Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/prXM22xmdWIfkxQhdhboyz17O4s.roa
File: prXM22xmdWIfkxQhdhboyz17O4s.roa (raw, json)
Hash identifier: 5npFebfPf8+xWTPiNp/kFq0PqtpYbgmvo0LkaR1PNew=
Subject key identifier: A6:B5:CC:DB:6C:66:75:62:1F:93:14:21:76:16:E8:CB:3D:7B:3B:8B
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F9726DE3996ACB350A01D7024413F7C9B
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/prXM22xmdWIfkxQhdhboyz17O4s.roa
Signing time: Sat 25 Jul 2026 02:42:14 +0000
ROA not before: Sat 25 Jul 2026 02:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 79.182.152.0/24 maxlen: 24
79.182.223.0/24 maxlen: 24
79.183.44.0/24 maxlen: 24
79.183.108.0/24 maxlen: 24
79.183.144.0/24 maxlen: 24
79.183.146.0/24 maxlen: 24
79.183.162.0/24 maxlen: 24
79.183.209.0/24 maxlen: 24
79.183.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:26:de:39:96:ac:b3:50:a0:1d:70:24:41:3f:7c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 25 02:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6b5ccdb6c6675621f9314217616e8cb3d7b3b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:89:fc:50:96:63:8a:73:63:97:f2:7a:11:af:
73:5f:23:52:2b:1e:46:78:b4:11:7a:6d:56:43:c8:
db:2c:97:e2:df:09:6a:bb:3e:54:50:6c:52:2f:fa:
66:ee:92:b3:f4:bb:c4:8d:b1:4a:41:76:c5:2e:47:
50:f7:cb:a9:98:cb:02:6e:6b:15:9d:6c:f6:16:b8:
08:b5:85:2e:39:84:8c:71:77:55:27:1e:29:85:59:
c2:3d:93:c0:90:3e:59:3e:6c:87:0e:92:24:aa:2c:
c0:de:e7:16:4f:9d:8f:74:c1:1c:8e:d9:2e:da:d8:
50:23:49:ab:7f:3c:aa:2e:bd:4a:f6:45:a8:14:4b:
f9:65:e7:ff:5f:96:10:a4:57:d9:63:b3:72:62:e0:
56:71:c3:50:ca:6d:8a:eb:ce:85:5f:38:07:f2:26:
a7:32:3a:5b:b8:c2:d4:84:39:ec:ef:b4:0f:8c:81:
76:2f:34:db:48:03:59:4a:d7:c3:5a:33:9d:15:90:
42:ff:b1:5c:6f:1e:9d:1b:f0:b8:40:e3:4b:9c:4f:
9f:50:f9:9e:bb:7d:c1:ff:d7:23:ea:56:76:fb:69:
7d:da:1c:3b:93:c6:ee:44:0f:63:33:03:26:a2:25:
b9:06:c6:8d:1b:db:b5:3f:19:61:2d:e1:66:81:3e:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B5:CC:DB:6C:66:75:62:1F:93:14:21:76:16:E8:CB:3D:7B:3B:8B
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/prXM22xmdWIfkxQhdhboyz17O4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.152.0/24
79.182.223.0/24
79.183.44.0/24
79.183.108.0/24
79.183.144.0/24
79.183.146.0/24
79.183.162.0/24
79.183.209.0/24
79.183.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d2:eb:9e:39:28:04:fb:6d:ec:e5:ab:9f:c5:83:b0:b8:7e:
fd:9f:e2:39:24:7d:15:77:40:fb:29:3f:24:02:dd:ec:f2:1a:
c5:47:9b:d6:cf:51:2d:e0:11:fc:08:f6:d2:25:ff:d1:61:4e:
65:45:4e:e1:cc:36:3a:d4:9e:51:69:e9:40:8f:20:e6:47:4d:
a3:ee:71:bb:8c:02:dd:09:b3:15:ee:56:dc:ad:d7:4f:bd:6b:
b9:86:4d:fb:d9:10:17:07:1a:ff:ef:b8:dd:75:6c:fe:c6:0f:
b9:d8:e1:81:6a:d1:c8:9e:bc:39:e6:22:e6:08:e9:51:4e:03:
7c:ab:f5:48:b3:85:26:7f:0b:da:5c:75:d4:02:f2:3f:9c:a5:
dc:10:0a:b6:e9:a4:e5:66:a6:53:1f:38:ea:14:46:e4:ca:10:
c6:2f:41:88:5f:93:bc:75:4a:c0:68:d0:34:b4:6a:3a:3a:07:
d8:04:e6:e4:ae:21:71:a8:ac:7d:04:ed:1d:32:dc:b8:98:3f:
91:6c:a6:7d:17:96:f2:5a:78:0e:14:16:a2:bc:d3:54:c0:5a:
56:5c:77:7f:76:6a:fe:be:f3:f5:3d:20:b2:27:78:96:7c:3b:
c3:04:fa:03:0c:c7:f6:b4:48:3d:80:d5:13:03:0f:ea:05:07:
71:2d:f5:38
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ+XJt45lqyzUKAdcCRBP3ybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzI1MDI0MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmI1Y2NkYjZjNjY3NTYyMWY5MzE0MjE3NjE2ZThjYjNkN2IzYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7on8UJZjinNjl/J6Ea9zXyNSKx5G
eLQRem1WQ8jbLJfi3wlquz5UUGxSL/pm7pKz9LvEjbFKQXbFLkdQ98upmMsCbmsV
nWz2FrgItYUuOYSMcXdVJx4phVnCPZPAkD5ZPmyHDpIkqizA3ucWT52PdMEcjtku
2thQI0mrfzyqLr1K9kWoFEv5Zef/X5YQpFfZY7NyYuBWccNQym2K686FXzgH8ian
MjpbuMLUhDns77QPjIF2LzTbSANZStfDWjOdFZBC/7Fcbx6dG/C4QONLnE+fUPme
u33B/9cj6lZ2+2l92hw7k8buRA9jMwMmoiW5BsaNG9u1PxlhLeFmgT7yhQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKa1zNtsZnViH5MUIXYW6Ms9ezuLMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvcHJYTTIyeG1kV0lma3hRaGRoYm95ejE3TzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAT7aYAwQA
T7bfAwQAT7csAwQAT7dsAwQAT7eQAwQAT7eSAwQAT7eiAwQAT7fRAwQAT7fzMA0G
CSqGSIb3DQEBCwUAA4IBAQAd0uueOSgE+23s5aufxYOwuH79n+I5JH0Vd0D7KT8k
At3s8hrFR5vWz1Et4BH8CPbSJf/RYU5lRU7hzDY61J5RaelAjyDmR02j7nG7jALd
CbMV7lbcrddPvWu5hk372RAXBxr/77jddWz+xg+52OGBatHInrw55iLmCOlRTgN8
q/VIs4UmfwvaXHXUAvI/nKXcEAq26aTlZqZTHzjqFEbkyhDGL0GIX5O8dUrAaNA0
tGo6OgfYBObkriFxqKx9BO0dMty4mD+RbKZ9F5byWngOFBaivNNUwFpWXHd/dmr+
vvP1PSCyJ3iWfDvDBPoDDMf2tEg9gNUTAw/qBQdxLfU4
-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:43 2026 by rpki-client