Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YoEH9cSlUFtdxZf7zr8D-OGAtFM.roa
File: YoEH9cSlUFtdxZf7zr8D-OGAtFM.roa (raw, json)
Hash identifier: VZ3RRw/0kYbhFqe/fPDPZEICaen0YYgxFZbmPIkKSdk=
Subject key identifier: 62:81:07:F5:C4:A5:50:5B:5D:C5:97:FB:CE:BF:03:F8:E1:80:B4:53
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A045B0CE106979D07896536879F264C4F1
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YoEH9cSlUFtdxZf7zr8D-OGAtFM.roa
Signing time: Fri 28 Aug 2026 00:06:50 +0000
ROA not before: Fri 28 Aug 2026 00:06:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 79.176.106.0/23 maxlen: 24
79.176.184.0/21 maxlen: 21
109.66.28.0/23 maxlen: 24
109.66.168.0/21 maxlen: 21
109.66.234.0/23 maxlen: 24
109.66.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:b0:ce:10:69:79:d0:78:96:53:68:79:f2:64:c4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 28 00:06:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=628107f5c4a5505b5dc597fbcebf03f8e180b453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:a1:50:21:69:86:52:79:49:86:89:46:1f:
52:d6:f8:69:6d:ff:7c:d6:56:ab:25:91:cc:bc:c6:
64:b5:8f:29:d0:f8:a8:c2:2e:e5:84:59:04:18:05:
36:62:ea:37:5c:de:af:3f:ff:26:4a:e1:86:f2:43:
3a:a4:74:36:c8:73:3a:44:2c:2a:0e:88:28:a3:98:
70:39:6f:94:f1:fa:92:90:b8:31:30:1f:d6:1f:34:
2d:47:47:a7:62:b8:2d:15:62:5a:c4:8e:4b:0c:23:
24:ab:7f:58:79:08:86:68:99:e3:ed:2f:55:16:57:
e4:ef:82:b3:93:71:fe:2a:76:cb:b6:e4:03:fd:8a:
05:26:7b:f0:8d:27:b5:03:9a:b3:60:b2:74:cb:b2:
a8:0f:5a:06:8d:37:5d:bb:47:8f:e0:fc:e8:33:9e:
46:06:e4:87:ef:01:f7:db:f6:18:50:12:60:02:1e:
1e:5d:96:b4:e1:22:9c:97:bd:83:7d:dc:67:59:f6:
3c:69:ab:c8:86:97:46:cc:b2:2b:4e:12:e0:6a:74:
fb:79:9f:d6:5c:f7:f3:4f:b1:04:ea:d9:f6:3e:98:
bb:d7:9b:4c:61:de:65:6b:56:22:7f:39:14:f2:4a:
a3:40:23:85:07:4b:e4:43:3e:09:4a:31:03:af:30:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:81:07:F5:C4:A5:50:5B:5D:C5:97:FB:CE:BF:03:F8:E1:80:B4:53
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YoEH9cSlUFtdxZf7zr8D-OGAtFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.106.0/23
79.176.184.0/21
109.66.28.0/23
109.66.168.0/21
109.66.234.0/23
109.66.246.0/23
Signature Algorithm: sha256WithRSAEncryption
60:74:60:00:0c:44:36:75:68:79:92:6a:fd:fe:82:00:7d:db:
10:6f:8e:90:49:d7:db:33:96:72:8a:7a:ad:fb:c1:bb:95:85:
b4:25:f7:b4:ee:47:2b:ed:a5:c3:8d:c7:64:4d:a9:94:af:dd:
f3:e6:f5:05:d6:a7:51:1b:14:9d:ab:0d:c0:34:7e:39:f1:af:
4a:00:b8:f2:e8:70:cf:37:07:f3:3d:96:88:1b:f3:33:1e:e7:
73:04:09:22:fb:34:be:9f:37:68:ab:49:31:da:dc:86:18:b5:
1b:76:5e:50:f1:30:f0:31:e6:57:1d:ea:8a:41:83:16:db:10:
23:e7:63:ce:70:57:63:f8:a4:62:e4:a7:fe:00:90:bd:69:c4:
36:4b:78:41:17:dc:bc:f7:e6:3f:31:6f:62:e8:18:59:27:45:
60:c1:9e:aa:e6:ce:62:b1:6a:e3:33:6e:15:4b:52:51:90:fa:
72:75:8c:ed:87:a1:69:37:65:dc:e1:a9:e5:45:00:8d:26:e6:
ae:ce:40:aa:0b:a6:ab:8a:5f:6f:0f:cd:8a:b0:34:eb:27:c0:
81:3c:4c:50:df:34:2d:0d:23:7e:ad:d9:f8:6f:04:51:d6:ab:
48:99:01:82:73:59:76:a8:90:a5:b2:3f:aa:51:7d:5b:46:59:
28:f4:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:29 2026 by rpki-client