Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qUGWW7p8ORogmaL6OPKkQekYWqs.roa
File: qUGWW7p8ORogmaL6OPKkQekYWqs.roa (raw, json)
Hash identifier: 2WhtykJ0rwpsiw+7rbvXr0iUN0CKyApj/gQjn0nskNs=
Subject key identifier: A9:41:96:5B:BA:7C:39:1A:20:99:A2:FA:38:F2:A4:41:E9:18:5A:AB
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A089F98ABEAEF1B07C79287CE16428D840
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qUGWW7p8ORogmaL6OPKkQekYWqs.roa
Signing time: Thu 10 Sep 2026 06:20:27 +0000
ROA not before: Thu 10 Sep 2026 06:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 79.176.221.0/24 maxlen: 24
79.182.207.0/24 maxlen: 24
79.183.6.0/24 maxlen: 24
79.183.126.0/24 maxlen: 24
79.183.152.0/24 maxlen: 24
79.183.164.0/24 maxlen: 24
79.183.207.0/24 maxlen: 24
79.183.223.0/24 maxlen: 24
109.64.10.0/24 maxlen: 24
109.64.25.0/24 maxlen: 24
109.64.100.0/24 maxlen: 24
109.64.116.0/24 maxlen: 24
109.64.126.0/24 maxlen: 24
109.64.135.0/24 maxlen: 24
109.64.160.0/24 maxlen: 24
109.64.166.0/24 maxlen: 24
109.64.188.0/24 maxlen: 24
109.64.208.0/24 maxlen: 24
109.64.228.0/24 maxlen: 24
109.64.232.0/24 maxlen: 24
109.64.250.0/24 maxlen: 24
109.65.105.0/24 maxlen: 24
109.65.144.0/24 maxlen: 24
109.65.195.0/24 maxlen: 24
109.65.235.0/24 maxlen: 24
109.66.76.0/24 maxlen: 24
109.66.78.0/24 maxlen: 24
109.66.80.0/24 maxlen: 24
109.66.94.0/24 maxlen: 24
109.66.106.0/24 maxlen: 24
109.66.108.0/24 maxlen: 24
109.66.131.0/24 maxlen: 24
109.66.132.0/24 maxlen: 24
109.66.135.0/24 maxlen: 24
109.66.145.0/24 maxlen: 24
109.66.147.0/24 maxlen: 24
109.66.150.0/24 maxlen: 24
109.66.156.0/24 maxlen: 24
109.66.160.0/24 maxlen: 24
109.66.161.0/24 maxlen: 24
109.66.163.0/24 maxlen: 24
109.66.164.0/24 maxlen: 24
109.66.181.0/24 maxlen: 24
109.66.190.0/24 maxlen: 24
109.66.192.0/24 maxlen: 24
109.66.195.0/24 maxlen: 24
109.66.212.0/24 maxlen: 24
109.66.232.0/24 maxlen: 24
109.66.238.0/24 maxlen: 24
109.66.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:f9:8a:be:ae:f1:b0:7c:79:28:7c:e1:64:28:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 10 06:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a941965bba7c391a2099a2fa38f2a441e9185aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:ed:76:3f:c8:f9:fa:57:00:9c:ca:86:bb:
ab:4e:32:e0:59:1e:11:d9:5d:57:54:c3:db:b4:c4:
9a:40:0d:6d:de:9b:72:3d:63:25:58:71:c0:59:a3:
21:de:50:48:3d:fc:14:4c:2e:d5:8e:f2:6d:4a:64:
c1:17:f8:8c:1b:04:ac:40:d3:2e:54:10:ff:d8:53:
73:3d:b7:04:17:b2:6e:4b:ac:3f:51:8b:c9:1f:d6:
0b:f9:ed:f5:75:6a:a4:5e:11:dd:7a:70:19:0b:a6:
98:45:56:d6:e5:ea:57:b7:4f:32:33:40:55:bd:29:
5a:d1:4f:dc:8d:8b:6e:be:7f:ad:7d:94:e0:53:97:
d4:ef:e9:a2:05:c4:2d:ab:b5:1d:5e:bb:3f:e1:b4:
f9:0a:f9:28:77:69:64:a5:7f:b7:44:44:7c:f0:4f:
73:ee:9f:6f:48:ac:7d:1a:a8:f6:bb:17:6e:36:25:
8f:54:1e:fe:36:af:33:92:17:0c:d4:30:44:7a:cf:
d7:34:90:f7:cf:26:3a:f5:6a:39:a1:d8:b0:fe:0f:
ba:a2:1b:95:17:7d:da:46:84:2a:56:46:ab:74:ec:
a7:9c:e7:80:91:49:bf:57:ac:35:33:d1:27:75:49:
af:d2:83:82:fb:68:af:d5:d8:e9:19:3a:ec:d3:8e:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:96:5B:BA:7C:39:1A:20:99:A2:FA:38:F2:A4:41:E9:18:5A:AB
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qUGWW7p8ORogmaL6OPKkQekYWqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.221.0/24
79.182.207.0/24
79.183.6.0/24
79.183.126.0/24
