Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/OTG1xr0Zd6lqCWhdTILtPVlruu8.roa
File: OTG1xr0Zd6lqCWhdTILtPVlruu8.roa (raw, json)
Hash identifier: LgNPdsxip6J6KN5mepHWLwjGzFVOULMsrC5hoLmFAVc=
Subject key identifier: 39:31:B5:C6:BD:19:77:A9:6A:09:68:5D:4C:82:ED:3D:59:6B:BA:EF
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF8A020535324472EC87F895797F4EBA4
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/OTG1xr0Zd6lqCWhdTILtPVlruu8.roa
Signing time: Thu 13 Aug 2026 00:57:51 +0000
ROA not before: Thu 13 Aug 2026 00:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.176.1.0/24 maxlen: 24
79.176.2.0/24 maxlen: 24
79.176.3.0/24 maxlen: 24
79.176.4.0/24 maxlen: 24
79.176.5.0/24 maxlen: 24
79.176.6.0/24 maxlen: 24
79.176.7.0/24 maxlen: 24
79.176.8.0/24 maxlen: 24
79.176.9.0/24 maxlen: 24
79.176.10.0/24 maxlen: 24
79.176.11.0/24 maxlen: 24
79.176.12.0/24 maxlen: 24
79.176.13.0/24 maxlen: 24
79.176.14.0/24 maxlen: 24
79.176.15.0/24 maxlen: 24
79.176.16.0/24 maxlen: 24
79.176.17.0/24 maxlen: 24
79.176.18.0/24 maxlen: 24
79.176.19.0/24 maxlen: 24
79.176.20.0/24 maxlen: 24
79.176.21.0/24 maxlen: 24
79.176.37.0/24 maxlen: 24
79.176.38.0/24 maxlen: 24
79.176.43.0/24 maxlen: 24
79.176.51.0/24 maxlen: 24
79.176.56.0/24 maxlen: 24
79.176.57.0/24 maxlen: 24
79.176.59.0/24 maxlen: 24
79.176.62.0/24 maxlen: 24
79.176.68.0/24 maxlen: 24
79.176.72.0/24 maxlen: 24
79.176.76.0/24 maxlen: 24
79.176.79.0/24 maxlen: 24
79.176.84.0/24 maxlen: 24
79.176.88.0/24 maxlen: 24
79.176.89.0/24 maxlen: 24
79.176.91.0/24 maxlen: 24
79.176.95.0/24 maxlen: 24
79.176.98.0/24 maxlen: 24
79.176.99.0/24 maxlen: 24
79.176.108.0/24 maxlen: 24
79.176.116.0/24 maxlen: 24
79.176.117.0/24 maxlen: 24
79.176.121.0/24 maxlen: 24
79.176.123.0/24 maxlen: 24
79.176.124.0/24 maxlen: 24
79.176.129.0/24 maxlen: 24
79.176.136.0/24 maxlen: 24
79.176.137.0/24 maxlen: 24
79.176.138.0/24 maxlen: 24
79.176.151.0/24 maxlen: 24
79.176.152.0/24 maxlen: 24
79.176.154.0/24 maxlen: 24
79.176.155.0/24 maxlen: 24
79.176.157.0/24 maxlen: 24
79.176.159.0/24 maxlen: 24
79.176.164.0/24 maxlen: 24
79.176.166.0/24 maxlen: 24
79.176.168.0/24 maxlen: 24
79.176.175.0/24 maxlen: 24
79.176.183.0/24 maxlen: 24
79.176.191.0/24 maxlen: 24
79.176.192.0/24 maxlen: 24
79.176.193.0/24 maxlen: 24
79.176.194.0/24 maxlen: 24
79.176.195.0/24 maxlen: 24
79.176.202.0/24 maxlen: 24
79.176.210.0/24 maxlen: 24
79.176.217.0/24 maxlen: 24
79.176.222.0/24 maxlen: 24
79.176.226.0/24 maxlen: 24
79.176.228.0/24 maxlen: 24
79.176.232.0/24 maxlen: 24
79.176.234.0/24 maxlen: 24
79.176.242.0/24 maxlen: 24
79.176.244.0/24 maxlen: 24
79.176.248.0/24 maxlen: 24
79.176.249.0/24 maxlen: 24
79.176.254.0/24 maxlen: 24
