Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/X9NISPPZjxauSqMW0SlZBmWRolc.roa
File: X9NISPPZjxauSqMW0SlZBmWRolc.roa (raw, json)
Hash identifier: G916dlgCzAS5whBI4HZkYu5xHFjOuBqYKfG5jWOhIps=
Subject key identifier: 5F:D3:48:48:F3:D9:8F:16:AE:4A:A3:16:D1:29:59:06:65:91:A2:57
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FFCDD9571EE2CCB7114575686FDB07DD7
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/X9NISPPZjxauSqMW0SlZBmWRolc.roa
Signing time: Thu 13 Aug 2026 20:43:27 +0000
ROA not before: Thu 13 Aug 2026 20:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 79.176.3.0/24 maxlen: 24
79.176.5.0/24 maxlen: 24
79.176.7.0/24 maxlen: 24
79.176.9.0/24 maxlen: 24
79.176.41.0/24 maxlen: 24
79.176.78.0/24 maxlen: 24
79.176.96.0/24 maxlen: 24
79.182.1.0/24 maxlen: 24
79.182.3.0/24 maxlen: 24
79.182.5.0/24 maxlen: 24
79.183.5.0/24 maxlen: 24
79.183.7.0/24 maxlen: 24
79.183.10.0/24 maxlen: 24
109.66.48.0/24 maxlen: 24
109.66.55.0/24 maxlen: 24
109.66.58.0/24 maxlen: 24
109.66.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:dd:95:71:ee:2c:cb:71:14:57:56:86:fd:b0:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 13 20:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fd34848f3d98f16ae4aa316d12959066591a257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:a0:09:ad:0a:8e:6f:50:52:89:22:02:81:
1a:2e:38:62:dd:7c:6c:5e:69:5f:77:21:58:4f:04:
92:d0:cc:d3:83:00:0a:8f:0f:62:4d:af:1f:74:98:
57:da:61:d0:8b:3d:27:74:fe:b7:a7:e8:1c:d1:78:
14:ec:c8:8d:29:6d:33:01:5a:5a:ec:78:43:56:07:
05:dc:83:85:90:c4:43:9b:d9:24:16:69:ae:34:4b:
9f:a8:81:6a:1f:17:8c:e3:59:50:e0:be:fb:d0:ae:
d0:27:a5:a5:ed:80:45:20:0d:bc:87:ed:c2:5f:13:
56:f8:53:fe:e5:e9:ef:86:c3:b5:ff:cd:0e:03:f7:
eb:33:6c:66:9f:c1:ac:39:f6:a7:2d:19:81:14:5c:
ac:0b:72:4b:03:2c:79:60:d9:84:a7:56:3e:39:17:
7f:72:80:52:e3:40:fa:2b:4f:f9:1e:92:23:6f:ed:
6b:7d:8d:ee:6b:e8:ec:6e:1d:40:40:86:8f:83:60:
37:ae:61:56:2f:1c:83:97:28:f1:29:54:bd:06:c9:
72:a0:ae:93:67:d6:69:26:07:45:ef:e7:dc:74:49:
db:f4:10:ab:90:75:c4:84:2f:d2:a6:66:bb:1e:91:
51:c4:58:cd:15:35:74:ee:a1:7a:91:d2:5e:80:36:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:48:48:F3:D9:8F:16:AE:4A:A3:16:D1:29:59:06:65:91:A2:57
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/X9NISPPZjxauSqMW0SlZBmWRolc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.3.0/24
79.176.5.0/24
79.176.7.0/24
79.176.9.0/24
79.176.41.0/24
79.176.78.0/24
79.176.96.0/24
