Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/PR7CvsuP3OLAbeXlD6NuUs6ahRo.roa
File: PR7CvsuP3OLAbeXlD6NuUs6ahRo.roa (raw, json)
Hash identifier: gj668oRQ4qnqqcN7sUMm9xU5W3JR/RQ9mAUcSLH+Yx0=
Subject key identifier: 3D:1E:C2:BE:CB:8F:DC:E2:C0:6D:E5:E5:0F:A3:6E:52:CE:9A:85:1A
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0A4F0E2E1670084F5A18606B1AFE10AEC
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/PR7CvsuP3OLAbeXlD6NuUs6ahRo.roa
Signing time: Tue 15 Sep 2026 12:00:45 +0000
ROA not before: Tue 15 Sep 2026 12:00:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215817
IP address blocks: 79.183.1.0/24 maxlen: 24
79.183.4.0/24 maxlen: 24
79.183.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:f0:e2:e1:67:00:84:f5:a1:86:06:b1:af:e1:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 15 12:00:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d1ec2becb8fdce2c06de5e50fa36e52ce9a851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:32:61:49:41:5b:27:b5:5b:c6:c1:c6:5b:
2b:08:b9:12:8e:4d:e6:3d:14:aa:4e:cd:a5:51:ea:
c9:50:b7:13:7e:b0:15:c7:c9:c6:6e:bc:ff:4c:d0:
64:a2:fd:9b:46:1e:bb:55:47:9c:83:b4:8d:75:1d:
71:23:94:a3:28:1d:6a:62:0f:5f:9c:50:1c:3c:a8:
48:29:04:bd:01:e1:c5:51:7c:85:a3:be:3b:69:fd:
e9:a4:5e:d2:d5:62:eb:a8:f1:a7:30:96:c8:ec:4d:
e1:93:a8:92:be:53:d1:69:4f:17:f9:42:ab:32:ee:
f8:ca:61:76:a1:db:1d:7c:ea:29:e4:5e:33:14:09:
23:50:58:15:a2:d4:9e:64:40:78:98:a0:2c:41:af:
cc:ea:f8:c3:74:99:33:50:32:a5:4a:87:c2:7c:0e:
57:ba:4a:a0:64:3f:3e:fc:f6:0f:a9:ca:1e:2b:40:
69:cc:0b:a4:3b:03:58:32:e4:5d:45:0f:ae:cb:fc:
1b:30:3c:d7:a2:40:cb:22:2d:e8:70:a9:c5:de:69:
1a:b7:33:c5:40:6c:18:8f:51:20:22:1e:f8:ff:76:
9c:62:de:d1:92:7c:d2:aa:5e:9c:c2:eb:0d:b9:0c:
15:bb:06:9e:e5:54:2a:25:24:68:53:b0:44:47:30:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:C2:BE:CB:8F:DC:E2:C0:6D:E5:E5:0F:A3:6E:52:CE:9A:85:1A
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/PR7CvsuP3OLAbeXlD6NuUs6ahRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.1.0/24
79.183.4.0/24
79.183.118.0/24
Signature Algorithm: sha256WithRSAEncryption
11:61:b3:18:7a:88:83:87:7e:3c:55:ed:a1:5e:d8:ba:bc:d0:
bc:8d:27:d7:d1:83:ab:c8:eb:37:18:5d:cf:d2:52:08:ce:d6:
10:43:f7:6f:7b:28:fe:2c:75:36:72:2d:08:23:5c:e4:cb:c4:
c6:20:59:ad:50:6c:7b:2c:ab:71:25:11:e3:b5:f1:0a:08:9c:
6c:e4:59:7f:39:53:df:16:5c:8a:b0:9d:97:98:a7:d2:aa:70:
e5:d8:43:67:d0:b4:a0:7c:c7:38:05:e1:54:65:6f:7e:4e:01:
a8:cc:dc:aa:6f:67:32:4d:6e:10:63:c1:15:52:df:49:df:ae:
d0:2b:78:98:ec:60:c0:fc:ee:29:71:2f:6a:56:67:8a:11:fd:
87:f3:b1:bf:c1:6e:af:48:7e:91:32:59:a2:5e:ba:21:ca:a7:
95:6c:fd:6f:68:22:40:4e:ad:8a:bf:56:38:88:a9:97:29:36:
66:7a:c6:4d:fe:52:3b:95:c7:34:0c:01:d1:39:ea:37:26:af:
9a:1e:38:0b:f8:db:ec:62:30:11:d3:bf:35:ef:fd:e3:05:b5:
b1:59:d1:07:99:ee:26:e2:fc:9f:6f:91:6b:21:bc:14:4a:11:
df:d3:11:6a:30:9a:2f:41:af:a8:db:f1:c5:70:b1:f8:9a:ae:
a5:2c:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:10 2026 by rpki-client