Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cERJ1bUapnblH3iJTezEEjSm8YY.roa
File: cERJ1bUapnblH3iJTezEEjSm8YY.roa (raw, json)
Hash identifier: gOiD+I3MLfEk5Ma6AgWvWwTzSY8XKGnvkqnyQcoSKJk=
Subject key identifier: 70:44:49:D5:B5:1A:A6:76:E5:1F:78:89:4D:EC:C4:12:34:A6:F1:86
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A06C3ACFA5491C173944BBC3498027B285
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cERJ1bUapnblH3iJTezEEjSm8YY.roa
Signing time: Fri 04 Sep 2026 11:43:08 +0000
ROA not before: Fri 04 Sep 2026 11:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 79.176.26.0/24 maxlen: 24
79.176.33.0/24 maxlen: 24
79.176.36.0/24 maxlen: 24
79.176.113.0/24 maxlen: 24
79.176.120.0/24 maxlen: 24
79.176.130.0/24 maxlen: 24
79.176.133.0/24 maxlen: 24
79.176.160.0/24 maxlen: 24
79.176.171.0/24 maxlen: 24
79.176.173.0/24 maxlen: 24
79.176.245.0/24 maxlen: 24
79.182.68.0/24 maxlen: 24
79.182.87.0/24 maxlen: 24
79.182.91.0/24 maxlen: 24
79.182.123.0/24 maxlen: 24
79.182.194.0/24 maxlen: 24
79.182.200.0/24 maxlen: 24
79.182.206.0/24 maxlen: 24
79.182.237.0/24 maxlen: 24
79.182.245.0/24 maxlen: 24
79.182.247.0/24 maxlen: 24
79.183.11.0/24 maxlen: 24
79.183.12.0/24 maxlen: 24
79.183.13.0/24 maxlen: 24
79.183.15.0/24 maxlen: 24
79.183.17.0/24 maxlen: 24
79.183.19.0/24 maxlen: 24
79.183.21.0/24 maxlen: 24
79.183.23.0/24 maxlen: 24
79.183.26.0/24 maxlen: 24
79.183.28.0/24 maxlen: 24
79.183.30.0/24 maxlen: 24
79.183.32.0/24 maxlen: 24
79.183.34.0/24 maxlen: 24
79.183.36.0/24 maxlen: 24
79.183.38.0/24 maxlen: 24
79.183.40.0/24 maxlen: 24
79.183.42.0/24 maxlen: 24
79.183.45.0/24 maxlen: 24
79.183.47.0/24 maxlen: 24
79.183.48.0/24 maxlen: 24
79.183.49.0/24 maxlen: 24
79.183.51.0/24 maxlen: 24
79.183.53.0/24 maxlen: 24
79.183.55.0/24 maxlen: 24
79.183.57.0/24 maxlen: 24
79.183.59.0/24 maxlen: 24
79.183.61.0/24 maxlen: 24
79.183.63.0/24 maxlen: 24
79.183.82.0/24 maxlen: 24
79.183.84.0/24 maxlen: 24
79.183.86.0/24 maxlen: 24
79.183.88.0/24 maxlen: 24
79.183.90.0/24 maxlen: 24
79.183.92.0/24 maxlen: 24
79.183.95.0/24 maxlen: 24
79.183.97.0/24 maxlen: 24
79.183.99.0/24 maxlen: 24
79.183.101.0/24 maxlen: 24
79.183.104.0/24 maxlen: 24
79.183.107.0/24 maxlen: 24
79.183.109.0/24 maxlen: 24
79.183.111.0/24 maxlen: 24
79.183.113.0/24 maxlen: 24
79.183.115.0/24 maxlen: 24
79.183.117.0/24 maxlen: 24
79.183.119.0/24 maxlen: 24
79.183.121.0/24 maxlen: 24
79.183.124.0/24 maxlen: 24
79.183.127.0/24 maxlen: 24
109.66.36.0/24 maxlen: 24
109.66.67.0/24 maxlen: 24
109.66.91.0/24 maxlen: 24
109.66.95.0/24 maxlen: 24
109.66.184.0/24 maxlen: 24
109.66.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:3a:cf:a5:49:1c:17:39:44:bb:c3:49:80:27:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 4 11:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=704449d5b51aa676e51f78894decc41234a6f186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:60:e1:63:5d:1d:5d:d2:6f:65:ce:52:0f:
89:c7:5f:3a:63:4c:1a:75:80:f5:ca:1d:02:cf:ca:
