Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wiWp4Yt6516a4zTiXzs8pgnapUI.roa
File: wiWp4Yt6516a4zTiXzs8pgnapUI.roa (raw, json)
Hash identifier: Q6Q+5XoW8B46ulZfIrOfmawthBJjSQl6VjoMokuGayw=
Subject key identifier: C2:25:A9:E1:8B:7A:E7:5E:9A:E3:34:E2:5F:3B:3C:A6:09:DA:A5:42
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A036F73FB802A0715E50E68B27917F97E5
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wiWp4Yt6516a4zTiXzs8pgnapUI.roa
Signing time: Tue 25 Aug 2026 03:29:28 +0000
ROA not before: Tue 25 Aug 2026 03:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 79.183.9.0/24 maxlen: 24
79.183.27.0/24 maxlen: 24
79.183.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:36:f7:3f:b8:02:a0:71:5e:50:e6:8b:27:91:7f:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 25 03:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c225a9e18b7ae75e9ae334e25f3b3ca609daa542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:db:6e:16:aa:2a:f1:7e:13:6b:0a:0e:77:
43:03:d4:ea:e9:94:71:11:9d:71:71:ce:a5:64:7f:
4f:de:c9:f9:ce:9b:dd:41:6e:ff:4e:f0:d7:17:a8:
3a:71:e9:35:19:bb:3e:91:d1:20:a7:74:40:e3:11:
3d:13:60:47:a3:f4:63:ca:ea:8e:fc:68:d8:e8:f4:
69:2f:ee:97:77:be:75:79:04:6f:4a:35:5e:af:62:
61:15:e3:c1:1f:d3:12:b0:58:37:f3:1e:09:ac:64:
23:bc:3e:e5:6f:dd:f2:4d:f3:76:9e:e9:a0:d9:5c:
3a:01:75:48:7f:5c:b5:75:92:a6:ed:88:76:8d:21:
43:95:ff:7b:65:3e:be:93:ae:0a:fb:25:2c:0d:8c:
fc:b7:e4:16:0b:70:c1:d2:a9:63:13:45:ef:cf:52:
f3:c3:7b:47:70:b1:82:7a:fa:03:b9:15:c5:60:51:
e7:81:af:df:45:73:da:e9:6f:4d:2e:8f:38:a0:e8:
07:6d:f4:97:47:48:e1:fe:5f:1c:22:34:77:f5:78:
44:81:0f:d4:f0:1c:55:8e:d3:00:71:09:dc:c6:ca:
d9:80:06:79:4d:cb:e9:d8:b9:24:7d:8f:63:75:66:
33:11:75:76:6c:da:50:f7:51:92:97:7f:29:d6:b4:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:25:A9:E1:8B:7A:E7:5E:9A:E3:34:E2:5F:3B:3C:A6:09:DA:A5:42
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wiWp4Yt6516a4zTiXzs8pgnapUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.9.0/24
79.183.27.0/24
79.183.105.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8c:65:81:b3:58:c5:04:91:85:08:6d:29:e5:22:68:a1:a9:
19:66:bd:a8:e7:73:6b:af:5b:94:c6:87:3f:d9:50:6e:5c:7a:
36:53:27:29:d5:e8:39:98:cd:16:d9:1a:8f:e7:42:1e:92:f2:
ca:0f:b7:48:c1:ff:1e:1e:0f:0f:06:c9:c2:ac:4b:9b:36:76:
f9:72:80:94:96:8e:d8:77:31:fd:69:51:64:0c:ac:d9:41:ab:
32:08:a5:c5:ca:df:ee:46:7f:ce:3d:4a:7b:d5:17:4e:41:45:
56:4e:1e:65:0e:7f:f8:f0:bc:62:80:e0:aa:a9:5b:5e:5d:aa:
f2:28:e3:d8:5d:b1:ce:c5:48:c1:4e:30:76:9e:dd:53:32:ea:
7f:cb:ac:54:c2:b0:f0:b8:a2:0c:4c:7b:de:ff:c1:29:74:93:
ea:44:1e:ac:48:c6:ac:1b:e4:80:fc:06:07:48:cd:2c:e7:06:
2c:2f:5f:5f:5c:73:28:39:e8:c0:4b:f8:17:d2:41:35:62:39:
da:fc:cc:27:34:7e:cf:13:9f:aa:d4:bf:ef:1f:ce:7c:e3:6e:
b0:3d:6f:87:50:4f:b5:9a:f9:64:91:83:7d:41:4f:f1:5b:e7:
84:26:45:a6:98:79:7f:92:24:f0:92:98:6e:8a:70:2f:1d:2a:
44:b3:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:21 2026 by rpki-client