Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mKASfEZe4zpTRNd_LVw-Kbsm0WA.roa
File: mKASfEZe4zpTRNd_LVw-Kbsm0WA.roa (raw, json)
Hash identifier: a9Vfnorz1nX4qJS7pT2eBxbPdv2F6YsNhCeRqSncGzc=
Subject key identifier: 98:A0:12:7C:46:5E:E3:3A:53:44:D7:7F:2D:5C:3E:29:BB:26:D1:60
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F499961A02B7932E58D586D533E89797D
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mKASfEZe4zpTRNd_LVw-Kbsm0WA.roa
Signing time: Fri 10 Jul 2026 01:16:56 +0000
ROA not before: Fri 10 Jul 2026 01:16:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 79.176.121.0/24 maxlen: 24
79.182.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:49:99:61:a0:2b:79:32:e5:8d:58:6d:53:3e:89:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 10 01:16:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a0127c465ee33a5344d77f2d5c3e29bb26d160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:6d:43:47:dd:e8:31:16:c4:1c:ba:79:c1:
d4:c0:68:56:a8:42:de:7b:f4:ac:25:0e:62:b4:39:
ae:27:43:4a:50:6e:24:5c:e8:81:85:29:81:fe:8d:
ff:f8:84:a8:29:1e:87:20:2e:ee:f2:5b:4b:41:a5:
54:6d:b0:da:db:31:cc:32:7c:8c:0f:2e:a1:20:b8:
50:f9:d7:1b:0d:85:8a:bf:87:41:d6:fd:10:8d:ff:
3d:77:e0:47:75:45:42:24:07:7e:1d:b1:35:ad:b6:
44:e5:b7:e1:aa:a2:bd:cb:80:0a:64:af:6c:ae:35:
54:26:35:87:94:ab:de:e5:b9:6d:96:bd:0b:01:77:
27:31:45:7a:3e:fc:8f:fe:81:37:3b:41:21:fb:f4:
06:64:6f:f3:36:e3:81:a7:85:33:ef:80:a1:1c:3b:
53:87:b4:19:26:3d:cc:c6:c9:f0:a8:99:28:86:00:
b3:9c:0c:cb:96:11:3c:65:a0:e8:70:e6:c0:ba:78:
a0:ca:0f:6b:f6:56:cc:3f:ab:dd:56:6f:2a:95:0b:
77:af:85:7e:20:e5:21:d1:e8:35:ec:06:0e:a4:fe:
72:a5:4e:5b:69:c4:74:b6:40:47:f8:d1:35:7e:b0:
d4:6d:3a:84:91:cd:9b:70:07:a3:55:d5:25:ce:a0:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A0:12:7C:46:5E:E3:3A:53:44:D7:7F:2D:5C:3E:29:BB:26:D1:60
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mKASfEZe4zpTRNd_LVw-Kbsm0WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.121.0/24
79.182.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:08:ad:ef:b4:ca:33:d7:7e:59:70:4d:00:f4:61:77:a4:a4:
5c:7d:03:1d:e8:14:45:4f:a3:f9:72:02:f6:43:29:74:ce:e6:
02:30:37:a5:20:15:91:ee:22:4d:b9:2e:60:05:2d:81:aa:10:
97:75:78:b3:30:97:cb:47:6a:5b:e7:0d:1f:e8:6a:30:1e:15:
3b:34:4f:c3:df:e8:3a:92:1b:c8:02:cb:a1:2e:44:eb:ab:29:
21:d6:ca:c5:59:3b:97:55:9c:8c:78:91:f4:f3:f1:1f:25:bd:
94:9c:ff:0e:72:91:09:5d:fe:5b:46:d8:02:d9:e3:ae:4b:85:
30:56:5e:13:1c:a1:5d:b3:da:58:d8:3c:ea:d8:90:13:11:7a:
a2:11:de:71:36:66:db:fd:d3:b1:36:99:bb:d6:e2:b9:0f:56:
3d:f4:f9:37:5e:16:7e:f1:20:b2:6e:f5:1b:7d:cd:c0:f2:20:
92:a2:67:59:ea:a6:29:4a:81:af:8d:ff:b9:4c:87:e4:03:e3:
1c:01:43:e1:86:b4:4c:fa:c9:8c:0b:91:ad:0d:2c:8c:a0:a1:
0a:eb:40:9d:71:bf:33:d0:6a:59:8a:98:bb:ea:28:4b:0c:2e:
5c:85:5f:78:0b:46:e2:65:67:13:b4:84:db:d4:3a:ac:7c:cc:
83:a4:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:24 2026 by rpki-client