c5:13:2e:d6:9d:38:f3:15:3c:4a:87:d1:3f:08:ff:
bf:86:be:d0:32:25:56:c9:74:a9:39:e0:be:33:12:
bd:3a:c0:2f:02:96:e0:ae:7f:bf:c4:01:99:31:70:
5d:55:f1:7b:f9:c3:e4:1a:23:c9:cf:f6:e3:c0:f3:
54:e9:60:55:23:f8:6b:6d:b4:98:10:47:e7:06:21:
c9:5d:b5:e7:17:bb:b8:8d:be:63:b0:d9:ef:38:6a:
a5:54:56:d6:fa:72:9e:92:be:ab:70:e1:f2:71:40:
dd:e1:e8:0d:11:3b:fd:0d:8a:93:08:a5:11:41:f7:
f6:a5:1b:03:0c:97:27:c1:3c:d4:60:f2:9c:2d:57:
b7:89:40:18:b7:32:6f:82:e7:7c:17:86:19:c3:ef:
f4:56:f5:42:bf:7d:8c:64:8a:fe:7a:0a:4d:f2:53:
52:13:a6:47:0d:59:af:fd:9b:8f:d0:37:8b:ba:6b:
84:32:60:9e:b2:e1:27:f2:e4:19:49:2f:b5:87:a8:
f9:52:1f:4c:7f:a0:bd:62:3d:bd:41:ae:a2:6c:45:
55:58:55:4b:eb:f2:92:e2:be:4b:ed:25:33:74:90:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:49:D5:B5:1A:A6:76:E5:1F:78:89:4D:EC:C4:12:34:A6:F1:86
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cERJ1bUapnblH3iJTezEEjSm8YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.26.0/24
79.176.33.0/24
79.176.36.0/24
79.176.113.0/24
79.176.120.0/24
79.176.130.0/24
79.176.133.0/24
79.176.160.0/24
79.176.171.0/24
79.176.173.0/24
79.176.245.0/24
79.182.68.0/24
79.182.87.0/24
79.182.91.0/24
79.182.123.0/24
79.182.194.0/24
79.182.200.0/24
79.182.206.0/24
79.182.237.0/24
79.182.245.0/24
79.182.247.0/24
79.183.11.0-79.183.13.255
79.183.15.0/24
79.183.17.0/24
79.183.19.0/24
79.183.21.0/24
79.183.23.0/24
79.183.26.0/24
79.183.28.0/24
79.183.30.0/24
79.183.32.0/24
79.183.34.0/24
79.183.36.0/24
79.183.38.0/24
79.183.40.0/24
79.183.42.0/24
79.183.45.0/24
79.183.47.0-79.183.49.255
79.183.51.0/24
79.183.53.0/24
79.183.55.0/24
79.183.57.0/24
79.183.59.0/24
79.183.61.0/24
79.183.63.0/24
79.183.82.0/24
79.183.84.0/24
79.183.86.0/24
79.183.88.0/24
79.183.90.0/24
79.183.92.0/24
79.183.95.0/24
79.183.97.0/24
79.183.99.0/24
79.183.101.0/24
79.183.104.0/24
79.183.107.0/24
79.183.109.0/24
79.183.111.0/24
79.183.113.0/24
79.183.115.0/24
79.183.117.0/24
79.183.119.0/24
79.183.121.0/24
79.183.124.0/24
79.183.127.0/24
109.66.36.0/24
109.66.67.0/24
109.66.91.0/24
109.66.95.0/24
109.66.184.0/24
109.66.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:bd:dc:bf:50:98:d4:29:94:42:8e:bb:00:7c:24:85:1a:34:
fe:6d:14:00:5a:4a:34:57:18:fb:0c:e5:82:95:c4:67:4f:ba:
0a:ac:73:35:4e:d7:af:f8:6a:07:ce:c3:98:b4:12:2f:ff:7c:
41:3d:1f:48:81:43:f1:de:6b:6f:88:2e:e2:14:ee:f9:ed:e1:
e4:ae:83:a0:5c:7d:11:90:9c:ef:1e:0b:d4:d1:43:d0:6d:57:
97:04:e0:8d:b9:50:03:b3:4c:71:e6:e6:4e:11:4c:c1:10:09:
bd:d0:6b:88:b3:55:3e:4c:e0:2e:0c:ae:9a:b3:88:c4:f1:77:
e7:b0:b0:bc:7e:e8:06:c3:5e:5d:5c:f1:9d:51:38:a2:af:a3:
89:76:8d:42:f8:23:10:73:60:1e:c8:e2:05:8e:28:15:bc:c8:
96:d1:c3:14:37:e0:8f:36:4f:07:1b:6a:72:fd:f7:2f:f1:7a:
5d:9a:7b:bb:eb:bc:63:04:f9:70:ef:e8:08:74:e9:a7:2d:c3:
b5:a7:4c:d0:45:a7:e3:16:bd:29:88:13:84:ff:0c:5d:79:ec:
ae:a8:86:6d:c7:1a:db:a1:e8:34:39:23:d9:26:e9:a4:b1:94:
e5:f5:e6:06:f4:1e:cd:15:29:78:66:d1:49:cd:ef:e7:88:c5:
29:f9:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:09:56 2026 by rpki-client