Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/vwd7M8vLmHSpZnfX3nxjq-BVoLU.roa
File: vwd7M8vLmHSpZnfX3nxjq-BVoLU.roa (raw, json)
Hash identifier: KbitbPgw1ZDIwRXHBvI5S71y69PjdA64DrAV3tRrkP4=
Subject key identifier: BF:07:7B:33:CB:CB:98:74:A9:66:77:D7:DE:7C:63:AB:E0:55:A0:B5
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A02EC79920CEA9C68CCC3D4F5B199A53AF
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/vwd7M8vLmHSpZnfX3nxjq-BVoLU.roa
Signing time: Sun 23 Aug 2026 13:20:27 +0000
ROA not before: Sun 23 Aug 2026 13:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 79.182.48.0/24 maxlen: 24
109.66.90.0/24 maxlen: 24
109.66.99.0/24 maxlen: 24
109.66.158.0/24 maxlen: 24
109.66.188.0/24 maxlen: 24
109.66.216.0/24 maxlen: 24
109.66.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:c7:99:20:ce:a9:c6:8c:cc:3d:4f:5b:19:9a:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 23 13:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf077b33cbcb9874a96677d7de7c63abe055a0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:6e:9b:de:0a:ec:3c:bd:17:7d:15:ca:6f:
63:ad:9b:38:7c:13:ec:f3:b0:eb:7d:e8:b9:e1:a0:
9e:91:a9:c5:a7:97:b9:af:14:29:04:82:8a:9b:54:
18:5c:c3:04:30:f2:fe:48:3c:d7:cc:01:00:ad:6b:
0f:7c:6e:e9:fe:be:31:ff:32:c1:4f:98:f5:5b:83:
d2:cd:f3:de:8b:a2:8b:bc:2d:04:9f:e9:88:d3:23:
8a:9a:1e:41:42:ca:03:59:ae:70:92:0f:43:ed:b4:
c9:41:7e:36:39:76:46:fb:6d:79:ff:90:29:8d:50:
e0:13:b3:2f:f2:ab:3e:c7:f7:3a:ad:6a:f1:8c:3f:
2f:bd:08:9b:8b:bb:b1:36:3c:54:45:af:8d:5b:7a:
a4:d0:59:10:b7:08:f7:ad:d6:f3:13:31:1d:e4:bf:
b2:86:15:d5:6d:9b:0e:92:80:b6:69:d6:1a:7d:bb:
87:7b:8b:1d:2e:1a:a5:06:49:81:42:85:9c:72:30:
fe:c6:f5:51:1b:7f:60:86:00:c6:b2:e4:be:ea:13:
14:10:2c:13:2d:d7:9a:de:6a:2c:69:09:fd:92:d0:
a9:0e:3c:d3:1e:4b:be:5b:c2:e7:c6:ce:48:e2:e1:
3e:ed:af:d2:f7:90:79:b2:4d:79:77:49:95:40:32:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:7B:33:CB:CB:98:74:A9:66:77:D7:DE:7C:63:AB:E0:55:A0:B5
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/vwd7M8vLmHSpZnfX3nxjq-BVoLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.48.0/24
109.66.90.0/24
109.66.99.0/24
109.66.158.0/24
109.66.188.0/24
109.66.216.0/24
109.66.240.0/24
Signature Algorithm: sha256WithRSAEncryption
98:52:18:5e:ee:9a:12:20:4b:23:f2:52:f2:6e:12:cc:2f:7a:
9b:4c:64:97:b4:58:48:e0:96:b8:04:1d:e6:3a:c7:89:63:84:
be:71:49:71:7c:b8:6c:b8:50:05:d0:7b:90:7b:b4:d4:53:06:
3a:37:42:fc:6a:28:84:d1:d8:1c:e8:0b:6e:b1:8a:b1:6a:69:
fd:d9:10:9c:ff:3e:e2:08:56:e5:2b:c5:05:db:9c:c5:e7:fe:
6a:af:5b:18:0f:67:4f:37:ae:c2:18:87:2c:d1:ac:e6:93:ed:
60:81:90:84:14:6f:b3:25:c7:2b:86:a3:ba:3a:35:4c:c2:5e:
fe:ec:96:b0:35:78:33:ce:f7:a8:15:73:0f:b0:39:fd:2e:68:
c5:0e:14:cf:47:22:3e:cc:c8:3d:f0:73:25:89:5d:ec:a6:e8:
86:85:32:24:8a:3a:82:02:49:9a:98:87:06:4e:2f:a0:1e:a1:
5d:ba:7f:f8:a2:cc:be:7a:b5:fe:c5:e3:36:4e:04:74:93:0d:
4f:12:3a:96:f7:fd:be:53:b2:25:88:b8:26:ce:df:c3:b8:6e:
76:44:c0:54:38:94:84:4b:88:9f:8b:b2:e7:b1:32:80:6e:ad:
c2:cf:bb:d4:5b:4a:e6:97:4b:75:94:b9:f8:fe:1f:bf:1e:14:
0d:8e:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:52 2026 by rpki-client