Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iqfCZS4hlo_1gH2VHTAQtEJIFzQ.roa
File: iqfCZS4hlo_1gH2VHTAQtEJIFzQ.roa (raw, json)
Hash identifier: 7R06hVcvKRS4r0mVMGe11l7riscRHNefp9iYByWYPXg=
Subject key identifier: 8A:A7:C2:65:2E:21:96:8F:F5:80:7D:95:1D:30:10:B4:42:48:17:34
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F9726DDA8FA8628F865CC09D89E270BB5
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iqfCZS4hlo_1gH2VHTAQtEJIFzQ.roa
Signing time: Sat 25 Jul 2026 02:42:14 +0000
ROA not before: Sat 25 Jul 2026 02:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 79.183.9.0/24 maxlen: 24
79.183.27.0/24 maxlen: 24
79.183.56.0/24 maxlen: 24
79.183.72.0/24 maxlen: 24
79.183.105.0/24 maxlen: 24
79.183.178.0/24 maxlen: 24
79.183.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:26:dd:a8:fa:86:28:f8:65:cc:09:d8:9e:27:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 25 02:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aa7c2652e21968ff5807d951d3010b442481734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:11:d0:84:19:06:2c:a7:a6:26:7b:64:91:
31:00:d4:da:72:30:92:bb:d1:e4:72:8b:9e:55:5c:
50:b1:7d:52:ec:67:99:f6:14:30:0c:88:4d:6c:bb:
74:89:99:ff:7c:bf:08:38:01:c3:63:27:fa:83:18:
21:4b:3d:be:67:5d:01:83:59:70:18:d7:d7:52:14:
82:1e:db:f0:ec:c1:45:d4:56:76:f4:16:9f:89:64:
e7:50:4f:fd:d1:79:be:fb:c3:0f:b0:eb:44:e7:b7:
bc:bd:93:44:2f:cd:52:04:2f:e8:ba:de:c0:a5:1d:
e9:c6:82:d0:f3:ea:ab:d5:5b:ba:4a:09:0f:f4:6f:
35:d6:e7:44:7e:9f:7f:26:9d:2c:06:55:12:38:90:
e9:3a:3d:3c:df:ee:01:f4:f3:78:23:c2:56:e3:b7:
a8:2d:ac:e5:07:ec:63:18:20:0b:12:12:7d:e8:a9:
e9:08:21:ac:53:3f:59:ed:29:78:e4:87:3e:59:aa:
7b:49:78:14:6c:ff:83:4f:59:e0:2b:50:fe:ce:4e:
ed:c5:7e:dc:93:8f:a8:a7:75:1d:b6:19:4c:25:ba:
f5:69:67:2c:f0:06:34:30:c9:0e:ef:6c:d4:21:04:
42:a0:1b:17:3a:c0:58:c6:fc:32:e0:4d:d4:a9:e9:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:C2:65:2E:21:96:8F:F5:80:7D:95:1D:30:10:B4:42:48:17:34
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/iqfCZS4hlo_1gH2VHTAQtEJIFzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.9.0/24
79.183.27.0/24
79.183.56.0/24
79.183.72.0/24
79.183.105.0/24
79.183.178.0/24
79.183.231.0/24
Signature Algorithm: sha256WithRSAEncryption
99:50:a1:3a:d7:d1:1c:fc:ab:3f:18:61:27:fc:4c:80:90:17:
b8:4f:c5:4d:b5:76:16:26:ed:54:6f:c3:89:f1:49:77:52:f6:
28:33:5b:96:c5:d1:bc:c0:0a:c6:32:db:91:7c:9e:1b:ac:b0:
f5:e6:9a:6c:3e:e9:8e:9a:2f:29:2a:6f:66:d7:94:c5:df:c0:
a4:a8:7a:ce:f6:7e:fc:04:95:6d:cc:11:aa:ba:d0:7b:98:2c:
fa:71:09:ff:cc:5e:06:43:77:c5:ec:d0:aa:06:11:11:3f:9a:
1e:05:57:c4:58:59:7c:32:b0:05:e6:d3:31:a3:ce:ef:1f:f8:
a4:44:6e:da:b1:19:70:ba:fb:78:ba:65:d9:51:88:6b:14:cb:
03:a1:7b:10:65:75:40:a6:9a:f3:31:31:5f:87:46:a8:95:84:
c6:8e:48:66:e4:07:60:9d:49:65:56:97:8f:0e:15:99:9e:4d:
ae:76:bd:3c:5c:f4:cb:08:b0:82:52:e7:d6:ec:1b:78:8d:f7:
d5:1b:55:8d:0d:0d:f6:56:33:51:a2:da:cf:d4:d2:25:2d:15:
1a:d7:2e:66:c0:ea:af:34:24:a5:f9:c0:d8:60:5a:fe:38:e3:
d3:a3:74:20:1e:a5:bd:62:c8:7f:98:f4:91:d4:9f:65:5f:19:
ff:9b:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:37 2026 by rpki-client