Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Xdhh_IRpojJiepifEd7YD4ZXW44.roa
File: Xdhh_IRpojJiepifEd7YD4ZXW44.roa (raw, json)
Hash identifier: I0vLxH/TvzbLTK8EN9ZkI6YS37TBlFbHP6VkP8+52W4=
Subject key identifier: 5D:D8:61:FC:84:69:A2:32:62:7A:98:9F:11:DE:D8:0F:86:57:5B:8E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A08726474883C00770B9C2E8C70964CEF0
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Xdhh_IRpojJiepifEd7YD4ZXW44.roa
Signing time: Wed 09 Sep 2026 17:10:27 +0000
ROA not before: Wed 09 Sep 2026 17:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 79.176.14.0/24 maxlen: 24
79.176.15.0/24 maxlen: 24
79.176.16.0/24 maxlen: 24
79.176.17.0/24 maxlen: 24
79.176.18.0/24 maxlen: 24
79.176.21.0/24 maxlen: 24
79.176.38.0/24 maxlen: 24
79.176.44.0/24 maxlen: 24
79.176.49.0/24 maxlen: 24
79.176.50.0/23 maxlen: 24
79.176.57.0/24 maxlen: 24
79.176.61.0/24 maxlen: 24
79.176.70.0/24 maxlen: 24
79.176.87.0/24 maxlen: 24
79.182.7.0/24 maxlen: 24
79.182.8.0/24 maxlen: 24
79.183.145.0/24 maxlen: 24
79.183.146.0/24 maxlen: 24
79.183.147.0/24 maxlen: 24
79.183.148.0/24 maxlen: 24
79.183.149.0/24 maxlen: 24
109.64.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:26:47:48:83:c0:07:70:b9:c2:e8:c7:09:64:ce:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 9 17:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dd861fc8469a232627a989f11ded80f86575b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:6e:fd:4c:ff:ef:15:97:fd:b8:75:ea:c9:
93:16:26:fa:81:10:00:4b:b3:9b:65:f8:94:d9:f9:
87:b9:d5:f3:82:e1:db:15:9e:1e:92:9e:fc:34:c6:
f7:e9:e1:c0:3c:dd:20:0e:be:77:93:bd:c6:03:54:
60:5a:1e:03:9c:46:44:3b:13:5d:6f:c8:7d:75:31:
ed:9c:af:1f:01:47:8f:7f:d1:ac:3b:20:82:63:db:
1f:76:51:41:b8:99:a0:fb:4d:85:61:35:2e:1f:9a:
58:80:85:28:ec:f2:d5:dd:21:be:38:1c:8e:cb:72:
8f:aa:53:fe:9f:db:76:42:8e:92:cf:e1:f6:fe:4a:
86:65:c8:19:5c:e5:4b:a7:36:f1:f3:6c:9d:b8:31:
b1:b3:47:4f:84:56:5f:36:c7:34:0f:e9:8c:10:7a:
f4:64:ef:8a:8d:71:36:2e:fe:7f:15:8b:83:7a:65:
57:07:f6:d3:2c:bf:d9:b8:df:e4:3f:d3:32:8a:e2:
9a:15:90:13:9b:96:ea:7e:f2:3d:fb:a7:ff:da:e5:
5e:a7:d9:5f:09:3c:ac:e2:a6:8e:34:b2:e3:12:ff:
2f:d1:24:de:96:99:5d:ae:81:c6:ec:a3:c6:f7:b6:
bd:f3:47:b8:3a:bc:bb:d5:e4:cd:5a:d6:8f:b5:4e:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:61:FC:84:69:A2:32:62:7A:98:9F:11:DE:D8:0F:86:57:5B:8E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Xdhh_IRpojJiepifEd7YD4ZXW44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.14.0-79.176.18.255
79.176.21.0/24
79.176.38.0/24
79.176.44.0/24
79.176.49.0-79.176.51.255
79.176.57.0/24
79.176.61.0/24
79.176.70.0/24
79.176.87.0/24
79.182.7.0-79.182.8.255
79.183.145.0-79.183.149.255
109.64.2.0/23
Signature Algorithm: sha256WithRSAEncryption
37:c6:00:43:2d:18:d8:f3:33:63:56:99:21:13:b7:1e:bb:4f:
26:c1:c4:5c:85:d9:10:df:6b:09:57:eb:da:9f:4e:48:dd:29:
50:7a:7d:38:56:18:60:dc:0b:7f:23:52:59:77:e8:4a:25:38:
72:30:e1:e2:8a:4a:2e:04:5f:37:7e:50:cf:15:17:56:b5:b1:
be:9f:60:2b:aa:94:40:aa:e5:15:cc:9f:20:ae:2a:ed:7c:e0:
d0:23:28:ea:b0:0f:79:dd:06:2f:97:c4:2d:39:fb:b4:7d:a0:
8a:04:0e:38:d7:34:2a:54:52:c3:64:95:58:b6:01:45:00:c7:
9f:a8:a7:07:97:26:b4:89:4c:b6:2c:d8:29:f1:54:ec:15:92:
30:29:95:98:a3:04:ab:7b:30:d9:a9:09:c9:f3:25:36:47:27:
13:b7:df:37:e3:6a:d9:0e:40:e4:8c:da:b5:2d:04:80:4f:d5:
d1:ec:8f:90:32:90:d7:49:2a:c3:7a:ab:f3:dd:fa:54:10:02:
2b:56:1c:30:0a:21:47:75:f5:f7:a3:e8:dd:7d:4d:b8:e4:89:
37:c2:87:02:5c:99:2f:49:49:a0:3d:20:3b:fe:20:87:06:14:
00:38:ed:f3:44:d6:23:eb:c1:15:21:43:01:76:7c:2b:8d:29:
2e:05:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:21 2026 by rpki-client