Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/dXjiGv52gZAHnFY0adh6D8ALEbk.roa
File: dXjiGv52gZAHnFY0adh6D8ALEbk.roa (raw, json)
Hash identifier: 4eZUASFLR400gs9RBDLD6zYs5vb8XWdrBSpeWpBN3SM=
Subject key identifier: 75:78:E2:1A:FE:76:81:90:07:9C:56:34:69:D8:7A:0F:C0:0B:11:B9
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F9A1105ECB97819817096126804B974C1
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/dXjiGv52gZAHnFY0adh6D8ALEbk.roa
Signing time: Sat 25 Jul 2026 16:17:14 +0000
ROA not before: Sat 25 Jul 2026 16:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 79.176.227.0/24 maxlen: 24
79.182.37.0/24 maxlen: 24
109.66.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:11:05:ec:b9:78:19:81:70:96:12:68:04:b9:74:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 25 16:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7578e21afe768190079c563469d87a0fc00b11b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:83:bd:85:5a:62:65:f8:e4:dd:e4:74:55:
cb:56:e1:e5:bd:7a:aa:0f:63:1f:11:1d:b9:a4:c1:
aa:40:7e:c3:d3:1d:a1:d3:d7:51:d7:d9:c0:39:93:
d4:a2:1b:9a:21:4b:7c:62:99:e8:e8:30:0f:98:cd:
b6:bb:b3:21:7a:08:56:c0:21:92:ba:15:4c:9d:56:
c9:94:3a:4d:d4:30:7f:03:65:6d:9a:0f:e7:79:ed:
fb:0d:9c:6e:bb:78:2e:07:b3:4a:f4:42:76:53:7c:
dd:77:01:85:d6:95:23:d0:1c:1b:2e:2b:0d:4e:22:
31:e5:bc:21:15:31:e4:96:aa:e6:b2:53:8f:24:47:
f2:28:94:85:36:91:7f:49:11:8d:4f:25:c6:ea:0a:
43:2b:63:f3:c5:bc:9a:55:50:43:83:c9:79:40:b4:
61:f5:e5:6f:71:44:96:ea:b8:8a:72:04:02:57:15:
de:72:87:ef:a3:80:2c:5e:b3:33:40:32:5d:86:0f:
74:99:53:ed:a6:26:00:2b:8d:80:c8:17:c2:da:95:
84:fe:84:2e:20:e5:14:ef:6d:f2:4b:d4:64:94:f8:
96:65:b3:d6:1f:f7:5a:a1:6a:24:fc:3c:8d:d0:5d:
70:86:51:54:0b:8a:e5:d6:d1:5c:f5:df:00:14:2e:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:E2:1A:FE:76:81:90:07:9C:56:34:69:D8:7A:0F:C0:0B:11:B9
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/dXjiGv52gZAHnFY0adh6D8ALEbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.227.0/24
79.182.37.0/24
109.66.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bf:25:1d:6a:e4:8d:f5:58:40:c1:61:0f:99:8b:c7:c4:b9:
d9:a5:46:0f:ba:63:9e:b7:b7:c6:34:c2:1a:a7:a9:df:dc:b6:
66:12:5f:8b:33:87:90:3a:2d:77:01:09:b2:4b:a9:0e:58:23:
20:3b:49:39:f3:ea:c0:f6:6a:13:e6:b2:d3:e5:ed:28:cd:b9:
62:98:bc:59:7e:db:a4:99:fc:a9:d8:fd:f8:ce:bc:e8:ad:ad:
70:01:df:8a:2a:6b:44:8a:d2:97:05:b4:87:74:78:dc:2e:d6:
fb:6d:f5:4e:67:8e:a7:3a:6c:ca:91:d4:12:c5:a0:0a:31:7e:
77:b3:af:0c:19:f1:04:54:4f:14:d9:58:9b:be:e6:66:56:a4:
32:d3:cf:95:da:33:a9:f2:e1:e2:f3:2c:b7:cc:fc:cd:04:fd:
58:15:5e:00:2b:d8:89:30:a9:7b:47:61:5e:a5:34:41:7b:9d:
01:a6:ba:b8:eb:c9:1b:4b:11:ef:70:81:45:ec:f4:07:bb:d8:
f0:a9:76:a0:14:70:85:61:e5:f2:85:f3:03:91:30:36:10:12:
cd:f3:9b:a8:f7:c7:ba:9f:02:ea:36:e7:5b:2d:57:fb:32:18:
ec:49:af:8d:8d:8e:fe:c2:89:03:90:81:63:54:6f:58:ae:bb:
80:9e:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:41 2026 by rpki-client