Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wSI-VkX1oeCiiRhx1yk1lq4SfAU.roa
File: wSI-VkX1oeCiiRhx1yk1lq4SfAU.roa (raw, json)
Hash identifier: YnwhSFxKhSdXC15X1lH5YKA3QfnQj89rZPXl3wyQl/M=
Subject key identifier: C1:22:3E:56:45:F5:A1:E0:A2:89:18:71:D7:29:35:96:AE:12:7C:05
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF0F192E8F853271C55FF5EF415F9640A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wSI-VkX1oeCiiRhx1yk1lq4SfAU.roa
Signing time: Tue 11 Aug 2026 13:09:51 +0000
ROA not before: Tue 11 Aug 2026 13:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 79.183.1.0/24 maxlen: 24
79.183.2.0/24 maxlen: 24
109.66.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:f1:92:e8:f8:53:27:1c:55:ff:5e:f4:15:f9:64:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 11 13:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1223e5645f5a1e0a2891871d7293596ae127c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:b8:d6:8c:a4:df:c6:eb:6a:7c:b4:b5:60:
6e:b0:28:c2:c3:b2:29:ee:d8:25:55:41:6a:d6:a3:
fc:12:04:f2:e1:5f:7c:f1:45:7a:d6:76:3a:61:ae:
cb:4b:e7:2d:4f:09:f7:78:b7:6a:2f:de:dc:51:61:
56:fd:22:6f:99:a9:88:3e:74:1d:89:75:49:94:4e:
65:14:37:65:b2:7a:84:a9:2b:9a:ba:87:a5:1e:13:
eb:b6:51:0f:63:51:5b:ad:38:44:8c:0a:ea:7c:02:
74:1b:0d:96:28:4b:f5:e8:5a:44:52:5e:8f:d7:66:
72:a4:ee:92:68:69:cc:69:cc:db:9f:0a:17:a6:ad:
cf:20:ea:0f:0b:64:c0:f0:b0:61:bd:f0:a4:20:f2:
26:8d:f0:c9:2b:57:3e:df:ec:f2:b1:11:0e:66:34:
3a:b7:d1:84:7d:f3:91:be:8e:a3:a1:02:cf:a6:d4:
c5:2b:cd:bc:e5:51:3c:eb:f3:9a:21:82:31:51:cc:
4b:1a:ad:b3:e6:b8:cf:ec:3d:35:cc:31:31:87:bb:
5d:f8:36:6f:19:02:86:53:05:d3:84:75:47:62:c2:
f4:64:ba:66:93:49:bb:26:7d:f1:f5:54:18:9d:06:
eb:70:b2:19:6d:fe:9d:58:d2:28:2e:42:ce:18:cb:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:3E:56:45:F5:A1:E0:A2:89:18:71:D7:29:35:96:AE:12:7C:05
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wSI-VkX1oeCiiRhx1yk1lq4SfAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.1.0-79.183.2.255
109.66.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3b:e4:f4:bd:78:e3:43:3f:75:5d:8e:f1:ae:e7:36:2d:ce:
31:09:fd:42:fc:70:b2:fa:ad:9b:93:4f:70:43:57:1a:05:75:
a9:89:9a:54:79:c1:9c:66:3e:12:34:2d:c8:d7:4a:a1:73:f1:
d0:80:53:8f:12:c6:4f:32:35:ee:d7:b1:4b:34:02:6d:85:87:
75:0e:7b:6b:0d:ab:8b:4e:7f:43:39:73:5f:bf:68:e6:14:a6:
2b:b7:d8:88:9e:a3:a8:fa:9e:02:b3:23:cd:0d:bc:ad:9b:7d:
4e:d3:4f:57:8e:ba:89:2b:89:0c:19:ae:55:16:71:95:36:e1:
d0:9b:8e:11:a1:79:6e:a0:9e:88:e0:e1:63:9b:5e:32:41:c8:
a8:b1:2a:f1:d4:5b:e6:8b:2d:97:6f:a8:f0:20:7e:31:7a:25:
0a:00:27:e8:b5:e4:51:b1:ac:f6:f6:07:93:ec:a7:df:89:1b:
d7:c9:28:a6:c1:0f:84:39:c8:85:df:75:4a:c7:9d:12:dc:c3:
5c:90:9c:00:b4:73:e4:ef:37:a4:c3:c4:f7:78:93:5e:43:d5:
e6:09:7c:c8:e5:eb:5d:83:6c:2c:46:00:af:30:43:4d:21:90:
e2:cb:f6:80:48:f2:5f:7f:68:dd:14:30:1c:a8:71:98:ed:5f:
de:54:a7:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:43 2026 by rpki-client