79.183.152.0/24
79.183.164.0/24
79.183.207.0/24
79.183.223.0/24
109.64.10.0/24
109.64.25.0/24
109.64.100.0/24
109.64.116.0/24
109.64.126.0/24
109.64.135.0/24
109.64.160.0/24
109.64.166.0/24
109.64.188.0/24
109.64.208.0/24
109.64.228.0/24
109.64.232.0/24
109.64.250.0/24
109.65.105.0/24
109.65.144.0/24
109.65.195.0/24
109.65.235.0/24
109.66.76.0/24
109.66.78.0/24
109.66.80.0/24
109.66.94.0/24
109.66.106.0/24
109.66.108.0/24
109.66.131.0-109.66.132.255
109.66.135.0/24
109.66.145.0/24
109.66.147.0/24
109.66.150.0/24
109.66.156.0/24
109.66.160.0/23
109.66.163.0-109.66.164.255
109.66.181.0/24
109.66.190.0/24
109.66.192.0/24
109.66.195.0/24
109.66.212.0/24
109.66.232.0/24
109.66.238.0/24
109.66.244.0/24
Signature Algorithm: sha256WithRSAEncryption
76:84:35:51:6e:8e:54:a6:c8:73:f9:71:74:2b:28:81:5e:2a:
0d:52:b9:1e:d1:86:e7:69:e8:48:2f:f1:3f:70:47:90:d7:c5:
02:74:ff:9c:49:cf:8a:77:33:8b:e7:35:d3:a7:0d:b6:58:46:
40:9d:72:9e:5e:2b:ca:ea:e3:bb:5d:d5:34:33:2c:ce:a3:c5:
93:59:76:6f:4e:6f:ac:d3:e2:a3:78:7b:92:07:01:e7:f5:65:
f5:ca:da:e1:87:e3:ce:05:4b:76:5d:0f:7c:42:60:54:d9:04:
57:35:10:dd:c4:60:63:a4:54:ac:8c:5b:a9:e9:bf:2c:aa:57:
52:49:d5:d7:28:f4:84:7c:fc:7c:e8:96:ea:a7:84:23:1e:5d:
13:2c:93:d7:ab:41:91:bc:c4:dc:5c:0c:b2:80:96:8a:33:5d:
3b:44:29:9c:d4:fe:3d:36:c1:2b:b3:a8:57:59:ae:7b:26:de:
93:cd:a4:a5:a1:f6:b6:e4:c2:4d:5f:b2:4a:66:45:5f:42:62:
35:ab:01:59:97:79:61:9b:3e:40:e7:d4:04:b2:1a:7b:27:ec:
35:7f:1a:65:6a:fc:02:88:24:a4:e2:18:f9:19:f5:12:80:8e:
53:e4:10:99:5e:64:30:30:3c:3c:75:ac:76:b4:e1:d3:20:6b:
c5:84:c5:22
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgISAaCJ+Yq+rvGwfHkofOFkKNhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTEwMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTQxOTY1YmJhN2MzOTFhMjA5OWEyZmEzOGYyYTQ0MWU5MTg1YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslPtdj/I+fpXAJzKhrurTjLgWR4R
2V1XVMPbtMSaQA1t3ptyPWMlWHHAWaMh3lBIPfwUTC7VjvJtSmTBF/iMGwSsQNMu
VBD/2FNzPbcEF7JuS6w/UYvJH9YL+e31dWqkXhHdenAZC6aYRVbW5epXt08yM0BV
vSla0U/cjYtuvn+tfZTgU5fU7+miBcQtq7UdXrs/4bT5Cvkod2lkpX+3RER88E9z
7p9vSKx9Gqj2uxduNiWPVB7+Nq8zkhcM1DBEes/XNJD3zyY69Wo5odiw/g+6ohuV
F33aRoQqVkardOynnOeAkUm/V6w1M9EndUmv0oOC+2iv1djpGTrs047JPQIDAQAB
o4IDNzCCAzMwHQYDVR0OBBYEFKlBllu6fDkaIJmi+jjypEHpGFqrMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvcVVHV1c3cDhPUm9nbWFMNk9QS2tRZWtZV3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBSwYIKwYBBQUHAQcBAf8EggE6MIIBNjCCATIEAgABMIIB
KgMEAE+w3QMEAE+2zwMEAE+3BgMEAE+3fgMEAE+3mAMEAE+3pAMEAE+3zwMEAE+3
3wMEAG1ACgMEAG1AGQMEAG1AZAMEAG1AdAMEAG1AfgMEAG1AhwMEAG1AoAMEAG1A
pgMEAG1AvAMEAG1A0AMEAG1A5AMEAG1A6AMEAG1A+gMEAG1BaQMEAG1BkAMEAG1B
wwMEAG1B6wMEAG1CTAMEAG1CTgMEAG1CUAMEAG1CXgMEAG1CagMEAG1CbDAMAwQA
bUKDAwQAbUKEAwQAbUKHAwQAbUKRAwQAbUKTAwQAbUKWAwQAbUKcAwQBbUKgMAwD
BABtQqMDBABtQqQDBABtQrUDBABtQr4DBABtQsADBABtQsMDBABtQtQDBABtQugD
BABtQu4DBABtQvQwDQYJKoZIhvcNAQELBQADggEBAHaENVFujlSmyHP5cXQrKIFe
Kg1SuR7Rhudp6Egv8T9wR5DXxQJ0/5xJz4p3M4vnNdOnDbZYRkCdcp5eK8rq47td
1TQzLM6jxZNZdm9Ob6zT4qN4e5IHAef1ZfXK2uGH484FS3ZdD3xCYFTZBFc1EN3E
YGOkVKyMW6npvyyqV1JJ1dco9IR8/HzoluqnhCMeXRMsk9erQZG8xNxcDLKAlooz
XTtEKZzU/j02wSuzqFdZrnsm3pPNpKWh9rbkwk1fskpmRV9CYjWrAVmXeWGbPkDn
1ASyGnsn7DV/GmVq/AKIJKTiGPkZ9RKAjlPkEJleZDAwPDx1rHa04dMga8WExSI=
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:24 2026 by rpki-client