Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yRSlMDLQhDhftzFernkIlXB4O1U.roa
File: yRSlMDLQhDhftzFernkIlXB4O1U.roa (raw, json)
Hash identifier: qgZ+MmsDc5nUPfO04pEJfel+yA36DrhN3lb1wWub3e4=
Subject key identifier: C9:14:A5:30:32:D0:84:38:5F:B7:31:5E:AE:79:08:95:70:78:3B:55
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F9726DD5918F477B7CE7E8127D04B2150
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yRSlMDLQhDhftzFernkIlXB4O1U.roa
Signing time: Sat 25 Jul 2026 02:42:14 +0000
ROA not before: Sat 25 Jul 2026 02:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 79.182.40.0/24 maxlen: 24
79.183.25.0/24 maxlen: 24
79.183.35.0/24 maxlen: 24
79.183.87.0/24 maxlen: 24
79.183.123.0/24 maxlen: 24
79.183.130.0/24 maxlen: 24
79.183.132.0/24 maxlen: 24
79.183.165.0/24 maxlen: 24
79.183.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:26:dd:59:18:f4:77:b7:ce:7e:81:27:d0:4b:21:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 25 02:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c914a53032d084385fb7315eae79089570783b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:0b:5f:93:7c:e8:22:5e:84:4e:e1:03:04:
3f:e5:ea:26:21:ad:33:3c:c6:a9:87:8e:d5:fe:6f:
26:3e:29:09:2e:93:cc:ea:8e:d2:7a:ec:2e:5b:2a:
00:fe:25:ab:39:8f:76:29:72:97:94:3f:e1:f5:34:
19:4e:ed:be:9f:c3:7d:98:a2:26:e0:db:72:f7:89:
47:cf:4c:1f:1a:47:7f:f8:04:63:d3:11:9f:c7:d4:
68:67:22:1a:2d:2e:32:42:b8:18:8d:a9:e6:0b:12:
93:fd:a2:f1:45:69:6d:9b:84:93:cc:3a:3d:d9:c1:
f4:9d:d9:87:0a:b3:a8:61:d3:84:32:18:39:88:fe:
d2:d1:5a:27:0d:a2:d7:df:a6:4f:74:16:e5:39:16:
61:cf:f7:a4:5c:49:74:c0:8a:f1:42:42:0a:22:cc:
b9:dc:6f:8a:29:bd:23:0a:84:01:01:8b:1f:22:de:
c2:47:23:89:5e:fc:85:a9:3d:28:1f:0b:f5:e7:16:
86:c9:dc:62:d9:82:62:64:96:d5:b2:fb:73:50:83:
49:a5:69:6d:c2:fe:61:19:35:2d:87:6e:0a:53:f1:
44:44:a5:30:dd:cd:fc:62:72:8d:62:20:91:ad:e3:
d4:43:05:9e:85:f8:bd:23:83:02:7d:03:75:f9:da:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:A5:30:32:D0:84:38:5F:B7:31:5E:AE:79:08:95:70:78:3B:55
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yRSlMDLQhDhftzFernkIlXB4O1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.40.0/24
79.183.25.0/24
79.183.35.0/24
79.183.87.0/24
79.183.123.0/24
79.183.130.0/24
79.183.132.0/24
79.183.165.0/24
79.183.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:81:6b:3f:82:d1:75:d8:cf:ad:c0:18:1a:f4:59:cb:e2:b2:
c3:43:20:bc:c5:5e:05:05:9c:19:be:f1:28:b9:80:de:01:6d:
25:9d:92:73:d9:1d:1e:63:5d:9d:08:46:fe:ce:86:8e:a0:da:
4a:06:a5:14:35:dd:a4:26:d7:38:c4:bb:33:01:9b:22:61:22:
2a:db:6b:ba:a9:cc:46:38:b6:ac:11:88:70:74:62:ea:8a:91:
69:f7:a9:02:f1:91:cc:4a:71:df:7f:d4:22:3b:ec:39:8a:46:
94:13:19:84:c4:2d:60:17:48:9e:57:ef:51:84:75:53:d2:0f:
1e:99:e2:e2:76:65:50:0f:7b:02:b2:30:d5:8b:57:58:1c:20:
fe:bb:fe:3e:c9:9d:00:8c:b2:d0:42:f7:19:c7:54:85:71:6f:
a1:b0:84:77:8a:50:1a:f8:5c:65:90:9f:0d:b8:33:f3:69:bc:
45:d5:dd:8b:78:24:82:40:08:d8:60:d5:9d:89:4c:fb:f2:40:
fa:f0:95:a7:85:86:c3:6d:d8:77:da:e7:19:df:fb:9d:f9:15:
07:5a:f4:05:21:46:53:2f:28:3e:28:c4:d6:78:cc:0c:43:8e:
ff:75:a1:4f:f2:d8:19:ae:f1:58:df:6b:b6:86:3a:1d:fe:8d:
08:8c:89:3b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ+XJt1ZGPR3t85+gSfQSyFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzI1MDI0MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTE0YTUzMDMyZDA4NDM4NWZiNzMxNWVhZTc5MDg5NTcwNzgzYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmELX5N86CJehE7hAwQ/5eomIa0z
PMaph47V/m8mPikJLpPM6o7SeuwuWyoA/iWrOY92KXKXlD/h9TQZTu2+n8N9mKIm
4Nty94lHz0wfGkd/+ARj0xGfx9RoZyIaLS4yQrgYjanmCxKT/aLxRWltm4STzDo9
2cH0ndmHCrOoYdOEMhg5iP7S0VonDaLX36ZPdBblORZhz/ekXEl0wIrxQkIKIsy5
3G+KKb0jCoQBAYsfIt7CRyOJXvyFqT0oHwv15xaGydxi2YJiZJbVsvtzUINJpWlt
wv5hGTUth24KU/FERKUw3c38YnKNYiCRrePUQwWehfi9I4MCfQN1+dqJ9wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFMkUpTAy0IQ4X7cxXq55CJVweDtVMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEveVJTbE1ETFFoRGhmdHpGZXJua0lsWEI0TzFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAT7YoAwQA
T7cZAwQAT7cjAwQAT7dXAwQAT7d7AwQAT7eCAwQAT7eEAwQAT7elAwQAT7fkMA0G
CSqGSIb3DQEBCwUAA4IBAQBagWs/gtF12M+twBga9FnL4rLDQyC8xV4FBZwZvvEo
uYDeAW0lnZJz2R0eY12dCEb+zoaOoNpKBqUUNd2kJtc4xLszAZsiYSIq22u6qcxG
OLasEYhwdGLqipFp96kC8ZHMSnHff9QiO+w5ikaUExmExC1gF0ieV+9RhHVT0g8e
meLidmVQD3sCsjDVi1dYHCD+u/4+yZ0AjLLQQvcZx1SFcW+hsIR3ilAa+FxlkJ8N
uDPzabxF1d2LeCSCQAjYYNWdiUz78kD68JWnhYbDbdh32ucZ3/ud+RUHWvQFIUZT
Lyg+KMTWeMwMQ47/daFP8tgZrvFY32u2hjod/o0IjIk7
-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:40 2026 by rpki-client