79.182.0.0/24 maxlen: 24
79.182.1.0/24 maxlen: 24
79.182.2.0/24 maxlen: 24
79.182.3.0/24 maxlen: 24
79.182.4.0/24 maxlen: 24
79.182.5.0/24 maxlen: 24
79.182.6.0/24 maxlen: 24
79.182.7.0/24 maxlen: 24
79.182.8.0/24 maxlen: 24
79.182.9.0/24 maxlen: 24
79.182.10.0/24 maxlen: 24
79.182.11.0/24 maxlen: 24
79.182.12.0/24 maxlen: 24
79.182.13.0/24 maxlen: 24
79.182.14.0/24 maxlen: 24
79.182.15.0/24 maxlen: 24
79.182.16.0/24 maxlen: 24
79.182.17.0/24 maxlen: 24
79.182.18.0/24 maxlen: 24
79.182.19.0/24 maxlen: 24
79.182.20.0/24 maxlen: 24
79.182.21.0/24 maxlen: 24
79.182.32.0/24 maxlen: 24
79.182.33.0/24 maxlen: 24
79.182.35.0/24 maxlen: 24
79.182.39.0/24 maxlen: 24
79.182.43.0/24 maxlen: 24
79.182.46.0/24 maxlen: 24
79.182.50.0/24 maxlen: 24
79.182.51.0/24 maxlen: 24
79.182.53.0/24 maxlen: 24
79.182.54.0/24 maxlen: 24
79.182.59.0/24 maxlen: 24
79.182.60.0/24 maxlen: 24
79.182.61.0/24 maxlen: 24
79.182.67.0/24 maxlen: 24
79.182.71.0/24 maxlen: 24
79.182.73.0/24 maxlen: 24
79.182.77.0/24 maxlen: 24
79.182.79.0/24 maxlen: 24
79.182.81.0/24 maxlen: 24
79.182.88.0/24 maxlen: 24
79.182.96.0/24 maxlen: 24
79.182.98.0/24 maxlen: 24
79.182.100.0/24 maxlen: 24
79.182.107.0/24 maxlen: 24
79.182.115.0/24 maxlen: 24
79.182.117.0/24 maxlen: 24
79.182.119.0/24 maxlen: 24
79.182.121.0/24 maxlen: 24
79.182.124.0/24 maxlen: 24
79.182.125.0/24 maxlen: 24
79.182.127.0/24 maxlen: 24
79.182.132.0/24 maxlen: 24
79.182.134.0/24 maxlen: 24
79.182.138.0/24 maxlen: 24
79.182.145.0/24 maxlen: 24
79.182.146.0/24 maxlen: 24
79.182.149.0/24 maxlen: 24
79.182.155.0/24 maxlen: 24
79.182.162.0/24 maxlen: 24
79.182.172.0/24 maxlen: 24
79.182.173.0/24 maxlen: 24
79.182.174.0/24 maxlen: 24
79.182.179.0/24 maxlen: 24
79.182.187.0/24 maxlen: 24
79.182.189.0/24 maxlen: 24
79.182.190.0/24 maxlen: 24
79.182.192.0/24 maxlen: 24
79.182.195.0/24 maxlen: 24
79.182.197.0/24 maxlen: 24
79.182.209.0/24 maxlen: 24
79.182.216.0/24 maxlen: 24
79.182.218.0/24 maxlen: 24
79.182.220.0/24 maxlen: 24
79.182.228.0/24 maxlen: 24
79.182.229.0/24 maxlen: 24
79.182.234.0/24 maxlen: 24
79.182.243.0/24 maxlen: 24
79.182.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a0:20:53:53:24:47:2e:c8:7f:89:57:97:f4:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 13 00:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3931b5c6bd1977a96a09685d4c82ed3d596bbaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:0b:5f:b7:ed:55:ac:90:fb:0f:13:97:97:
b0:d9:2c:b7:3d:d7:d6:d5:71:f4:7a:a4:ef:23:83:
c5:5f:dc:77:76:83:39:da:c5:6e:03:c7:9a:e3:db:
2d:08:94:34:0f:2e:a4:97:eb:4b:02:d0:38:44:51:
6e:db:e0:c0:92:60:c7:cb:40:df:23:42:1b:de:0c:
18:86:ad:40:07:04:38:9b:a6:67:52:38:c8:1c:25:
