.176.0/24 maxlen: 24
79.182.181.0/24 maxlen: 24
79.182.182.0/24 maxlen: 24
79.182.186.0/24 maxlen: 24
79.182.193.0/24 maxlen: 24
79.182.201.0/24 maxlen: 24
79.182.208.0/24 maxlen: 24
79.182.211.0/24 maxlen: 24
79.182.212.0/24 maxlen: 24
79.182.213.0/24 maxlen: 24
79.182.215.0/24 maxlen: 24
79.182.217.0/24 maxlen: 24
79.182.219.0/24 maxlen: 24
79.182.221.0/24 maxlen: 24
79.182.223.0/24 maxlen: 24
79.182.225.0/24 maxlen: 24
79.182.226.0/24 maxlen: 24
79.182.230.0/24 maxlen: 24
79.182.232.0/24 maxlen: 24
79.182.233.0/24 maxlen: 24
79.182.236.0/24 maxlen: 24
79.182.243.0/24 maxlen: 24
79.182.244.0/24 maxlen: 24
79.182.249.0/24 maxlen: 24
79.182.250.0/24 maxlen: 24
79.182.253.0/24 maxlen: 24
79.182.254.0/24 maxlen: 24
79.183.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 06:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ee:a0:50:48:c7:aa:8f:9d:96:dc:f5:1a:21:e9:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 11 02:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b1009bdf36efd8031d7198f95507bd30e2fc5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:78:a6:90:1e:9d:1e:c6:1a:d7:ea:10:9e:
70:4e:ff:f9:5a:1a:f3:91:52:f8:81:43:26:60:c7:
05:67:4a:d9:1a:95:a2:06:4e:64:ba:f9:84:e5:f6:
73:be:21:62:a2:54:0f:bd:f3:94:dc:22:51:4b:cf:
6d:06:dd:17:c4:b5:ff:25:cd:c3:2c:ed:dc:99:3a:
85:8d:68:90:bb:8a:3a:89:78:bf:31:dd:0d:0b:0c:
09:a1:b7:d1:44:e5:a8:73:3d:01:d4:e9:ba:a2:2a:
4c:f7:31:a1:86:59:50:43:dd:51:1c:46:b1:1e:b6:
29:50:83:74:2e:a5:7e:37:b1:50:70:b5:42:11:fc:
65:40:8a:63:5d:4e:ff:d5:57:17:4e:87:37:e8:1d:
91:3d:26:2a:95:68:5a:90:3d:ae:4c:22:0c:0e:f2:
dc:61:da:66:2e:0c:be:37:a2:14:86:d8:69:fe:8d:
d2:75:48:0b:22:8e:46:87:7e:94:c0:1f:68:43:d6:
64:31:82:c1:80:80:91:c2:57:95:54:06:e7:b2:04:
a0:11:bf:c5:76:2e:41:fe:a8:21:0f:5a:7b:24:50:
45:24:be:1d:36:17:26:27:f9:a1:0d:08:2b:55:90:
0a:48:ae:da:3b:3f:36:93:d5:2d:5a:c3:22:9b:5f:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:10:09:BD:F3:6E:FD:80:31:D7:19:8F:95:50:7B:D3:0E:2F:C5:AA
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/GxAJvfNu_YAx1xmPlVB70w4vxao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.23.0-79.176.25.255
79.176.27.0/24
79.176.30.0/24
79.176.32.0/24
79.176.34.0/24
79.176.37.0/24
79.176.42.0/24
79.176.44.0/24
79.176.46.0/24
79.176.48.0/24
79.176.50.0/24
79.176.53.0-79.176.54.255
79.176.58.0/24
79.176.60.0/24
79.176.62.0/23
79.176.65.0-79.176.67.255
79.176.69.0/24
79.176.74.0/23
79.176.81.0/24
79.176.90.0/24
