Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/KhogcX4MfNpOmEDEO-hdjTqAdik.roa
File: KhogcX4MfNpOmEDEO-hdjTqAdik.roa (raw, json)
Hash identifier: HNo3UQtAXYwbBTaOjr06MxwBvPJXpUU1kJgDKBu2nPM=
Subject key identifier: 2A:1A:20:71:7E:0C:7C:DA:4E:98:40:C4:3B:E8:5D:8D:3A:80:76:29
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FFFE7C8CF53D92E4845FC5E3DC1501F1E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/KhogcX4MfNpOmEDEO-hdjTqAdik.roa
Signing time: Fri 14 Aug 2026 10:53:28 +0000
ROA not before: Fri 14 Aug 2026 10:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 79.176.217.0/24 maxlen: 24
79.176.249.0/24 maxlen: 24
79.176.254.0/24 maxlen: 24
79.182.255.0/24 maxlen: 24
79.183.103.0/24 maxlen: 24
109.66.38.0/24 maxlen: 24
109.66.46.0/24 maxlen: 24
109.66.102.0/24 maxlen: 24
109.66.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:e7:c8:cf:53:d9:2e:48:45:fc:5e:3d:c1:50:1f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 14 10:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a1a20717e0c7cda4e9840c43be85d8d3a807629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:75:e5:bc:0e:c3:53:6a:77:f0:38:19:46:
7f:c3:5d:97:f9:57:96:d4:0a:b2:26:77:fe:3a:4f:
9c:b0:df:c9:b3:c3:0d:a6:c7:52:cf:e7:25:ff:ca:
f6:e4:da:e5:5f:de:2b:33:17:6c:9a:98:a3:d7:09:
a3:9b:ec:89:d3:46:3c:45:7f:c4:8e:10:ed:b3:e1:
0e:58:61:0c:ef:74:1f:b8:20:cd:f8:6a:a6:0d:f6:
70:b3:1c:43:59:e2:08:98:c5:a6:37:fb:7e:04:17:
9f:d9:80:76:99:d7:4c:c7:b3:0b:b0:07:b9:aa:03:
9f:ef:16:58:34:91:d9:74:cf:47:c0:4d:86:2b:98:
a8:95:6d:d2:85:2f:68:33:fc:0f:23:4b:2e:85:7b:
8f:96:0f:bd:14:e9:df:cf:22:88:dc:03:96:d9:18:
2c:bd:2c:67:dd:24:9d:0c:ec:44:cb:9f:14:02:b4:
86:e3:55:70:19:a0:64:02:3b:87:c2:56:af:62:73:
40:00:f1:81:8b:5f:e2:2e:90:64:3b:af:86:6b:b4:
48:3b:3b:ac:99:94:32:64:87:f9:16:af:11:aa:02:
d0:54:d4:13:34:be:42:32:bd:8c:77:61:2c:00:55:
88:53:db:0a:fc:0e:07:1f:fe:66:5a:ea:7a:76:b9:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:20:71:7E:0C:7C:DA:4E:98:40:C4:3B:E8:5D:8D:3A:80:76:29
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/KhogcX4MfNpOmEDEO-hdjTqAdik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.217.0/24
79.176.249.0/24
79.176.254.0/24
79.182.255.0/24
79.183.103.0/24
109.66.38.0/24
109.66.46.0/24
109.66.102.0/24
109.66.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d1:00:88:5b:0b:55:43:44:f1:2e:53:0e:10:f5:61:8a:9c:
78:10:bb:d5:fe:63:14:1f:de:1d:77:1a:1e:ef:bd:d7:38:51:
86:aa:81:84:61:b1:27:75:cd:83:e5:76:54:d5:48:35:e5:2f:
8d:e1:a0:29:75:b0:c5:1c:47:62:ac:15:7b:2f:37:13:ac:8d:
03:96:eb:b5:96:46:59:6d:f8:f1:e2:79:20:34:b1:68:da:bc:
76:3c:50:24:46:29:4d:fe:93:5c:53:a4:3c:35:88:9a:56:08:
e9:47:f2:63:0c:95:8d:ce:06:34:3a:13:08:c9:fa:fe:13:2a:
82:e8:60:e0:75:b0:bc:6f:4b:68:15:18:6e:c3:ed:62:5d:c9:
a2:ae:15:4c:e2:f8:3a:0c:5c:e4:fc:7f:23:1a:1b:5a:10:a0:
f6:2b:8e:24:d0:a7:76:4d:3d:75:7a:dd:76:05:ca:21:2c:02:
d3:bf:99:3a:f6:1f:54:99:d0:75:ed:75:71:59:8e:c8:5a:23:
4c:c4:71:76:f8:90:e6:72:77:f6:c8:3c:4c:a1:1e:90:c2:f1:
a6:f4:6f:c1:23:a8:30:32:c3:66:15:d6:f1:6c:f5:91:50:54:
4a:5b:28:26:0f:c0:70:10:b0:67:e3:23:12:8a:c2:8f:c5:6c:
7e:98:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:37 2026 by rpki-client