Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MZVidnlXuMe9HnkCJO_3k6V057s.roa
File: MZVidnlXuMe9HnkCJO_3k6V057s.roa (raw, json)
Hash identifier: CtITPQ59jQhEGIsOcgWcP5qNJMCfopDM/8AfccV+0B0=
Subject key identifier: 31:95:62:76:79:57:B8:C7:BD:1E:79:02:24:EF:F7:93:A5:74:E7:BB
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A07F9B692482435AF7E431FF98C433C6FE
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MZVidnlXuMe9HnkCJO_3k6V057s.roa
Signing time: Tue 08 Sep 2026 06:01:26 +0000
ROA not before: Tue 08 Sep 2026 06:01:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 79.176.1.0/24 maxlen: 24
79.176.8.0/24 maxlen: 24
79.176.11.0/24 maxlen: 24
79.182.0.0/24 maxlen: 24
79.182.6.0/24 maxlen: 24
109.64.0.0/24 maxlen: 24
109.66.25.0/24 maxlen: 24
109.66.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:9b:69:24:82:43:5a:f7:e4:31:ff:98:c4:33:c6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 8 06:01:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=319562767957b8c7bd1e790224eff793a574e7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:de:73:e7:3c:23:a9:05:aa:55:c7:65:ef:
3d:86:ef:4d:c3:37:6f:9f:a3:60:91:33:d1:44:f6:
98:21:8a:a9:6d:34:4b:c9:29:74:3f:3f:6e:97:e1:
36:fd:74:f6:72:00:10:c7:d3:53:ad:a0:75:3f:bc:
5c:9a:bb:1c:ed:f8:22:2e:33:2d:39:1c:45:40:64:
d4:f7:7f:8e:7e:7e:6a:a4:d5:63:f3:5b:ef:6d:a9:
b1:a1:6e:10:45:c5:bf:85:b3:2f:62:18:8f:07:5f:
a4:ac:81:72:d0:1c:a9:e5:53:88:bb:ed:4b:13:69:
b6:e7:af:47:4c:97:8b:30:98:dd:a6:b3:09:a3:fb:
34:f0:db:28:d9:36:be:45:25:b0:43:4a:6f:6e:3a:
fd:f5:53:9d:bb:81:3a:c6:b6:83:80:e3:21:6a:74:
ed:cd:1a:5d:f0:66:60:4f:bd:cb:31:1c:fc:89:ec:
9d:69:a5:07:ac:f0:6f:e7:51:7f:89:66:ea:6d:1b:
37:7a:ea:1e:30:71:35:fe:88:2a:c8:5e:46:97:49:
09:7f:6f:d6:74:42:bf:08:39:cb:78:57:40:42:99:
d6:f5:6e:ca:f7:d0:67:38:a1:a7:f0:d2:40:b2:da:
60:c3:ca:b6:1c:19:c1:fa:e8:c8:b2:79:fd:70:1e:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:62:76:79:57:B8:C7:BD:1E:79:02:24:EF:F7:93:A5:74:E7:BB
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MZVidnlXuMe9HnkCJO_3k6V057s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.1.0/24
79.176.8.0/24
79.176.11.0/24
79.182.0.0/24
79.182.6.0/24
109.64.0.0/24
109.66.25.0/24
109.66.43.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2f:40:7c:67:53:07:7f:6a:2b:f5:c8:6c:41:36:89:30:d8:
88:64:bc:9a:8c:2a:80:08:73:05:1e:3c:b8:91:f8:c9:fd:3b:
00:be:c7:66:ce:3f:40:e9:e1:20:1e:4c:74:72:cd:38:d9:1a:
6c:07:95:4e:54:cb:36:84:bc:71:c4:f1:2f:81:89:12:48:e9:
65:29:20:e4:25:e0:9e:d2:ab:01:0a:16:1f:d5:02:47:4b:ac:
d6:e6:c8:de:e5:50:f5:0b:94:e9:77:e9:cc:ab:46:83:f1:7a:
87:ae:95:5a:7a:64:98:6b:e3:d2:dd:d7:79:c6:33:9f:b0:23:
78:44:09:d6:1e:7e:83:bf:f6:f0:1a:b2:93:ce:3d:f5:36:d5:
22:56:bd:51:27:db:6a:7f:ae:0e:0b:e4:fc:fd:da:2c:8a:60:
09:fa:af:ce:34:14:9c:de:e0:55:cf:4a:86:23:28:1d:95:1e:
b2:11:f1:c9:75:09:44:63:f0:dc:c6:19:c1:13:7e:98:0b:68:
d5:a9:8a:ee:06:3f:b3:8e:d1:58:92:3f:3c:08:48:88:d6:35:
96:8f:70:cf:a5:cd:89:81:f6:e4:5a:cf:c8:1d:0b:26:90:58:
ba:76:dc:e7:31:cc:18:0e:82:fa:44:2f:cc:f0:db:ea:bb:61:
a8:75:80:cf
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAaB/m2kkgkNa9+Qx/5jEM8b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTA4MDYwMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTk1NjI3Njc5NTdiOGM3YmQxZTc5MDIyNGVmZjc5M2E1NzRlN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxfec+c8I6kFqlXHZe89hu9Nwzdv
n6NgkTPRRPaYIYqpbTRLySl0Pz9ul+E2/XT2cgAQx9NTraB1P7xcmrsc7fgiLjMt
ORxFQGTU93+Ofn5qpNVj81vvbamxoW4QRcW/hbMvYhiPB1+krIFy0Byp5VOIu+1L
E2m2569HTJeLMJjdprMJo/s08Nso2Ta+RSWwQ0pvbjr99VOdu4E6xraDgOMhanTt
zRpd8GZgT73LMRz8ieydaaUHrPBv51F/iWbqbRs3euoeMHE1/ogqyF5Gl0kJf2/W
dEK/CDnLeFdAQpnW9W7K99BnOKGn8NJAstpgw8q2HBnB+ujIsnn9cB5ORwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDGVYnZ5V7jHvR55AiTv95OldOe7MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvTVpWaWRubFh1TWU5SG5rQ0pPXzNrNlYwNTdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAT7ABAwQA
T7AIAwQAT7ALAwQAT7YAAwQAT7YGAwQAbUAAAwQAbUIZAwQAbUIrMA0GCSqGSIb3
DQEBCwUAA4IBAQA1L0B8Z1MHf2or9chsQTaJMNiIZLyajCqACHMFHjy4kfjJ/TsA
vsdmzj9A6eEgHkx0cs042RpsB5VOVMs2hLxxxPEvgYkSSOllKSDkJeCe0qsBChYf
1QJHS6zW5sje5VD1C5Tpd+nMq0aD8XqHrpVaemSYa+PS3dd5xjOfsCN4RAnWHn6D
v/bwGrKTzj31NtUiVr1RJ9tqf64OC+T8/dosimAJ+q/ONBSc3uBVz0qGIygdlR6y
EfHJdQlEY/DcxhnBE36YC2jVqYruBj+zjtFYkj88CEiI1jWWj3DPpc2JgfbkWs/I
HQsmkFi6dtznMcwYDoL6RC/M8Nvqu2GodYDP
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:20 2026 by rpki-client