Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/IgF2zWC81KdRs1EV0--Evnh6oao.roa
File: IgF2zWC81KdRs1EV0--Evnh6oao.roa (raw, json)
Hash identifier: Zg5weZsXjhtLqg7Ynf8aRix95RurzmnmHsyVP9G927s=
Subject key identifier: 22:01:76:CD:60:BC:D4:A7:51:B3:51:15:D3:EF:84:BE:78:7A:A1:AA
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F998FEFC065EEDF7366007FB2DD56E816
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/IgF2zWC81KdRs1EV0--Evnh6oao.roa
Signing time: Sat 25 Jul 2026 13:56:14 +0000
ROA not before: Sat 25 Jul 2026 13:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 79.176.77.0/24 maxlen: 24
79.176.213.0/24 maxlen: 24
79.182.45.0/24 maxlen: 24
109.66.24.0/24 maxlen: 24
109.66.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:8f:ef:c0:65:ee:df:73:66:00:7f:b2:dd:56:e8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 25 13:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=220176cd60bcd4a751b35115d3ef84be787aa1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:05:93:8a:a2:12:91:e5:5c:12:29:9f:17:
25:55:30:4c:58:aa:f3:97:46:21:de:57:3f:89:bc:
d2:0a:60:bb:b8:83:b9:ae:a5:4e:86:2e:a8:5f:e7:
01:e1:7d:14:cb:5f:6f:22:a2:46:b7:89:b7:c1:9a:
a5:bd:a8:a4:7e:2c:ca:5e:26:6c:ef:39:df:8b:c3:
6a:af:36:b8:7b:1e:89:ac:18:b5:f2:8d:d9:d9:00:
e0:b0:6f:ce:02:93:dc:4e:77:26:37:70:9b:9f:f5:
4c:b0:bc:b0:91:ba:2c:66:56:31:64:64:a1:6e:a1:
bf:ca:1f:1a:77:b1:a1:1a:bc:cb:fb:aa:37:bf:57:
2a:75:f9:39:b3:88:56:29:a7:89:10:d7:87:eb:1e:
22:b1:9b:d1:9c:73:39:0d:dc:2c:3e:ab:21:90:3d:
f3:0b:39:d3:da:d9:f4:9d:70:96:b5:67:6f:f5:ef:
06:d3:f0:0d:d3:d5:fe:46:56:ca:4c:c3:bf:b6:71:
e5:04:7c:a5:cd:08:35:74:7d:fc:0a:1d:a6:bd:a7:
1d:13:03:72:25:8e:f8:48:db:6e:6f:4e:52:2f:ba:
86:2b:b0:3b:ba:aa:df:7d:ef:ca:95:19:11:8c:cb:
b9:16:fb:9d:7f:ca:e6:25:c9:65:ad:4a:62:3f:40:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:76:CD:60:BC:D4:A7:51:B3:51:15:D3:EF:84:BE:78:7A:A1:AA
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/IgF2zWC81KdRs1EV0--Evnh6oao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.77.0/24
79.176.213.0/24
79.182.45.0/24
109.66.24.0/24
109.66.143.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2a:dc:da:45:bd:a1:f1:ab:62:93:51:7a:f6:bc:0a:20:56:
42:b1:fe:bf:53:1c:17:2e:ce:2b:03:a1:37:ec:8c:f8:47:c4:
c0:d6:39:ad:06:70:70:e6:38:3e:ac:5f:c9:c1:bf:6d:31:bf:
e7:a2:8a:d7:32:f7:69:24:a3:86:4a:f6:2a:12:56:c6:01:0e:
c8:11:1d:f6:24:da:0c:14:eb:45:fd:9b:a5:9c:90:1f:fd:e2:
33:1b:4d:93:ea:39:3f:93:37:13:1e:20:16:a9:b4:ee:be:f4:
27:c4:1b:27:78:fa:5b:12:a6:49:00:57:9f:40:de:f0:bc:18:
43:90:1a:e4:c9:fc:dc:40:09:86:b2:ff:60:92:8e:e9:91:3b:
a1:47:01:7e:c1:c4:4c:8a:18:68:7d:eb:57:27:67:4f:92:72:
2f:e9:6f:0b:3a:73:37:73:72:ae:81:32:de:50:73:ad:a3:b4:
18:8d:25:f0:82:c1:9f:39:21:07:1c:5b:3f:84:df:01:ab:d2:
a5:ef:e1:b1:f2:1f:67:92:35:0c:27:a0:1b:68:bc:2a:10:8d:
9e:42:e6:3c:cf:c3:6a:57:03:7c:95:a9:bd:d3:6d:c8:8b:61:
2a:fe:72:6a:9a:95:cd:06:1f:85:d9:6a:5f:91:e8:a2:76:8d:
c9:1c:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:38 2026 by rpki-client