79.182.1.0/24
79.182.3.0/24
79.182.5.0/24
79.183.5.0/24
79.183.7.0/24
79.183.10.0/24
109.66.48.0/24
109.66.55.0/24
109.66.58.0/24
109.66.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:2d:08:8b:91:aa:92:a3:82:c8:06:8a:9f:2d:3d:81:99:1b:
2a:d3:cb:d9:07:26:7c:a8:8f:35:a3:1f:3d:a7:cb:13:29:07:
4d:9e:01:19:54:50:b5:c8:08:35:40:12:72:55:62:5f:2d:37:
2c:5f:88:ca:3f:0a:51:88:ab:04:57:22:88:3c:e8:24:95:92:
ed:23:e8:29:47:99:ff:b8:1f:17:3d:5c:0f:3b:9c:f5:c4:cf:
a7:c9:46:0f:19:e7:fb:8d:74:df:29:d7:fa:a8:a3:62:5e:cd:
ff:7a:22:f2:b6:7d:d5:b8:46:cc:52:05:71:b0:5d:3f:64:5e:
a8:00:ac:b1:3e:62:dc:90:92:31:f3:85:dd:86:aa:65:66:eb:
6a:cb:b8:47:96:71:5a:b7:99:07:26:66:b9:d0:6d:4e:ab:3f:
5a:35:c6:99:7f:2b:e4:b7:60:51:cb:cb:8d:1b:c7:5b:62:64:
ee:18:4f:2a:8a:1d:4f:bf:c7:ac:ae:3e:a2:0b:ea:f1:8f:b9:
1a:c6:e5:00:3b:bc:04:e3:43:14:2b:9e:5a:9a:16:c2:70:81:
66:5f:da:7f:85:0f:6d:38:70:8c:0e:53:a0:ac:4d:8c:88:c8:
19:fd:7a:ce:9d:75:92:29:b5:ed:01:1e:3d:cb:10:d2:80:a1:
5f:aa:be:c4
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZ/83ZVx7izLcRRXVob9sH3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODEzMjA0MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQzNDg0OGYzZDk4ZjE2YWU0YWEzMTZkMTI5NTkwNjY1OTFhMjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6egCa0Kjm9QUokiAoEaLjhi3Xxs
XmlfdyFYTwSS0MzTgwAKjw9iTa8fdJhX2mHQiz0ndP63p+gc0XgU7MiNKW0zAVpa
7HhDVgcF3IOFkMRDm9kkFmmuNEufqIFqHxeM41lQ4L770K7QJ6Wl7YBFIA28h+3C
XxNW+FP+5envhsO1/80OA/frM2xmn8GsOfanLRmBFFysC3JLAyx5YNmEp1Y+ORd/
coBS40D6K0/5HpIjb+1rfY3ua+jsbh1AQIaPg2A3rmFWLxyDlyjxKVS9BslyoK6T
Z9ZpJgdF7+fcdEnb9BCrkHXEhC/Spma7HpFRxFjNFTV07qF6kdJegDbMuQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFF/TSEjz2Y8WrkqjFtEpWQZlkaJXMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvWDlOSVNQUFpqeGF1U3FNVzBTbFpCbVdSb2xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAT7ADAwQA
T7AFAwQAT7AHAwQAT7AJAwQAT7ApAwQAT7BOAwQAT7BgAwQAT7YBAwQAT7YDAwQA
T7YFAwQAT7cFAwQAT7cHAwQAT7cKAwQAbUIwAwQAbUI3AwQAbUI6AwQCbUJIMA0G
CSqGSIb3DQEBCwUAA4IBAQB/LQiLkaqSo4LIBoqfLT2BmRsq08vZByZ8qI81ox89
p8sTKQdNngEZVFC1yAg1QBJyVWJfLTcsX4jKPwpRiKsEVyKIPOgklZLtI+gpR5n/
uB8XPVwPO5z1xM+nyUYPGef7jXTfKdf6qKNiXs3/eiLytn3VuEbMUgVxsF0/ZF6o
AKyxPmLckJIx84XdhqplZutqy7hHlnFat5kHJma50G1Oqz9aNcaZfyvkt2BRy8uN
G8dbYmTuGE8qih1Pv8esrj6iC+rxj7kaxuUAO7wE40MUK55amhbCcIFmX9p/hQ9t
OHCMDlOgrE2MiMgZ/XrOnXWSKbXtAR49yxDSgKFfqr7E
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:10 2026 by rpki-client