Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n1W2cxEt7k59L_tAtSprou9E9A4.roa
File: n1W2cxEt7k59L_tAtSprou9E9A4.roa (raw, json)
Hash identifier: G5Gif/aMZFOmCWjtH+7rAlYzi8u8nFN5IQdTVI8WNMU=
Subject key identifier: 9F:55:B6:73:11:2D:EE:4E:7D:2F:FB:40:B5:2A:6B:A2:EF:44:F4:0E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A024DEAE10CF61EC337F19DC87DB2C4110
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n1W2cxEt7k59L_tAtSprou9E9A4.roa
Signing time: Fri 21 Aug 2026 15:09:28 +0000
ROA not before: Fri 21 Aug 2026 15:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 79.176.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:de:ae:10:cf:61:ec:33:7f:19:dc:87:db:2c:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 21 15:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f55b673112dee4e7d2ffb40b52a6ba2ef44f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:28:9f:a2:b5:17:32:62:2c:41:01:2d:d9:
59:76:ad:b0:78:99:b5:9e:2e:0f:6e:2b:c8:08:f2:
3c:26:72:f8:37:bd:94:ab:86:53:21:ed:78:2c:1c:
41:78:d4:72:bc:c7:4d:7b:23:4f:c4:18:1d:13:a1:
58:be:ca:69:c2:9a:60:43:12:22:20:48:60:68:c3:
58:ce:9f:30:16:39:13:dd:16:37:44:69:e1:8e:46:
33:45:22:d1:fa:77:cc:7d:36:20:99:1c:b6:b1:2b:
d1:61:89:28:47:6f:f9:c9:39:82:77:ef:84:6f:44:
02:6e:b5:b7:92:3d:f8:dc:91:2b:ce:eb:8f:9e:6a:
b0:24:b4:e5:c8:d8:a1:dd:f0:58:c5:99:ba:7c:5c:
64:b7:93:2f:51:45:9f:72:86:05:83:47:34:65:ac:
a7:60:23:53:e4:81:17:98:b3:7a:f1:ff:db:1b:20:
d6:bf:c5:c5:08:0f:06:49:84:db:6d:84:02:42:11:
91:ef:17:38:28:9f:3c:45:36:8d:3b:86:78:5c:bb:
bd:f6:b9:ff:88:da:ac:5c:85:2c:61:2f:8a:bc:37:
f1:84:12:43:f5:fe:5b:d4:1f:f4:8b:f5:7e:5c:71:
1d:07:d9:27:50:9f:63:b7:23:bc:60:28:14:5b:f5:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:B6:73:11:2D:EE:4E:7D:2F:FB:40:B5:2A:6B:A2:EF:44:F4:0E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n1W2cxEt7k59L_tAtSprou9E9A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.142.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3e:2e:fd:2f:60:de:67:d8:d6:e5:a8:2a:7e:bd:50:57:2d:
b9:20:c7:83:0e:70:04:b6:df:7e:c8:95:53:30:29:b8:51:fe:
cc:6a:72:13:60:13:ff:83:9e:8a:c9:c7:a3:50:35:e4:9c:2e:
cf:d8:79:5f:be:ef:3e:2d:f8:3f:34:02:3f:2b:14:73:d3:f3:
16:72:45:46:1a:f9:88:c0:6e:40:40:88:21:5d:fb:38:c6:74:
b8:9c:09:78:d9:2f:a0:a4:93:14:68:93:87:be:50:b2:6f:4f:
2c:69:b6:5d:b7:65:c2:42:07:b9:7e:fe:54:d6:47:b8:30:78:
21:dd:1b:bb:25:ba:fa:1c:e3:8d:5c:a2:24:1b:5f:1e:a7:14:
90:34:9a:66:65:16:dd:65:ac:2a:d8:b2:5e:54:28:67:41:cf:
00:40:92:c2:d9:bc:2f:fe:eb:98:91:05:e2:00:c2:13:ec:d3:
34:98:54:21:30:96:98:2c:f4:9d:1e:68:c7:e0:25:95:91:ee:
06:d9:d2:01:94:a3:52:1e:2c:f1:7b:7a:b6:0e:11:2e:33:33:
77:2f:72:b7:2b:6e:5c:f8:84:8b:49:40:02:7d:a7:b2:3e:9f:
0a:2b:7c:a6:5a:21:a0:ce:8a:4b:11:33:c4:fa:d3:80:57:00:
c2:68:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 02:52:34 2026 by rpki-client