Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/i1y7Hp85KBuciZFRuIa7qCW3FTU.roa
File: i1y7Hp85KBuciZFRuIa7qCW3FTU.roa (raw, json)
Hash identifier: I0XZaekqgHMOsjiZ4bQOnCoS8X5c8QG+87LHENhM0kY=
Subject key identifier: 8B:5C:BB:1E:9F:39:28:1B:9C:89:91:51:B8:86:BB:A8:25:B7:15:35
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A036F7402F34D6C13C2E99B8C1FC2B526D
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/i1y7Hp85KBuciZFRuIa7qCW3FTU.roa
Signing time: Tue 25 Aug 2026 03:29:28 +0000
ROA not before: Tue 25 Aug 2026 03:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 79.182.152.0/24 maxlen: 24
79.182.223.0/24 maxlen: 24
79.183.108.0/24 maxlen: 24
79.183.209.0/24 maxlen: 24
79.183.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:36:f7:40:2f:34:d6:c1:3c:2e:99:b8:c1:fc:2b:52:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 25 03:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b5cbb1e9f39281b9c899151b886bba825b71535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:48:ce:24:86:04:d1:6e:e7:f4:2a:2e:3c:
0a:c0:f7:77:c4:8f:b1:02:77:6f:3b:73:f4:0a:af:
32:be:85:d4:06:8a:fd:09:bc:41:32:e6:2e:b6:93:
7b:8b:ee:e5:48:53:8b:b9:3b:ca:ba:5c:50:3b:0d:
7a:bf:fe:65:eb:96:e1:b7:aa:dd:cc:d1:08:44:7f:
5b:56:6d:a9:f4:32:a4:ed:da:85:56:bf:0a:80:6e:
d2:37:c0:29:67:6c:76:2e:0a:f7:2d:9c:b2:0e:4c:
b8:e9:c3:bc:35:a4:26:9f:a7:f3:f8:57:27:0a:f6:
e3:bc:7e:67:21:02:62:44:95:65:8f:ec:3b:7f:b2:
f2:ff:27:35:03:a1:29:01:3c:76:7e:b8:fd:c5:8c:
21:21:d9:53:e0:42:f6:0c:a6:57:9f:df:c9:06:2c:
f9:c1:4f:a5:14:66:c9:ae:55:f7:56:27:e7:95:95:
14:31:a0:b2:9b:83:8a:f6:be:6c:0c:4c:e8:4e:e4:
ec:c7:3e:37:60:ea:05:54:87:33:01:6e:55:0c:e4:
4e:27:eb:95:ae:3b:2f:82:d8:4f:3c:e7:22:c5:b9:
8d:57:3e:71:a8:ad:27:0d:ee:8c:39:af:91:50:d5:
60:26:3b:b7:d3:51:34:6f:09:4b:cb:c8:6b:ca:42:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:BB:1E:9F:39:28:1B:9C:89:91:51:B8:86:BB:A8:25:B7:15:35
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/i1y7Hp85KBuciZFRuIa7qCW3FTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.152.0/24
79.182.223.0/24
79.183.108.0/24
79.183.209.0/24
79.183.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:34:1a:fd:65:2d:c0:9a:4d:0d:4c:63:f8:d6:c8:5f:0f:02:
35:c1:ce:14:5e:ff:2e:f2:e5:e3:2f:8c:03:c5:45:27:ac:8f:
02:aa:ff:c5:d6:68:3f:98:02:7b:0a:fd:96:2d:fd:7e:ac:01:
4c:e8:23:9d:3a:39:5d:9e:f4:33:82:77:fb:bf:e5:04:a4:0a:
e2:c5:d1:cd:03:f0:98:ea:01:5c:37:3b:7a:20:00:34:43:3d:
0f:f4:64:ea:f1:12:0e:bb:b5:de:68:13:1a:0d:7a:13:3f:63:
cb:38:57:db:ac:59:78:cc:f1:d2:77:67:a4:a4:b7:0c:27:19:
d4:34:06:6a:9b:34:bc:07:c7:a6:7f:49:f8:7d:bc:f5:23:5e:
d8:17:94:2d:1d:30:ff:43:88:8f:ee:e9:5a:cd:52:75:87:e5:
a4:2e:c2:3e:58:f0:5c:bd:81:f2:19:4d:2e:32:36:54:fa:04:
58:b7:64:4a:9d:7e:cc:4f:d0:e7:c9:ca:24:e3:30:f4:f9:1c:
fe:9a:c2:71:e6:63:39:d8:7c:c6:64:2b:1f:f6:70:2d:dc:1f:
c6:71:57:e4:25:02:2c:80:92:af:7f:f8:f1:87:57:22:2c:40:
9a:75:97:cd:74:5f:43:1a:60:23:f4:59:ea:a2:e4:8d:a0:04:
85:a8:23:d4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaA290AvNNbBPC6ZuMH8K1JtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODI1MDMyOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjVjYmIxZTlmMzkyODFiOWM4OTkxNTFiODg2YmJhODI1YjcxNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hhIziSGBNFu5/QqLjwKwPd3xI+x
AndvO3P0Cq8yvoXUBor9CbxBMuYutpN7i+7lSFOLuTvKulxQOw16v/5l65bht6rd
zNEIRH9bVm2p9DKk7dqFVr8KgG7SN8ApZ2x2Lgr3LZyyDky46cO8NaQmn6fz+Fcn
CvbjvH5nIQJiRJVlj+w7f7Ly/yc1A6EpATx2frj9xYwhIdlT4EL2DKZXn9/JBiz5
wU+lFGbJrlX3VifnlZUUMaCym4OK9r5sDEzoTuTsxz43YOoFVIczAW5VDOROJ+uV
rjsvgthPPOcixbmNVz5xqK0nDe6MOa+RUNVgJju301E0bwlLy8hrykJGIQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFItcux6fOSgbnImRUbiGu6gltxU1MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvaTF5N0hwODVLQnVjaVpGUnVJYTdxQ1czRlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAT7aYAwQA
T7bfAwQAT7dsAwQAT7fRAwQAT7fzMA0GCSqGSIb3DQEBCwUAA4IBAQBrNBr9ZS3A
mk0NTGP41shfDwI1wc4UXv8u8uXjL4wDxUUnrI8Cqv/F1mg/mAJ7Cv2WLf1+rAFM
6COdOjldnvQzgnf7v+UEpArixdHNA/CY6gFcNzt6IAA0Qz0P9GTq8RIOu7XeaBMa
DXoTP2PLOFfbrFl4zPHSd2ekpLcMJxnUNAZqmzS8B8emf0n4fbz1I17YF5QtHTD/
Q4iP7ulazVJ1h+WkLsI+WPBcvYHyGU0uMjZU+gRYt2RKnX7MT9Dnycok4zD0+Rz+
msJx5mM52HzGZCsf9nAt3B/GcVfkJQIsgJKvf/jxh1ciLECadZfNdF9DGmAj9Fnq
ouSNoASFqCPU
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:20 2026 by rpki-client