Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/v561_2dcn_zBBp4GSl_4RbsCR-o.roa
File: v561_2dcn_zBBp4GSl_4RbsCR-o.roa (raw, json)
Hash identifier: Q1xay7FziaTBescKMTy1rWACZFDWUmbHzKBkFrxMfgY=
Subject key identifier: BF:9E:B5:FF:67:5C:9F:FC:C1:06:9E:06:4A:5F:F8:45:BB:02:47:EA
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A08A7D60F0B8E13B1A3E9E1CFAEAC0BB81
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/v561_2dcn_zBBp4GSl_4RbsCR-o.roa
Signing time: Thu 10 Sep 2026 08:44:27 +0000
ROA not before: Thu 10 Sep 2026 08:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 79.176.221.0/24 maxlen: 24
79.182.207.0/24 maxlen: 24
79.183.6.0/24 maxlen: 24
79.183.126.0/24 maxlen: 24
79.183.152.0/24 maxlen: 24
79.183.164.0/24 maxlen: 24
79.183.207.0/24 maxlen: 24
79.183.223.0/24 maxlen: 24
109.64.10.0/24 maxlen: 24
109.64.25.0/24 maxlen: 24
109.64.100.0/24 maxlen: 24
109.64.116.0/24 maxlen: 24
109.64.124.0/24 maxlen: 24
109.64.126.0/24 maxlen: 24
109.64.135.0/24 maxlen: 24
109.64.160.0/24 maxlen: 24
109.64.166.0/24 maxlen: 24
109.64.188.0/24 maxlen: 24
109.64.208.0/24 maxlen: 24
109.64.228.0/24 maxlen: 24
109.64.232.0/24 maxlen: 24
109.64.250.0/24 maxlen: 24
109.65.105.0/24 maxlen: 24
109.65.144.0/24 maxlen: 24
109.65.195.0/24 maxlen: 24
109.65.235.0/24 maxlen: 24
109.66.76.0/24 maxlen: 24
109.66.78.0/24 maxlen: 24
109.66.80.0/24 maxlen: 24
109.66.94.0/24 maxlen: 24
109.66.106.0/24 maxlen: 24
109.66.108.0/24 maxlen: 24
109.66.131.0/24 maxlen: 24
109.66.132.0/24 maxlen: 24
109.66.135.0/24 maxlen: 24
109.66.145.0/24 maxlen: 24
109.66.147.0/24 maxlen: 24
109.66.150.0/24 maxlen: 24
109.66.156.0/24 maxlen: 24
109.66.160.0/24 maxlen: 24
109.66.161.0/24 maxlen: 24
109.66.163.0/24 maxlen: 24
109.66.164.0/24 maxlen: 24
109.66.181.0/24 maxlen: 24
109.66.190.0/24 maxlen: 24
109.66.192.0/24 maxlen: 24
109.66.195.0/24 maxlen: 24
109.66.212.0/24 maxlen: 24
109.66.232.0/24 maxlen: 24
109.66.238.0/24 maxlen: 24
109.66.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:7d:60:f0:b8:e1:3b:1a:3e:9e:1c:fa:ea:c0:bb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 10 08:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf9eb5ff675c9ffcc1069e064a5ff845bb0247ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:93:d2:e9:e1:62:77:c8:d2:1d:31:98:48:
2a:bb:7f:b2:b8:f2:e2:3f:9e:49:b5:a8:e2:6d:fb:
e7:c4:c4:70:60:12:b4:c6:bf:b0:d7:8b:c0:c5:31:
05:6f:b5:97:e6:a3:45:4f:6c:b5:14:6e:3e:28:6f:
66:7f:ca:59:6c:0d:0f:02:25:fa:32:e3:50:cb:ce:
