Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/kZeb4yZaZzr8B8-Dci6r4buyfnY.roa
File: kZeb4yZaZzr8B8-Dci6r4buyfnY.roa (raw, json)
Hash identifier: h8pv+qXdWEUdmyhIvBL08rd2I7vdZ4hXpauPfnI4Jxk=
Subject key identifier: 91:97:9B:E3:26:5A:67:3A:FC:07:CF:83:72:2E:AB:E1:BB:B2:7E:76
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A029F3A2CD5035FBAF2312DA6F7011A888
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/kZeb4yZaZzr8B8-Dci6r4buyfnY.roa
Signing time: Sat 22 Aug 2026 14:50:27 +0000
ROA not before: Sat 22 Aug 2026 14:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 79.182.166.0/24 maxlen: 24
79.182.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 03:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:f3:a2:cd:50:35:fb:af:23:12:da:6f:70:11:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 22 14:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91979be3265a673afc07cf83722eabe1bbb27e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:33:96:71:3d:ac:ab:38:ce:ee:61:e2:d0:
01:4b:6e:b8:85:1c:cb:48:61:46:cb:50:3c:c1:9d:
ad:b2:31:15:67:3d:2f:bb:fc:4e:21:58:26:58:ab:
d3:75:44:12:ae:73:91:f0:0e:9b:f3:66:fa:7b:2c:
2c:39:5d:49:8b:f6:ad:1c:c3:2a:bc:ed:b2:48:a6:
99:d4:97:89:f5:6b:0e:a7:f2:43:7d:0a:5e:b6:ee:
44:37:8e:9e:e7:21:c5:8b:2b:07:93:9f:da:a3:3c:
fe:7b:21:56:ca:16:23:9b:f6:76:38:47:52:96:9c:
c3:13:52:7f:18:4b:c9:f7:e8:c0:87:4f:33:18:16:
ab:11:a5:0e:3c:15:0a:23:42:8a:c2:0d:5f:84:d3:
70:e5:5b:99:12:df:b3:fd:37:28:6a:c3:ed:f8:10:
cb:3e:8d:a5:26:98:78:dd:3d:77:52:c8:00:3c:a5:
5c:47:b4:c4:3b:d7:aa:57:39:5c:e7:44:ca:ea:29:
1b:76:b4:64:63:2a:7b:ec:c3:3d:f2:6d:47:76:83:
30:a1:d6:82:cd:e3:d5:9d:ab:83:87:51:57:cb:45:
35:70:93:51:53:12:78:c3:ae:a8:60:f1:cd:2e:40:
4c:b7:33:f7:2e:7a:90:4e:3b:bd:da:5b:cc:d5:60:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:9B:E3:26:5A:67:3A:FC:07:CF:83:72:2E:AB:E1:BB:B2:7E:76
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/kZeb4yZaZzr8B8-Dci6r4buyfnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.166.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:f1:be:14:10:6f:2d:e3:14:af:8f:fd:9a:a2:ea:43:20:66:
22:98:c8:04:35:a5:59:5b:93:38:3b:aa:7a:81:a5:c8:ae:f3:
9a:18:c7:61:d6:e9:20:a0:d1:f2:eb:af:05:02:33:6e:b3:14:
6b:70:e1:ba:22:44:df:35:ef:f9:aa:ac:00:c8:a3:0c:b7:b7:
78:19:95:db:53:ee:fa:c5:af:94:23:fb:cd:a9:7a:8c:5a:cf:
f2:0c:c3:d0:63:a9:29:e3:c3:d1:5c:96:0b:62:fc:db:ed:cd:
80:12:bb:57:9d:0c:bf:5d:b0:ab:2b:55:b0:7c:59:de:bd:d2:
eb:56:56:73:88:a2:0b:62:c9:be:ce:13:d3:ba:48:cd:71:57:
14:19:05:47:31:0c:69:c0:91:4d:09:db:14:a0:f6:22:ab:04:
22:e2:f9:77:c1:8d:94:c8:eb:c4:13:b5:36:56:55:00:7f:e0:
d2:7a:1e:22:68:6b:64:38:c6:01:19:db:64:84:8d:22:80:ab:
58:4e:87:6b:e2:12:c0:e8:33:f5:7a:89:89:cd:7a:8d:40:e8:
4c:90:08:00:7c:fa:1a:ba:ab:68:40:e8:f1:21:14:5a:68:1f:
e9:8a:f7:17:6f:54:9b:eb:86:80:57:08:2c:a8:42:c8:4d:db:
4c:5d:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:06:01 2026 by rpki-client