Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pqA3Jb81wvHNHdEt9NFs4cTRXzg.roa
File: pqA3Jb81wvHNHdEt9NFs4cTRXzg.roa (raw, json)
Hash identifier: bnnyuLVA6ZNwyaTR8P51VNYeiPRJAu4ZytR9tje7gEs=
Subject key identifier: A6:A0:37:25:BF:35:C2:F1:CD:1D:D1:2D:F4:D1:6C:E1:C4:D1:5F:38
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A075A98C2732334BFBECCDCA6D58E49A6C
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pqA3Jb81wvHNHdEt9NFs4cTRXzg.roa
Signing time: Sun 06 Sep 2026 07:40:40 +0000
ROA not before: Sun 06 Sep 2026 07:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 79.176.53.0/24 maxlen: 24
79.176.67.0/24 maxlen: 24
79.176.218.0/24 maxlen: 24
79.182.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a9:8c:27:32:33:4b:fb:ec:cd:ca:6d:58:e4:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 6 07:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6a03725bf35c2f1cd1dd12df4d16ce1c4d15f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:c7:c3:72:2e:13:1e:85:5d:dd:66:ed:78:
04:f8:40:4a:97:98:13:30:ed:94:fa:51:6d:b9:4d:
ac:db:17:0e:71:9b:0b:82:e4:68:d0:6f:49:29:9e:
1d:c7:47:45:91:45:c1:e6:12:1d:8b:aa:ce:ea:03:
10:4b:dc:8e:93:5c:38:3d:d4:34:b1:7c:39:3e:29:
2f:44:95:ba:f9:78:55:c1:b8:bc:12:c1:a6:69:9d:
03:a1:94:c0:19:84:04:c9:8d:47:91:cd:e9:04:bb:
ae:48:ef:4e:e3:bc:45:58:55:09:dc:c6:52:09:9a:
5f:f2:06:c7:67:e1:1b:65:71:b9:29:9e:25:e9:34:
42:f4:95:57:84:e2:f5:6e:f2:ce:21:61:65:3b:e8:
42:8d:3a:64:f1:37:20:63:c1:90:a3:8e:df:97:41:
54:9c:ee:2a:b5:37:78:5a:10:5f:94:85:23:a3:90:
53:0d:6c:7e:01:b7:b1:12:93:7f:bd:a6:51:29:20:
f5:36:0e:6a:5a:5d:ba:25:8e:6a:f1:64:77:34:46:
6b:17:34:de:1e:91:38:43:50:79:41:9d:5c:c4:b5:
3a:6e:b3:a5:f6:d3:16:16:c1:4b:5d:75:de:88:57:
a0:67:31:2c:fc:17:ca:96:41:cc:46:63:51:1a:fc:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:37:25:BF:35:C2:F1:CD:1D:D1:2D:F4:D1:6C:E1:C4:D1:5F:38
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pqA3Jb81wvHNHdEt9NFs4cTRXzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.53.0/24
79.176.67.0/24
79.176.218.0/24
79.182.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b7:b5:fe:de:fd:5a:7a:8c:c2:29:ed:1c:d5:c8:6e:d3:58:
ad:b9:da:af:bf:20:83:a2:80:c9:30:50:84:9f:86:bd:5b:cb:
8d:67:cb:19:d5:5a:4f:c1:34:5e:22:ea:7f:ca:20:17:8c:cc:
b4:e0:ac:62:2b:6a:ff:e2:e1:78:35:4c:2e:9b:04:46:b7:e9:
81:1e:2c:cd:c1:c6:4d:58:1d:35:3a:ae:a6:69:54:36:0c:7a:
64:41:21:e0:43:be:59:fd:b8:d9:cf:d2:6c:a9:2c:a7:b9:a9:
68:a6:64:fe:70:16:88:ec:19:07:e7:6b:5c:38:87:01:16:0a:
d6:40:e9:18:db:88:c2:28:a4:f9:55:43:08:db:b6:a0:e6:20:
56:2e:a7:ce:e0:83:b4:c4:55:d6:0c:7d:37:b6:51:e1:98:3d:
50:3f:4b:85:e9:20:f8:7c:14:b2:ad:22:59:67:4a:36:c1:06:
e0:c0:96:ad:24:3c:e3:09:89:50:d6:4d:7c:92:2e:71:fb:84:
67:cb:74:e4:3e:0c:90:89:6a:8d:2b:c1:be:63:11:0e:fe:26:
4a:9c:fe:8e:0f:73:f1:25:3a:50:6e:e9:d8:bb:64:15:4f:30:
29:ce:0e:e3:b1:88:cf:eb:1e:40:f6:d1:63:b0:af:8d:8b:6e:
d4:11:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:29 2026 by rpki-client