Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/RWN8_Gs3sRgmUx-uu6S_2AJDRiA.roa
File: RWN8_Gs3sRgmUx-uu6S_2AJDRiA.roa (raw, json)
Hash identifier: mFh78G6vgWSWupXYz8OL7PTOTFOJ7ETVt27JsjqLk7E=
Subject key identifier: 45:63:7C:FC:6B:37:B1:18:26:53:1F:AE:BB:A4:BF:D8:02:43:46:20
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0511171EDEA7980E4600BD202F294534D
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/RWN8_Gs3sRgmUx-uu6S_2AJDRiA.roa
Signing time: Sun 30 Aug 2026 05:08:12 +0000
ROA not before: Sun 30 Aug 2026 05:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 79.176.6.0/24 maxlen: 24
79.182.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:11:71:ed:ea:79:80:e4:60:0b:d2:02:f2:94:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 30 05:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45637cfc6b37b11826531faebba4bfd802434620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:d9:e3:2f:c4:1e:1d:e1:80:08:e2:62:a5:
1b:66:62:26:75:3b:e6:14:8e:7e:db:e4:98:90:34:
a3:88:6a:42:eb:1a:c1:8a:79:9c:5f:8d:79:0a:bf:
ac:74:44:a1:63:0a:93:25:fc:56:d4:33:ca:aa:f9:
82:bf:86:8e:1c:81:eb:7e:40:2c:52:6f:91:04:50:
55:85:35:ca:09:b6:fc:53:cc:10:fa:6e:6e:df:a4:
a2:be:57:f0:e5:8a:c2:ae:0a:bf:3e:af:ee:f0:4d:
e5:c8:1e:a2:f7:96:16:3e:6f:95:a0:7d:0a:b6:c2:
73:ef:75:67:6d:ff:12:15:20:01:67:cb:46:2e:59:
f0:52:dd:7e:f8:40:80:be:0c:28:e9:8d:04:fb:48:
5c:3a:65:19:8f:87:b1:1f:5a:10:2e:0e:fa:dd:30:
66:ef:ea:a3:3d:ba:6a:70:0d:0d:67:00:f6:43:55:
3f:75:35:a9:e2:07:81:4b:05:bb:cd:ac:08:49:18:
50:0c:92:0e:de:e2:62:07:2c:d2:1f:1b:57:d7:45:
80:66:c0:a1:47:90:f2:38:0c:83:d9:ec:38:29:b4:
ea:a8:4f:94:59:b7:a4:01:9c:04:52:c6:b1:68:25:
3b:80:d0:9a:00:f8:d7:b8:99:69:1f:64:4d:37:82:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:7C:FC:6B:37:B1:18:26:53:1F:AE:BB:A4:BF:D8:02:43:46:20
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/RWN8_Gs3sRgmUx-uu6S_2AJDRiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.6.0/24
79.182.4.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ce:cf:15:c2:a5:63:00:5e:b6:ce:db:da:a4:bf:ae:81:d7:
c4:53:e6:50:35:a9:d3:97:20:f4:9c:5e:49:d8:ee:c9:e5:9d:
0f:57:5c:12:c8:c8:ff:b5:db:58:55:6c:53:af:0c:84:8e:ff:
6c:c8:3c:38:9d:b1:3c:5b:cd:f7:70:c7:d2:8a:d8:f8:73:f5:
23:db:96:35:72:2b:49:ff:47:37:60:01:dc:9f:a5:d5:cb:b9:
a5:1c:09:ca:a2:b4:1c:9e:32:0d:e3:ab:f1:44:fc:e0:c8:5d:
b4:64:23:c0:8c:b1:82:3a:07:05:3d:14:86:08:66:1a:81:d7:
ed:0c:3c:b8:06:cb:a1:a0:4f:ab:ea:e3:bb:68:b5:6a:7e:09:
f6:b0:94:69:ff:37:44:3d:40:6e:dc:58:f3:ec:f7:12:56:f0:
3d:6b:6f:30:28:fb:91:48:07:9c:ae:48:72:be:a5:c4:6e:e4:
0d:ff:f0:16:8c:80:34:bc:fd:04:d5:f2:6a:58:33:5d:18:f5:
c4:c1:cc:fd:84:e6:be:57:c2:f7:47:41:54:5a:05:de:c7:d7:
66:1b:a8:c5:9c:72:e2:11:b6:9b:07:87:e3:99:41:fd:c1:e6:
e0:b0:72:e3:46:05:fa:39:83:69:c8:0c:65:c9:bc:50:ab:1d:
98:b6:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:24 2026 by rpki-client