ec:99:ce:48:2a:d4:b0:a9:e5:a4:35:08:a1:07:74:
cc:6c:84:c5:ec:df:cb:79:cd:0b:1f:af:c0:f9:82:
d1:5c:5d:3c:b6:d8:4b:59:bc:a5:22:96:78:f0:60:
a0:5a:d7:2a:13:9b:7a:a3:87:7f:c4:cc:8f:64:32:
81:ac:e4:cf:de:a4:be:0b:27:80:5c:08:9a:44:9c:
fa:64:d6:33:e1:61:a1:31:c7:fe:e1:29:1f:c4:6b:
ba:3b:c8:a2:b8:32:25:eb:59:5b:10:fb:5a:83:6d:
2e:a4:fa:e0:c4:42:49:71:99:ac:80:52:55:64:b8:
a4:8a:d0:f1:e2:aa:32:0a:c2:25:e4:b2:95:e9:32:
bb:a3:f3:e3:4e:cf:66:bb:23:65:67:bc:15:41:cc:
b0:71:d7:53:19:62:39:62:1e:24:d7:55:02:ad:cd:
ab:73:d7:8c:f8:80:44:c9:8f:22:c8:e5:21:44:28:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:B5:FF:67:5C:9F:FC:C1:06:9E:06:4A:5F:F8:45:BB:02:47:EA
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/v561_2dcn_zBBp4GSl_4RbsCR-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.221.0/24
79.182.207.0/24
79.183.6.0/24
79.183.126.0/24
79.183.152.0/24
79.183.164.0/24
79.183.207.0/24
79.183.223.0/24
109.64.10.0/24
109.64.25.0/24
109.64.100.0/24
109.64.116.0/24
109.64.124.0/24
109.64.126.0/24
109.64.135.0/24
109.64.160.0/24
109.64.166.0/24
109.64.188.0/24
109.64.208.0/24
109.64.228.0/24
109.64.232.0/24
109.64.250.0/24
109.65.105.0/24
109.65.144.0/24
109.65.195.0/24
109.65.235.0/24
109.66.76.0/24
109.66.78.0/24
109.66.80.0/24
109.66.94.0/24
109.66.106.0/24
109.66.108.0/24
109.66.131.0-109.66.132.255
109.66.135.0/24
109.66.145.0/24
109.66.147.0/24
109.66.150.0/24
109.66.156.0/24
109.66.160.0/23
109.66.163.0-109.66.164.255
109.66.181.0/24
109.66.190.0/24
109.66.192.0/24
109.66.195.0/24
109.66.212.0/24
109.66.232.0/24
109.66.238.0/24
109.66.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:12:8c:e0:82:2e:82:63:6a:6d:54:7f:94:30:44:bc:38:c8:
1a:13:bb:e4:82:8e:37:33:3c:a9:2c:9e:78:12:a9:26:9e:d2:
51:f3:8e:22:7e:06:61:98:23:a3:86:dc:d0:5f:08:33:0d:1a:
e0:6a:5d:7b:0f:50:b2:d4:f1:53:9f:c7:a5:ad:f9:15:13:c2:
0b:10:43:a4:8e:47:72:09:ae:0d:ce:c3:11:aa:07:b0:9f:29:
1c:20:f7:04:87:ca:1f:54:a8:5b:d2:24:40:95:53:c6:41:a7:
bf:49:57:c4:55:32:94:5c:46:26:4b:96:11:20:80:48:79:c9:
e5:a2:80:59:d3:a4:8d:55:d1:69:18:c3:20:99:d4:d5:57:8c:
f5:03:d6:b4:f7:be:41:a8:6f:63:b3:8b:bd:ed:8c:4e:db:c5:
83:2d:7a:56:3b:ea:11:fe:7c:c4:21:41:00:a0:ca:0c:60:88:
d4:32:93:48:88:3c:1f:24:e9:e7:cb:dd:9a:49:17:8a:5a:70:
91:19:a6:d1:e0:0c:16:dc:1a:28:42:45:35:8b:b9:d7:53:ef:
ee:d3:bd:b9:9e:bc:07:eb:39:aa:81:fc:d0:87:1f:3d:90:a9:
cc:ce:aa:41:21:41:90:d3:65:b4:fe:85:26:cb:e7:56:ae:44:
2b:2a:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:52 2026 by rpki-client