42:76:90:08:24:fb:34:73:58:a6:9d:80:02:ae:46:
ce:4d:cd:ff:38:81:31:88:7d:b5:d5:7a:d8:92:8d:
61:8e:f3:f1:8c:f9:2d:3d:6a:6f:b7:2b:2d:16:e0:
6c:75:b0:e1:d5:7f:93:f1:52:7b:df:b7:46:2f:69:
57:59:2b:17:58:16:90:6a:b8:08:b9:19:ce:3c:06:
bb:bc:12:cd:40:5f:5f:36:03:65:23:02:71:21:b7:
f9:25:20:cf:a3:56:bf:a3:59:28:be:a2:b6:70:25:
a1:fe:dc:6d:ed:01:70:4c:93:18:24:60:40:8d:86:
34:e4:82:71:24:d9:a6:be:b6:1e:2d:74:45:98:f8:
3e:a5:4f:0b:9f:69:d1:9b:e5:90:5a:74:6f:c4:3b:
91:d0:8c:6a:a7:aa:57:82:0f:cf:8d:8f:d9:c8:7c:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:31:B5:C6:BD:19:77:A9:6A:09:68:5D:4C:82:ED:3D:59:6B:BA:EF
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/OTG1xr0Zd6lqCWhdTILtPVlruu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.1.0-79.176.21.255
79.176.37.0-79.176.38.255
79.176.43.0/24
79.176.51.0/24
79.176.56.0/23
79.176.59.0/24
79.176.62.0/24
79.176.68.0/24
79.176.72.0/24
79.176.76.0/24
79.176.79.0/24
79.176.84.0/24
79.176.88.0/23
79.176.91.0/24
79.176.95.0/24
79.176.98.0/23
79.176.108.0/24
79.176.116.0/23
79.176.121.0/24
79.176.123.0-79.176.124.255
79.176.129.0/24
79.176.136.0-79.176.138.255
79.176.151.0-79.176.152.255
79.176.154.0/23
79.176.157.0/24
79.176.159.0/24
79.176.164.0/24
79.176.166.0/24
79.176.168.0/24
79.176.175.0/24
79.176.183.0/24
79.176.191.0-79.176.195.255
79.176.202.0/24
79.176.210.0/24
79.176.217.0/24
79.176.222.0/24
79.176.226.0/24
79.176.228.0/24
79.176.232.0/24
79.176.234.0/24
79.176.242.0/24
79.176.244.0/24
79.176.248.0/23
79.176.254.0/24
79.182.0.0-79.182.21.255
79.182.32.0/23
79.182.35.0/24
79.182.39.0/24
79.182.43.0/24
79.182.46.0/24
79.182.50.0/23
79.182.53.0-79.182.54.255
79.182.59.0-79.182.61.255
79.182.67.0/24
79.182.71.0/24
79.182.73.0/24
79.182.77.0/24
79.182.79.0/24
79.182.81.0/24
79.182.88.0/24
79.182.96.0/24
79.182.98.0/24
79.182.100.0/24
79.182.107.0/24
79.182.115.0/24
79.182.117.0/24
79.182.119.0/24
79.182.121.0/24
79.182.124.0/23
79.182.127.0/24
79.182.132.0/24
79.182.134.0/24
79.182.138.0/24
79.182.145.0-79.182.146.255
79.182.149.0/24
79.182.155.0/24
79.182.162.0/24
79.182.172.0-79.182.174.255
79.182.179.0/24
79.182.187.0/24
79.182.189.0-79.182.190.255
79.182.192.0/24
79.182.195.0/24
79.182.197.0/24
79.182.209.0/24
79.182.216.0/24
79.182.218.0/24
79.182.220.0/24
79.182.228.0/23
79.182.234.0/24
79.182.243.0/24
79.182.255.0/24
Signature Algorithm: sha256WithRSAEncryption
20:01:5a:3d:c6:a6:e1:01:91:bc:9b:53:a1:a0:3c:f9:e3:82:
50:67:92:9c:f1:c4:02:f4:2e:11:6a:46:a5:dd:ca:72:67:c9:
e9:a9:80:43:07:da:37:1c:d3:2a:74:66:43:ee:a9:15:b9:ae:
6f:a4:29:16:d0:d8:3e:2c:1d:a2:84:c6:3b:2e:97:3a:fe:b5:
1c:1d:8a:c8:4b:36:6b:ac:b9:af:dc:fb:14:ca:3d:ac:7f:78:
ae:b8:ee:b9:73:98:75:1e:b9:07:57:8a:90:ef:6c:e7:c6:c1:
51:6b:bb:f9:a2:90:9e:a9:f0:98:98:c6:c7:aa:00:0f:02:30:
5d:cc:ec:d3:5c:69:0c:91:24:ef:c0:5e:70:5e:9e:c2:02:d8:
26:4b:35:cc:2e:dc:e6:ce:79:fd:0c:27:a4:db:92:a3:48:48:
4c:db:1d:f4:36:94:2d:af:4a:54:dc:4c:ba:49:09:00:ce:02:
88:61:fa:ac:68:8e:19:e5:55:ed:51:71:f4:96:c9:7c:36:43:
4c:ae:e4:e5:ee:f9:76:b2:2b:5d:8b:14:de:3e:84:25:91:43:
7b:ea:12:64:1b:1f:0a:65:06:b8:f4:bd:22:76:c0:7b:30:88:
c6:51:71:56:b1:39:13:0c:01:a9:50:96:2b:70:ee:bc:67:49:
bc:16:19:1b
-----BEGIN CERTIFICATE-----
MIIHiDCCBnCgAwIBAgISAZ/4oCBTUyRHLsh/iVeX9OukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODEzMDA1NzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTMxYjVjNmJkMTk3N2E5NmEwOTY4NWQ0YzgyZWQzZDU5NmJiYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlULX7ftVayQ+w8Tl5ew2Sy3PdfW
1XH0eqTvI4PFX9x3doM52sVuA8ea49stCJQ0Dy6kl+tLAtA4RFFu2+DAkmDHy0Df
I0Ib3gwYhq1ABwQ4m6ZnUjjIHCVCdpAIJPs0c1imnYACrkbOTc3/OIExiH211XrY
ko1hjvPxjPktPWpvtystFuBsdbDh1X+T8VJ737dGL2lXWSsXWBaQargIuRnOPAa7
vBLNQF9fNgNlIwJxIbf5JSDPo1a/o1kovqK2cCWh/txt7QFwTJMYJGBAjYY05IJx
JNmmvrYeLXRFmPg+pU8Ln2nRm+WQWnRvxDuR0Ixqp6pXgg/PjY/ZyHwYAQIDAQAB
o4IElDCCBJAwHQYDVR0OBBYEFDkxtca9GXepagloXUyC7T1Za7rvMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvT1RHMXhyMFpkNmxxQ1doZFRJTHRQVmxydXU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICqAYIKwYBBQUHAQcBAf8EggKXMIICkzCCAo8EAgABMIIC
hzAMAwQAT7ABAwQBT7AUMAwDBABPsCUDBABPsCYDBABPsCsDBABPsDMDBAFPsDgD
BABPsDsDBABPsD4DBABPsEQDBABPsEgDBABPsEwDBABPsE8DBABPsFQDBAFPsFgD
BABPsFsDBABPsF8DBAFPsGIDBABPsGwDBAFPsHQDBABPsHkwDAMEAE+wewMEAE+w
fAMEAE+wgTAMAwQDT7CIAwQAT7CKMAwDBABPsJcDBABPsJgDBAFPsJoDBABPsJ0D
BABPsJ8DBABPsKQDBABPsKYDBABPsKgDBABPsK8DBABPsLcwDAMEAE+wvwMEAk+w
wAMEAE+wygMEAE+w0gMEAE+w2QMEAE+w3gMEAE+w4gMEAE+w5AMEAE+w6AMEAE+w
6gMEAE+w8gMEAE+w9AMEAU+w+AMEAE+w/jALAwMBT7YDBAFPthQDBAFPtiADBABP
tiMDBABPticDBABPtisDBABPti4DBAFPtjIwDAMEAE+2NQMEAE+2NjAMAwQAT7Y7
AwQBT7Y8AwQAT7ZDAwQAT7ZHAwQAT7ZJAwQAT7ZNAwQAT7ZPAwQAT7ZRAwQAT7ZY
AwQAT7ZgAwQAT7ZiAwQAT7ZkAwQAT7ZrAwQAT7ZzAwQAT7Z1AwQAT7Z3AwQAT7Z5
AwQBT7Z8AwQAT7Z/AwQAT7aEAwQAT7aGAwQAT7aKMAwDBABPtpEDBABPtpIDBABP
tpUDBABPtpsDBABPtqIwDAMEAk+2rAMEAE+2rgMEAE+2swMEAE+2uzAMAwQAT7a9
AwQAT7a+AwQAT7bAAwQAT7bDAwQAT7bFAwQAT7bRAwQAT7bYAwQAT7baAwQAT7bc
AwQBT7bkAwQAT7bqAwQAT7bzAwQAT7b/MA0GCSqGSIb3DQEBCwUAA4IBAQAgAVo9
xqbhAZG8m1OhoDz544JQZ5Kc8cQC9C4Rakal3cpyZ8npqYBDB9o3HNMqdGZD7qkV
ua5vpCkW0Ng+LB2ihMY7Lpc6/rUcHYrISzZrrLmv3PsUyj2sf3iuuO65c5h1HrkH
V4qQ72znxsFRa7v5opCeqfCYmMbHqgAPAjBdzOzTXGkMkSTvwF5wXp7CAtgmSzXM
Ltzmznn9DCek25KjSEhM2x30NpQtr0pU3Ey6SQkAzgKIYfqsaI4Z5VXtUXH0lsl8
NkNMruTl7vl2sitdixTePoQlkUN76hJkGx8KZQa49L0idsB7MIjGUXFWsTkTDAGp
UJYrcO68Z0m8Fhkb
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:55 2026 by rpki-client