79.176.92.0/24
79.176.100.0/23
79.176.105.0/24
79.176.118.0/24
79.176.125.0-79.176.127.255
79.176.129.0/24
79.176.135.0/24
79.176.139.0/24
79.176.141.0/24
79.176.144.0/24
79.176.155.0/24
79.176.168.0-79.176.170.255
79.176.174.0/24
79.176.178.0/24
79.176.182.0/24
79.176.184.0/24
79.176.187.0/24
79.176.189.0/24
79.176.195.0/24
79.176.198.0/24
79.176.201.0/24
79.176.204.0/24
79.176.209.0/24
79.176.211.0/24
79.176.215.0/24
79.176.218.0/24
79.176.220.0/24
79.176.225.0/24
79.176.233.0/24
79.176.237.0-79.176.238.255
79.176.240.0/23
79.176.253.0/24
79.182.22.0/23
79.182.26.0-79.182.28.255
79.182.36.0/24
79.182.38.0/24
79.182.40.0/24
79.182.44.0/24
79.182.51.0/24
79.182.55.0-79.182.56.255
79.182.58.0/24
79.182.63.0-79.182.64.255
79.182.66.0/24
79.182.72.0/24
79.182.75.0-79.182.76.255
79.182.78.0/24
79.182.82.0/23
79.182.89.0/24
79.182.99.0/24
79.182.102.0-79.182.105.255
79.182.107.0/24
79.182.111.0-79.182.114.255
79.182.116.0/24
79.182.120.0/24
79.182.128.0/24
79.182.130.0/23
79.182.139.0/24
79.182.142.0/23
79.182.145.0-79.182.146.255
79.182.149.0/24
79.182.152.0/23
79.182.156.0/24
79.182.158.0/24
79.182.164.0/24
79.182.169.0-79.182.170.255
79.182.176.0/24
79.182.181.0-79.182.182.255
79.182.186.0/24
79.182.193.0/24
79.182.201.0/24
79.182.208.0/24
79.182.211.0-79.182.213.255
79.182.215.0/24
79.182.217.0/24
79.182.219.0/24
79.182.221.0/24
79.182.223.0/24
79.182.225.0-79.182.226.255
79.182.230.0/24
79.182.232.0/23
79.182.236.0/24
79.182.243.0-79.182.244.255
79.182.249.0-79.182.250.255
79.182.253.0-79.182.254.255
79.183.153.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6e:7c:2f:66:d7:62:c3:a3:88:6c:e9:1d:0e:ab:7c:17:f9:
2d:96:db:bb:f6:69:60:17:b5:46:9b:a2:a7:ae:49:fb:3d:ac:
70:36:57:d1:bb:3a:9d:ef:ef:1c:3b:56:f8:b8:4a:9b:79:a2:
79:74:97:20:2e:99:24:41:7c:e1:fa:80:88:cc:3c:c9:bb:cc:
f6:67:48:77:97:ff:3b:72:7d:e3:6d:5e:13:96:3f:ed:c3:38:
c9:0d:0b:cd:c9:d9:d7:e9:68:4e:58:36:97:b3:88:30:68:af:
d4:b7:c1:2b:8e:fd:c9:f9:cf:b0:9b:a3:3c:f8:fd:2f:34:e1:
35:fa:19:39:5e:7e:ec:12:d9:4a:0e:f5:95:f4:4e:ca:09:a0:
c5:33:e4:1d:c5:ce:2f:88:aa:c8:d8:7a:20:bc:51:36:39:58:
1f:2a:a9:03:ca:fe:83:da:ab:25:07:00:b3:06:04:f6:90:79:
0a:bf:b5:5d:35:e7:a2:4e:a7:03:7f:3f:f3:4d:e7:2e:51:b1:
e8:1e:8f:9e:25:66:e7:60:a8:c5:9b:e9:fb:dd:66:87:9d:af:
0b:30:3b:2f:e1:0c:ba:fc:11:22:77:ed:53:74:b2:b1:20:a5:
15:6d:26:28:a2:cb:ce:ee:86:01:fe:4d:f5:d1:47:22:0b:29:
43:61:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 08:34:37 2026 by rpki-client