Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/R3aa_204Yz5JtsdcVjhyT1S_RxY.roa
File: R3aa_204Yz5JtsdcVjhyT1S_RxY.roa (raw, json)
Hash identifier: NWlmDCd8OZ4kTjZxZZnRY2u4lWKY+iwFg4y57sDPXk0=
Subject key identifier: 47:76:9A:FF:6D:38:63:3E:49:B6:C7:5C:56:38:72:4F:54:BF:47:16
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0A933ED80906D6070D435ECC8C788CA21
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/R3aa_204Yz5JtsdcVjhyT1S_RxY.roa
Signing time: Wed 16 Sep 2026 07:52:27 +0000
ROA not before: Wed 16 Sep 2026 07:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63099
IP address blocks: 79.182.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:33:ed:80:90:6d:60:70:d4:35:ec:c8:c7:88:ca:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 16 07:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47769aff6d38633e49b6c75c5638724f54bf4716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:2b:03:38:c6:44:08:ba:9e:ee:8f:38:59:
b3:b5:a0:4e:5b:4b:9e:f2:50:e5:4e:3e:66:69:5f:
b8:cf:65:64:61:ee:d4:63:c8:2d:4a:06:89:d3:ff:
6b:4e:d7:e2:85:2b:9c:96:07:87:4b:71:a8:f4:fe:
65:a9:d5:3e:e4:f0:cd:71:61:de:06:1e:55:68:bb:
7a:d7:d5:04:7c:36:94:fb:66:dc:2a:d4:a9:98:56:
62:6b:de:ab:15:4d:b8:58:1b:10:61:0d:3b:ba:44:
70:80:d1:7c:c5:85:a4:a9:4e:b2:db:b2:7d:cc:03:
23:96:0b:7a:34:0e:72:d1:8c:bb:cf:1f:be:e7:9a:
52:e3:42:36:cf:ab:bf:1e:33:d1:8b:e5:a9:ff:e3:
6a:1a:b7:9f:1a:7d:f5:f2:e7:63:b7:d1:b6:50:38:
95:62:e3:7a:c9:9c:77:c3:b0:3b:ab:e0:d5:66:41:
5a:f4:dc:12:6f:36:f6:31:d7:9f:60:70:e4:22:e1:
ad:4a:8d:e4:36:ad:94:62:20:b3:97:a3:bd:3d:39:
75:70:4c:a6:2d:67:05:90:08:ab:f9:0e:eb:bc:52:
22:e4:f5:09:3b:ca:e5:49:92:df:ac:52:a8:79:e6:
21:a8:f5:3c:dc:76:e5:e9:83:7c:f9:4e:75:0d:be:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:9A:FF:6D:38:63:3E:49:B6:C7:5C:56:38:72:4F:54:BF:47:16
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/R3aa_204Yz5JtsdcVjhyT1S_RxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:bb:9e:4b:a6:0c:d7:f2:15:01:84:b4:07:55:fe:cc:02:f3:
c4:fc:cb:6f:5a:ba:df:87:ec:04:29:67:d6:f5:c1:a5:53:09:
d3:b5:2b:7c:66:a1:c3:eb:55:3d:73:4e:1d:2b:3d:3c:b8:ee:
d4:3f:4b:21:6e:a5:fa:ab:d4:29:0f:81:38:45:3d:78:8f:31:
b8:35:7a:fd:c9:a0:fc:48:db:b8:ba:18:6a:20:de:2a:60:62:
fe:59:f2:40:22:88:15:39:2f:5c:5c:a7:a8:8f:fb:78:57:b9:
72:ca:fc:82:35:cf:44:b8:70:5f:20:7e:d8:b0:d0:dd:4b:90:
25:14:06:53:b4:73:46:3c:df:3b:12:f2:af:08:ce:cd:0e:03:
70:77:b5:25:4a:21:39:53:d9:e6:15:b4:42:06:30:4c:0d:3f:
4a:9c:da:31:66:04:5b:28:39:8f:1d:ce:a7:49:f8:45:52:40:
42:b7:64:85:bd:1a:f5:e8:f3:64:10:7e:ef:e0:7e:e4:6e:57:
4b:a2:ed:26:82:f4:b4:ce:14:66:2e:38:c3:86:a8:dd:2b:c5:
2f:02:ce:e3:78:24:70:4d:2c:cb:f5:2f:f5:6d:eb:81:ca:41:
31:8b:6b:e9:ca:83:7e:b1:c5:8b:46:c6:da:98:c3:8c:85:6b:
c1:91:d1:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCpM+2AkG1gcNQ17MjHiMohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTE2MDc1MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzc2OWFmZjZkMzg2MzNlNDliNmM3NWM1NjM4NzI0ZjU0YmY0NzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLArAzjGRAi6nu6POFmztaBOW0ue
8lDlTj5maV+4z2VkYe7UY8gtSgaJ0/9rTtfihSuclgeHS3Go9P5lqdU+5PDNcWHe
Bh5VaLt619UEfDaU+2bcKtSpmFZia96rFU24WBsQYQ07ukRwgNF8xYWkqU6y27J9
zAMjlgt6NA5y0Yy7zx++55pS40I2z6u/HjPRi+Wp/+NqGrefGn318udjt9G2UDiV
YuN6yZx3w7A7q+DVZkFa9NwSbzb2MdefYHDkIuGtSo3kNq2UYiCzl6O9PTl1cEym
LWcFkAir+Q7rvFIi5PUJO8rlSZLfrFKoeeYhqPU83Hbl6YN8+U51Db61LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEd2mv9tOGM+SbbHXFY4ck9Uv0cWMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvUjNhYV8yMDRZejVKdHNkY1ZqaHlUMVNfUnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT7Z0MA0G
CSqGSIb3DQEBCwUAA4IBAQALu55LpgzX8hUBhLQHVf7MAvPE/MtvWrrfh+wEKWfW
9cGlUwnTtSt8ZqHD61U9c04dKz08uO7UP0shbqX6q9QpD4E4RT14jzG4NXr9yaD8
SNu4uhhqIN4qYGL+WfJAIogVOS9cXKeoj/t4V7lyyvyCNc9EuHBfIH7YsNDdS5Al
FAZTtHNGPN87EvKvCM7NDgNwd7UlSiE5U9nmFbRCBjBMDT9KnNoxZgRbKDmPHc6n
SfhFUkBCt2SFvRr16PNkEH7v4H7kbldLou0mgvS0zhRmLjjDhqjdK8UvAs7jeCRw
TSzL9S/1beuBykExi2vpyoN+scWLRsbamMOMhWvBkdFI
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:00 2026 by rpki-client