Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YVEi6_u7diCwRSO6OcFabyey2qE.roa
File: YVEi6_u7diCwRSO6OcFabyey2qE.roa (raw, json)
Hash identifier: BIak3UJgrIQbEfKSe9e0QnbR3N80qiGWB+l1DoxhaWo=
Subject key identifier: 61:51:22:EB:FB:BB:76:20:B0:45:23:BA:39:C1:5A:6F:27:B2:DA:A1
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A030656AD303671F7EE8493C5ED57002BF
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YVEi6_u7diCwRSO6OcFabyey2qE.roa
Signing time: Sun 23 Aug 2026 20:52:27 +0000
ROA not before: Sun 23 Aug 2026 20:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 79.176.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:65:6a:d3:03:67:1f:7e:e8:49:3c:5e:d5:70:02:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 23 20:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615122ebfbbb7620b04523ba39c15a6f27b2daa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:bf:8a:c6:34:ad:dc:35:ea:70:13:92:a9:
82:f6:c7:13:0c:70:03:cb:2a:2c:91:75:7e:34:29:
69:16:08:10:eb:b3:74:8c:b1:6b:03:9d:2b:d3:1b:
3b:cd:53:6e:05:ce:6f:d2:fd:31:21:8a:3a:c8:c3:
4c:35:2b:25:87:5d:cd:db:cc:f5:73:ce:ec:b4:e5:
5f:11:8b:63:4b:87:6e:87:2c:53:98:2e:4a:c2:d8:
8e:f1:d5:49:65:62:31:24:75:59:d8:6b:b6:af:57:
dc:aa:1f:e0:6c:1c:e0:dd:92:e0:12:55:00:30:3c:
3c:d0:72:1c:17:46:b6:0a:d9:3f:8e:26:f5:5c:df:
70:c9:a2:3f:0e:9a:43:4b:ad:18:1e:b2:cd:d3:8d:
29:fb:7b:9a:a0:96:c6:ee:8e:d4:d5:1f:53:8d:2c:
74:42:ac:74:48:2e:10:84:e4:64:12:a5:f6:93:15:
45:5a:bd:eb:6c:48:c0:da:16:2e:3d:30:ae:7e:9c:
ef:95:58:e4:fe:50:45:b0:eb:ad:36:46:9b:71:6e:
84:d3:b5:79:28:03:bf:a9:fe:50:58:19:11:34:3a:
f4:ff:e8:dd:de:eb:2b:0b:20:ce:a5:91:5b:9f:43:
d2:bf:67:99:50:32:cb:97:77:8c:67:54:bb:bd:5a:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:22:EB:FB:BB:76:20:B0:45:23:BA:39:C1:5A:6F:27:B2:DA:A1
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YVEi6_u7diCwRSO6OcFabyey2qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:bb:85:da:f4:e7:b6:f1:eb:25:71:95:99:5d:9b:2d:c4:7a:
3e:18:82:34:83:70:9e:21:79:73:a6:02:a7:99:f8:91:6c:21:
8e:24:37:e0:9f:73:65:81:cf:11:2b:78:28:55:af:e3:8d:66:
cb:88:c8:7a:a0:98:8f:b8:e2:65:45:cd:75:bc:e8:2d:a8:fe:
32:a8:ff:6f:a0:df:ea:63:4a:7b:a8:60:02:d6:6c:42:80:8a:
4d:3b:28:0d:25:61:ac:31:9b:fd:34:9c:8b:52:1c:a9:a9:8d:
6f:91:e5:b6:d6:39:04:d2:ba:e7:90:23:40:8b:e0:d7:5f:0f:
30:51:dd:f6:9d:76:39:a9:0d:47:fa:1e:4c:de:c5:6c:b3:84:
ab:4d:37:85:1e:af:29:c8:58:3e:58:e7:77:d5:2c:84:82:da:
04:a0:df:2f:1f:35:5b:40:70:ca:d3:ee:ce:ab:85:4c:f7:fc:
b1:f6:d5:19:17:d4:12:3c:f2:73:54:32:b5:3a:bd:c6:0a:aa:
04:31:6f:c8:71:3f:25:a1:0d:b0:3a:93:b3:4f:e6:82:f8:92:
74:e3:93:67:68:b1:3c:ab:74:8e:08:d1:57:46:23:9c:ae:ad:
b4:c7:88:b1:31:03:e6:b3:b3:24:66:13:10:b1:09:da:1a:75:
5c:15:b6:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAwZWrTA2cffuhJPF7VcAK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODIzMjA1MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTUxMjJlYmZiYmI3NjIwYjA0NTIzYmEzOWMxNWE2ZjI3YjJkYWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Eu/isY0rdw16nATkqmC9scTDHAD
yyoskXV+NClpFggQ67N0jLFrA50r0xs7zVNuBc5v0v0xIYo6yMNMNSslh13N28z1
c87stOVfEYtjS4duhyxTmC5KwtiO8dVJZWIxJHVZ2Gu2r1fcqh/gbBzg3ZLgElUA
MDw80HIcF0a2Ctk/jib1XN9wyaI/DppDS60YHrLN040p+3uaoJbG7o7U1R9TjSx0
Qqx0SC4QhORkEqX2kxVFWr3rbEjA2hYuPTCufpzvlVjk/lBFsOutNkabcW6E07V5
KAO/qf5QWBkRNDr0/+jd3usrCyDOpZFbn0PSv2eZUDLLl3eMZ1S7vVqlxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFRIuv7u3YgsEUjujnBWm8nstqhMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvWVZFaTZfdTdkaUN3UlNPNk9jRmFieWV5MnFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT7D/MA0G
CSqGSIb3DQEBCwUAA4IBAQCfu4Xa9Oe28eslcZWZXZstxHo+GII0g3CeIXlzpgKn
mfiRbCGOJDfgn3Nlgc8RK3goVa/jjWbLiMh6oJiPuOJlRc11vOgtqP4yqP9voN/q
Y0p7qGAC1mxCgIpNOygNJWGsMZv9NJyLUhypqY1vkeW21jkE0rrnkCNAi+DXXw8w
Ud32nXY5qQ1H+h5M3sVss4SrTTeFHq8pyFg+WOd31SyEgtoEoN8vHzVbQHDK0+7O
q4VM9/yx9tUZF9QSPPJzVDK1Or3GCqoEMW/IcT8loQ2wOpOzT+aC+JJ045NnaLE8
q3SOCNFXRiOcrq20x4ixMQPms7MkZhMQsQnaGnVcFbaq
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:25 2026 by rpki-client