Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ul_iOsnTLZ8eX1y4Q07lQaz0HPQ.roa
File: ul_iOsnTLZ8eX1y4Q07lQaz0HPQ.roa (raw, json)
Hash identifier: OOfA4rAMSdhTdoNdIlogFxDR2QbIr67Iq3jFW0bjE20=
Subject key identifier: BA:5F:E2:3A:C9:D3:2D:9F:1E:5F:5C:B8:43:4E:E5:41:AC:F4:1C:F4
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F6951F53F4D60D89A4E9F78AC2ED2F02D
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ul_iOsnTLZ8eX1y4Q07lQaz0HPQ.roa
Signing time: Thu 16 Jul 2026 05:06:46 +0000
ROA not before: Thu 16 Jul 2026 05:06:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 79.176.115.0/24 maxlen: 24
79.176.254.0/24 maxlen: 24
79.182.65.0/24 maxlen: 24
79.182.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:51:f5:3f:4d:60:d8:9a:4e:9f:78:ac:2e:d2:f0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 16 05:06:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba5fe23ac9d32d9f1e5f5cb8434ee541acf41cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:fa:48:44:f0:88:1a:6d:aa:cf:51:50:36:
90:0e:ce:b3:05:90:47:f3:d8:e2:48:61:cb:d0:c7:
11:82:21:16:78:5c:50:cb:1f:85:69:09:f3:1b:1d:
56:73:b8:f2:46:80:88:35:d2:28:d7:03:5f:76:a0:
99:d4:c5:14:47:80:2e:62:76:05:65:bc:c6:ad:71:
16:be:1b:dd:2b:26:63:02:49:2e:bc:e6:e0:36:3b:
53:9b:53:35:fd:8a:f0:ad:5e:73:4e:6c:6f:99:f2:
45:5d:4b:e7:00:5c:61:85:d6:8d:b5:a2:3c:d9:0c:
28:d5:9a:a5:b2:02:4b:23:10:ce:c0:df:09:0c:c9:
9e:97:7b:21:1d:48:38:7b:c8:d9:26:6b:29:5c:96:
3e:8a:df:90:76:0c:31:fc:bf:b7:3d:f5:96:fc:30:
c2:bd:23:24:c8:3d:5c:5b:dd:00:30:7e:27:48:ba:
36:aa:23:87:2a:0a:b9:10:cd:76:c9:eb:cc:bb:8b:
28:2a:b4:dc:60:60:cf:f8:72:be:65:43:f4:ad:41:
a9:fb:a7:8f:bf:ed:73:73:36:49:5c:4b:22:3e:fe:
a1:f9:07:0f:07:2a:c0:1e:e5:16:4e:ce:b2:03:f0:
82:9f:31:01:ff:8d:37:6c:72:28:02:45:c7:0b:82:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:E2:3A:C9:D3:2D:9F:1E:5F:5C:B8:43:4E:E5:41:AC:F4:1C:F4
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ul_iOsnTLZ8eX1y4Q07lQaz0HPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.115.0/24
79.176.254.0/24
79.182.65.0/24
79.182.127.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a0:4f:9e:fb:1e:4e:58:cb:f2:a1:c2:b9:50:57:c0:9a:df:
c7:75:9f:15:66:3f:af:40:1a:b9:2e:ec:c9:48:a9:69:21:54:
ae:4d:b4:6b:67:5b:b8:4a:50:7b:17:84:51:f3:52:8c:db:a6:
32:1b:c4:5c:cb:48:b4:c5:a6:1d:1d:59:3f:5f:73:0c:9c:2b:
15:59:a2:4a:5b:0c:58:26:a4:78:2c:ff:b7:11:2f:40:21:54:
22:16:1d:6a:18:67:5e:50:7a:8b:c8:b8:07:ca:66:49:b7:b9:
89:4e:9a:d0:cb:f0:74:72:2a:de:cf:54:7a:ba:c9:53:88:8c:
a5:a3:16:12:ed:8a:04:1a:30:dd:22:d7:d6:27:19:27:0d:7f:
5a:09:f5:fe:9a:6b:88:aa:c0:78:ec:9c:79:14:d5:80:e0:f6:
22:62:d4:39:57:5a:cb:52:45:67:22:fb:15:5a:1f:87:d3:24:
39:ef:11:98:92:be:1d:0d:f5:a9:ae:c1:c4:d1:41:31:a7:44:
e4:78:00:d6:9a:1f:5f:3e:11:87:ec:62:3b:5b:c4:21:f7:55:
9a:34:04:6a:3e:98:0d:53:23:89:b0:38:85:dc:36:0f:f7:d0:
e1:10:f4:81:65:01:db:58:3d:3f:b5:18:06:ae:1d:cd:97:c7:
29:09:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:54:52 2026 by rpki-client