Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/SiarQ2TxRzr8itmuRAYLtAX-QzQ.roa
File: SiarQ2TxRzr8itmuRAYLtAX-QzQ.roa (raw, json)
Hash identifier: 8XW+4yaYwXUOorPxqs2KPD6l7RdxPUrXyqX6O82hTP8=
Subject key identifier: 4A:26:AB:43:64:F1:47:3A:FC:8A:D9:AE:44:06:0B:B4:05:FE:43:34
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F45D1791142417F2BCCFCB3415EF68A0B
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/SiarQ2TxRzr8itmuRAYLtAX-QzQ.roa
Signing time: Thu 09 Jul 2026 07:39:43 +0000
ROA not before: Thu 09 Jul 2026 07:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146813
IP address blocks: 79.176.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:d1:79:11:42:41:7f:2b:cc:fc:b3:41:5e:f6:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 9 07:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a26ab4364f1473afc8ad9ae44060bb405fe4334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:4c:be:e7:d3:40:86:70:9c:80:7d:d4:d7:
23:0a:bc:19:06:88:90:60:41:2b:87:06:41:51:54:
f1:36:26:93:5f:5d:45:d1:17:d5:a8:86:9b:1b:bc:
d4:cd:fa:4a:76:d9:6d:5b:ca:09:37:b6:0a:11:fc:
2d:22:cc:ed:46:99:15:c4:8f:a8:e2:26:77:33:e0:
3e:8e:bd:eb:d9:7c:4c:45:ae:cd:86:9a:f4:d3:98:
1f:ef:fa:20:79:14:6e:29:c4:9d:10:db:67:9e:b6:
e0:1b:cc:31:41:5f:db:4f:15:22:c3:4d:ec:e5:d9:
f9:0b:92:bf:2f:86:98:19:29:7b:44:42:2d:f1:7b:
bf:06:99:ca:95:6e:9a:b1:c3:70:cb:a9:1d:e2:54:
cd:cb:40:e4:5e:43:4d:55:b9:ef:0e:91:b4:4b:f3:
ed:c2:88:13:75:35:2a:2b:57:4f:58:ee:7a:e3:1d:
16:db:09:a9:67:32:99:7e:bb:24:06:0f:62:35:42:
86:93:ad:f7:ca:30:99:e2:08:ae:08:5f:87:41:32:
d2:f4:f3:93:54:d6:8e:6b:0e:5f:65:a7:ac:d1:50:
04:25:c7:c3:aa:1e:08:7f:0f:a5:3d:46:3e:ab:da:
eb:db:95:37:53:21:a2:09:b8:7f:92:d7:37:58:60:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:AB:43:64:F1:47:3A:FC:8A:D9:AE:44:06:0B:B4:05:FE:43:34
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/SiarQ2TxRzr8itmuRAYLtAX-QzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:45:2d:f6:f3:34:4f:20:e7:5d:c0:83:c0:bd:71:d6:f8:e9:
5f:02:67:51:0f:cd:1d:0e:8c:47:86:1c:e1:c8:24:e6:d7:7a:
94:33:53:07:4f:56:f1:de:aa:dd:2a:6f:c5:17:7a:af:43:f4:
2a:eb:3b:6a:20:ad:59:65:df:b7:c6:c2:76:f4:d5:a4:a3:6c:
d8:97:5b:7c:a2:77:4f:2e:cc:76:53:29:d8:47:6a:11:fb:dc:
2e:59:0b:e5:ba:d4:c3:25:d6:76:a1:9a:f4:87:2f:30:16:b6:
40:2f:a9:9e:5f:a3:60:ca:39:f4:5e:44:ea:cd:3a:9f:8d:e8:
6d:d1:83:4e:a9:fb:0d:1d:f9:88:4b:df:89:e8:87:af:3c:a3:
9d:d4:f9:20:14:d5:61:e6:41:1d:5b:b7:72:45:71:7d:31:81:
92:65:78:a1:64:72:6a:a1:43:ad:c7:86:5d:1e:21:63:ec:08:
cd:c9:57:d7:03:dc:8c:0f:3f:d6:f9:d2:fc:1b:53:d0:4f:2e:
01:c9:a6:dd:c6:5b:19:72:32:66:06:04:3a:f3:5e:aa:d2:62:
36:49:32:95:c1:f7:f3:51:94:e7:2a:ee:05:a8:f9:2a:1c:2c:
8c:c5:e9:93:78:88:0a:a1:c0:ae:dd:0b:17:fe:72:5e:22:43:
f5:4e:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:54 2026 by rpki-client