Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qRxEQWMeoCouTv2_sFhF-o2Pmro.roa
File: qRxEQWMeoCouTv2_sFhF-o2Pmro.roa (raw, json)
Hash identifier: HjMiyL63hVPoJJ6q9HTH+r7qcc8X60VcCMDIdxTLiCY=
Subject key identifier: A9:1C:44:41:63:1E:A0:2A:2E:4E:FD:BF:B0:58:45:FA:8D:8F:9A:BA
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A07ADCB8E94FB404B0990C697F07A5AFA5
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qRxEQWMeoCouTv2_sFhF-o2Pmro.roa
Signing time: Mon 07 Sep 2026 07:54:40 +0000
ROA not before: Mon 07 Sep 2026 07:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 79.176.65.0/24 maxlen: 24
79.183.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:dc:b8:e9:4f:b4:04:b0:99:0c:69:7f:07:a5:af:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 7 07:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a91c4441631ea02a2e4efdbfb05845fa8d8f9aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:4a:41:ed:35:70:55:a5:73:54:a5:9d:f9:
e1:87:7e:7e:56:20:cb:85:43:55:69:22:db:a6:e8:
61:7f:5b:75:ae:41:25:09:ce:c5:8b:bf:f1:bf:2d:
de:d0:c4:c0:c5:9e:3a:78:ac:dc:04:df:4c:ba:04:
7a:4e:24:60:ac:ba:bf:e3:f6:cb:c7:75:da:d0:50:
aa:98:b7:86:59:eb:75:6c:c3:5b:3a:39:3b:42:30:
ec:85:aa:29:aa:34:55:76:54:f3:4d:97:85:7d:a0:
06:8c:c7:ec:d7:c1:f2:f8:0f:a7:74:3f:47:43:e1:
2e:1e:6c:e2:ab:c0:84:4c:33:f7:1b:53:39:7f:8c:
a0:1b:01:e9:df:32:a9:b3:5b:80:19:ac:ab:61:35:
3e:e6:1e:5e:c9:4a:83:55:c7:6e:f5:05:96:44:e4:
08:90:51:9a:b0:5e:87:c0:13:08:38:2b:7d:6c:de:
7d:b1:b1:d1:0f:74:c3:ca:11:70:c5:e1:4b:88:9e:
5d:93:ca:0b:7d:ff:04:09:df:a3:ef:bf:df:2f:60:
a0:b0:33:ca:65:15:6b:8b:83:00:bf:d4:1a:bc:f8:
25:63:fe:1a:cb:5c:ea:e5:b8:27:b3:3a:74:df:44:
37:73:ab:2d:f6:be:c4:cd:1a:e4:25:39:08:d7:96:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1C:44:41:63:1E:A0:2A:2E:4E:FD:BF:B0:58:45:FA:8D:8F:9A:BA
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qRxEQWMeoCouTv2_sFhF-o2Pmro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.65.0/24
79.183.106.0/24
Signature Algorithm: sha256WithRSAEncryption
95:94:99:10:34:b0:1d:ed:da:75:b7:28:9e:f9:dd:1c:ca:a0:
c0:1f:d2:af:65:fe:f3:c9:d7:dc:05:ca:aa:bc:d3:69:ac:0b:
71:4a:76:09:2b:86:20:a5:6f:8a:d9:83:4e:4d:78:c5:0a:d4:
a7:f1:03:bb:09:6c:6e:e6:82:18:2a:75:96:47:f9:19:9b:2c:
e6:f8:62:02:e4:a4:5f:ee:cc:e6:ee:69:77:0c:60:c7:16:b3:
8e:55:30:a9:c0:ba:06:a2:8b:5c:7d:d2:c7:40:32:fc:1b:07:
24:2a:a0:1c:cb:b5:73:0f:e5:6a:b2:5e:77:be:ba:4a:05:a5:
c3:cb:3a:76:2d:09:e6:26:d6:2a:9c:c9:77:79:5e:07:8b:b0:
08:eb:3d:72:38:70:fc:c6:ef:e9:3a:1b:8c:25:1b:a7:3d:64:
47:fa:df:75:be:03:91:65:69:ad:29:a8:63:0e:61:07:28:02:
49:e8:b3:0b:4b:09:67:25:09:c6:dd:b9:b2:16:2d:dd:8c:2a:
38:9a:4e:35:2f:e7:20:e2:a8:00:41:84:26:8e:ba:b5:32:b1:
17:94:8b:05:0c:9f:d1:8b:0d:ab:76:74:51:67:be:22:7f:51:
5f:fe:3e:9f:8d:6c:f5:a0:77:b1:a1:c8:ab:c7:7f:80:6d:eb:
0a:38:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:23 2026 by rpki-client