Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wxNHTlKLpe3nYxgDdJt3PWxQ5DY.roa
File: wxNHTlKLpe3nYxgDdJt3PWxQ5DY.roa (raw, json)
Hash identifier: 5C0lFjxu6FyKXguUvcCUTIu8lQm9bsfYk6aPKYPIkpQ=
Subject key identifier: C3:13:47:4E:52:8B:A5:ED:E7:63:18:03:74:9B:77:3D:6C:50:E4:36
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF49DD24F516CF5B6AAA32F812A97D295
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wxNHTlKLpe3nYxgDdJt3PWxQ5DY.roa
Signing time: Wed 12 Aug 2026 06:16:51 +0000
ROA not before: Wed 12 Aug 2026 06:16:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 79.182.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:9d:d2:4f:51:6c:f5:b6:aa:a3:2f:81:2a:97:d2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 12 06:16:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c313474e528ba5ede7631803749b773d6c50e436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:36:11:77:2c:d8:0c:f1:c8:83:4a:b2:d4:
41:0a:e6:b5:dc:08:73:a3:7e:c7:82:3e:17:c7:13:
df:f3:47:0e:b3:04:fb:73:cb:84:df:c4:d7:45:30:
85:a3:7f:4c:12:15:a6:83:61:d5:ac:9d:4b:0b:03:
4f:c9:76:55:86:c0:e9:1b:2f:36:67:dd:ab:92:71:
f9:18:c1:72:4a:7b:ed:1c:04:25:97:33:d5:e2:c0:
ef:bb:9a:fb:3c:8e:0c:78:41:4a:32:46:1e:96:02:
4c:1d:85:e2:84:06:1d:31:68:56:11:61:92:bf:47:
93:b3:36:9c:2c:de:84:bd:78:8f:eb:a1:73:54:5e:
c6:3a:89:15:6b:2b:8f:72:62:11:49:8e:25:9c:31:
e1:71:5f:3b:63:d5:82:7e:3c:62:a4:f9:50:ed:74:
9a:a1:d5:a3:f1:f0:05:e3:a3:07:8e:34:31:eb:20:
3f:87:aa:ab:d6:43:c8:a6:16:a2:f2:a8:d9:72:3e:
61:86:a6:35:6c:57:c7:b2:d4:32:a6:d8:29:76:ed:
f9:f9:cb:a0:b6:40:aa:fd:34:ba:72:b5:21:42:48:
88:1d:25:06:f4:e5:d4:bb:0b:39:ec:6f:b2:91:45:
db:af:62:a5:37:c9:c3:5f:93:40:91:3e:7b:14:e9:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:13:47:4E:52:8B:A5:ED:E7:63:18:03:74:9B:77:3D:6C:50:E4:36
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wxNHTlKLpe3nYxgDdJt3PWxQ5DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:32:d5:40:98:77:2a:cb:03:5c:65:95:76:0d:f8:cb:6a:84:
89:bd:b9:e9:55:af:0a:ca:4b:cf:e1:91:3d:fb:14:c1:4f:32:
35:30:d4:12:9a:ca:4d:a4:e4:04:e6:08:52:b3:0f:e9:81:9d:
c1:09:61:34:49:3c:04:e4:2a:81:a4:57:22:8e:be:e0:0e:9d:
8a:e8:81:d1:87:a0:12:62:1c:f4:57:55:98:e9:7d:7e:4b:ed:
15:66:77:16:9b:38:07:a3:cc:a8:e5:9d:4b:3e:4c:2a:4c:88:
90:ca:43:f3:64:9e:1c:56:43:bd:28:cc:d7:55:11:6a:d8:0b:
fe:e6:4e:12:e6:06:a0:f9:bd:07:b7:f3:6d:95:06:aa:24:a1:
4a:d8:19:fc:0e:ad:ce:9c:41:d3:a8:66:83:4e:bd:f5:a4:df:
4b:39:f7:4c:29:60:66:2f:7d:a6:d7:3c:7e:75:f1:c6:24:86:
e9:a2:1b:31:79:b7:e1:3d:60:9f:72:f7:8a:7d:d9:e6:fc:6e:
58:aa:fe:f2:0f:1a:49:ec:99:f3:2c:0d:b9:20:6e:7a:ec:fa:
e7:c8:ac:f8:0d:be:72:c2:a6:94:ff:0a:dc:3f:5a:b2:36:c3:
94:45:80:90:e5:71:0b:ab:40:10:de:ce:e4:d0:e8:43:14:b8:
91:a6:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:20 2026 by rpki-client