Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/IoTrz55RFJYyRmIkxNckuGuJTOE.roa
File: IoTrz55RFJYyRmIkxNckuGuJTOE.roa (raw, json)
Hash identifier: TC+oJyakcDYNXakgs0tb+aARCQJkOs0SC9z+c6AN2Q4=
Subject key identifier: 22:84:EB:CF:9E:51:14:96:32:46:62:24:C4:D7:24:B8:6B:89:4C:E1
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A05BD09A7B4FBF33CF9E18A27978EBAFCE
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/IoTrz55RFJYyRmIkxNckuGuJTOE.roa
Signing time: Tue 01 Sep 2026 07:13:12 +0000
ROA not before: Tue 01 Sep 2026 07:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 79.176.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:d0:9a:7b:4f:bf:33:cf:9e:18:a2:79:78:eb:af:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 1 07:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2284ebcf9e51149632466224c4d724b86b894ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:b3:72:56:fd:4a:f6:84:df:7a:79:9e:14:
1c:b5:5f:40:45:9b:d4:e8:ba:63:f4:49:4f:93:5f:
01:22:fd:1f:87:ad:fd:9a:12:3c:07:f8:c0:c8:b6:
a7:d4:bc:69:3f:0b:9d:a8:9d:14:59:d6:e2:fd:4c:
55:a4:0c:e2:e5:54:00:f6:c4:72:48:a6:3c:86:c5:
e3:94:50:a0:55:82:90:5b:23:31:74:84:09:d8:04:
b5:7b:de:09:44:a6:2a:3b:d5:78:53:30:26:32:cd:
a7:a0:99:f3:dd:32:27:4d:f9:50:1c:47:4b:bd:ba:
5f:e6:ae:51:e5:c9:92:9d:11:77:53:91:32:f5:75:
9c:a9:e1:2d:43:3f:11:a5:30:7d:2a:46:9c:ab:8b:
aa:d4:04:30:ea:18:03:cb:5c:6d:91:cf:be:65:2a:
6d:d4:24:97:92:3c:f8:d7:75:c9:5e:33:a2:f3:2b:
34:e9:59:e6:ab:ca:7b:f2:bc:22:2f:6a:ec:3a:3b:
01:41:8b:d5:14:fd:33:fa:6b:8a:ae:46:a8:e1:1f:
80:1a:4b:c6:87:b0:8f:93:26:3b:c1:0e:3f:d0:97:
8c:a2:94:86:de:16:50:40:aa:09:e5:7c:dd:ee:d4:
de:68:67:87:bc:5f:ba:4b:9c:dd:b8:6c:4b:c0:7a:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:EB:CF:9E:51:14:96:32:46:62:24:C4:D7:24:B8:6B:89:4C:E1
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/IoTrz55RFJYyRmIkxNckuGuJTOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.27.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8c:bb:04:6f:db:fa:5d:13:61:a2:a0:e6:c5:d7:28:81:1e:
c3:fb:9d:0e:22:1a:a2:40:7e:98:6a:37:1f:b6:27:fb:93:f2:
c8:09:9c:5b:d1:db:3a:61:46:9c:2d:b4:58:f6:6d:1e:07:93:
fe:c1:bd:4f:a8:3a:91:c7:55:d2:74:17:9e:89:3d:33:25:c9:
8e:0c:e5:f7:45:c0:e4:4e:bc:ac:7d:e0:87:28:44:e6:80:fd:
34:a6:d2:3f:6f:b5:1f:f5:b4:dd:a8:4b:51:f0:ce:55:16:75:
7a:2f:a8:a2:b5:c5:eb:84:fa:1f:48:2d:11:f8:b3:d5:6c:3b:
de:7a:3f:5a:42:c2:88:b1:29:94:21:ae:89:49:ff:05:fe:dc:
3b:f3:64:bb:bf:44:73:a6:d1:a9:3a:ca:07:69:cc:ed:30:f9:
2a:c7:cf:c9:d1:87:06:e4:16:ed:02:f2:ae:d5:31:18:d9:14:
35:56:8d:75:f4:c2:ff:30:bc:48:53:50:57:9b:a3:8f:da:d3:
e8:4f:d7:08:c3:15:d8:8d:0c:7c:6d:0f:9d:e3:e9:31:40:ce:
d8:84:01:8f:a2:47:f0:96:11:6e:0a:d1:8e:3b:8b:f0:7b:cb:
43:ec:68:fe:96:98:fc:04:3e:27:92:ab:3a:6a:44:14:8b:ac:
0d:c2:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:50:13 2026 by rpki-client