Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iPTINt4fN19pMjX47HxlyiRrT54.roa
File: iPTINt4fN19pMjX47HxlyiRrT54.roa (raw, json)
Hash identifier: ukInp2OBdCZGLFPt6/ApOhE6s9RhJJbnAJ2ZSJpchL0=
Subject key identifier: 88:F4:C8:36:DE:1F:37:5F:69:32:35:F8:EC:7C:65:CA:24:6B:4F:9E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF10C1EFEBA6D2846BC4748DA546E1B6A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iPTINt4fN19pMjX47HxlyiRrT54.roa
Signing time: Tue 11 Aug 2026 13:38:51 +0000
ROA not before: Tue 11 Aug 2026 13:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 79.176.28.0/24 maxlen: 24
79.176.35.0/24 maxlen: 24
79.176.40.0/24 maxlen: 24
79.176.83.0/24 maxlen: 24
79.176.150.0/24 maxlen: 24
79.176.153.0/24 maxlen: 24
79.176.156.0/24 maxlen: 24
109.66.37.0/24 maxlen: 24
109.66.39.0/24 maxlen: 24
109.66.45.0/24 maxlen: 24
109.66.47.0/24 maxlen: 24
109.66.50.0/24 maxlen: 24
109.66.61.0/24 maxlen: 24
109.66.183.0/24 maxlen: 24
109.66.185.0/24 maxlen: 24
109.66.187.0/24 maxlen: 24
109.66.189.0/24 maxlen: 24
109.66.191.0/24 maxlen: 24
109.66.193.0/24 maxlen: 24
109.66.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 15:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:0c:1e:fe:ba:6d:28:46:bc:47:48:da:54:6e:1b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 11 13:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88f4c836de1f375f693235f8ec7c65ca246b4f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:73:2d:57:de:ce:3b:5f:d9:d7:56:f2:ad:
60:18:24:88:b1:d3:6a:3f:aa:0e:90:cb:b7:68:7e:
34:97:51:18:83:ff:26:3c:8d:55:f5:d2:af:8a:60:
b8:8c:34:45:78:60:a4:f4:12:0a:fb:62:cc:93:3a:
bf:2c:81:4b:c1:11:6a:26:45:fa:d7:7b:c7:20:2a:
12:e4:86:f8:6c:5b:1a:25:ab:eb:1f:f3:43:8c:33:
a1:6d:f4:7a:b9:74:a1:72:55:4e:21:2b:29:ab:a5:
9c:84:31:45:5d:1c:4f:85:0e:67:a2:d9:35:fb:5b:
cc:d8:1b:72:db:58:fb:14:8b:fb:a9:5e:d3:2b:2a:
05:e3:cd:8a:75:de:db:ec:97:50:38:5d:2c:25:ee:
bc:df:6b:0c:4d:2d:f9:75:c1:db:65:fc:05:85:05:
3c:a0:ce:e3:a5:dc:22:95:df:b0:9d:58:76:30:7d:
88:55:e1:2a:85:4e:85:49:71:0f:75:13:d8:96:be:
93:01:cf:12:ce:07:a8:c9:0b:a7:a7:7c:8f:33:30:
3e:01:5b:5b:89:db:7c:71:52:a8:79:50:a0:a6:c8:
e3:93:48:8a:2d:f1:72:d5:cd:a6:06:39:7b:58:76:
62:c3:b1:cd:0c:c5:64:79:2b:24:06:3d:d0:dd:41:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:C8:36:DE:1F:37:5F:69:32:35:F8:EC:7C:65:CA:24:6B:4F:9E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iPTINt4fN19pMjX47HxlyiRrT54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.28.0/24
79.176.35.0/24
79.176.40.0/24
79.176.83.0/24
79.176.150.0/24
79.176.153.0/24
79.176.156.0/24
109.66.37.0/24
109.66.39.0/24
109.66.45.0/24
109.66.47.0/24
109.66.50.0/24
109.66.61.0/24
109.66.183.0/24
109.66.185.0/24
109.66.187.0/24
109.66.189.0/24
109.66.191.0/24
109.66.193.0/24
109.66.252.0/22
Signature Algorithm: sha256WithRSAEncryption
78:21:d4:3a:7f:bf:11:fb:54:43:28:f4:84:41:f6:18:6e:6b:
2e:ad:01:34:27:43:7f:c1:d0:d8:8e:44:cc:a3:5d:18:31:45:
1a:aa:f4:d5:65:c9:e6:ed:98:ce:6a:d3:ac:22:b9:74:73:2c:
a6:de:bb:ef:50:4e:57:75:64:3d:11:62:93:d7:68:ab:c8:bd:
ab:53:f7:bb:a3:fd:9f:47:d4:26:fd:a8:83:57:26:aa:ea:c8:
9f:6d:fd:c6:ac:80:1e:04:8c:11:26:72:36:cd:3e:45:2a:b2:
b3:a9:23:15:b9:f1:fc:74:b9:9f:48:0f:32:60:5e:ce:7d:06:
1f:92:60:27:ae:95:6a:ee:18:41:bb:d8:56:1b:c5:01:6c:73:
b5:bc:49:f8:77:16:96:bb:d1:4a:51:f5:26:49:4d:21:f6:2e:
b2:e5:1b:43:23:13:02:74:f1:3e:fb:2b:1f:71:af:83:ae:b3:
ea:a0:f0:ad:e6:3f:86:97:5a:d9:9d:28:f0:18:44:0f:1c:1c:
48:bf:35:72:4f:58:10:6b:f1:c9:9f:41:f3:c4:af:3c:d6:ab:
c8:09:62:34:7a:4e:c4:a3:c2:60:dc:b4:42:74:d7:66:1c:4c:
ea:c9:25:b8:d2:68:b6:05:e1:6b:ab:5e:44:06:27:e1:b0:0b:
27:5f:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:18 2026 by rpki-client