Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yaemxeEofQbnn8lvi7VTHfKccr0.roa
File: yaemxeEofQbnn8lvi7VTHfKccr0.roa (raw, json)
Hash identifier: ULc9cdTqlNl1rGTiTLaNZ4em1o/0L8pKcNdiVsF36xs=
Subject key identifier: C9:A7:A6:C5:E1:28:7D:06:E7:9F:C9:6F:8B:B5:53:1D:F2:9C:72:BD
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A07FBE6A82DD2FCB80C07C10437A6DFC02
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yaemxeEofQbnn8lvi7VTHfKccr0.roa
Signing time: Tue 08 Sep 2026 06:39:40 +0000
ROA not before: Tue 08 Sep 2026 06:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 79.176.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:be:6a:82:dd:2f:cb:80:c0:7c:10:43:7a:6d:fc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 8 06:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9a7a6c5e1287d06e79fc96f8bb5531df29c72bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:73:d7:b5:9d:f2:44:a4:c9:2a:33:37:bd:92:
5c:55:d1:1f:28:46:3f:2e:0f:28:8a:4f:fe:32:21:
81:83:52:3d:ff:c9:43:bb:ae:65:86:b4:da:ff:9b:
a7:1d:b6:00:11:4b:e6:dd:77:60:e1:7f:a3:8c:83:
84:97:80:52:06:05:a7:0b:03:29:a8:0b:28:b4:36:
b4:b8:4d:20:34:cb:39:0d:4c:c2:55:0f:c4:b5:9d:
e3:9b:8e:aa:2b:d8:30:49:78:ed:9b:2c:14:c6:72:
8e:7d:20:4c:fd:c3:03:50:f3:4c:d5:59:93:a1:6d:
67:70:43:0e:ea:f7:74:4b:bb:35:97:f0:3f:ba:d7:
ab:55:6a:96:8f:6c:60:10:48:be:56:90:c8:79:83:
14:95:f5:7f:dc:39:96:91:27:fa:c2:9a:20:39:ca:
f6:d2:d8:97:dc:c6:b6:81:e5:50:62:c2:cb:e4:52:
57:b1:5c:8d:59:b8:eb:5d:6d:02:05:1e:3c:77:39:
e3:a2:86:0d:1e:d1:c2:f0:d3:6e:1a:6d:2f:40:9a:
6f:2e:b1:b4:de:62:5c:56:1e:ea:5e:df:7e:dd:db:
58:55:49:1b:7d:6b:90:2c:cb:eb:db:53:26:22:7a:
8b:24:ec:c9:6c:61:1b:7d:c5:c7:d1:09:99:6d:a4:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:A6:C5:E1:28:7D:06:E7:9F:C9:6F:8B:B5:53:1D:F2:9C:72:BD
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yaemxeEofQbnn8lvi7VTHfKccr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.6.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d2:fe:b8:00:bc:ef:7b:b9:85:0a:19:35:27:5c:b7:31:a4:
d7:4c:00:b8:b1:8d:32:4c:6e:f2:08:6d:b7:1b:6d:a0:82:38:
08:19:94:4d:aa:a6:8e:54:06:45:c7:eb:8b:6d:48:56:b2:f2:
3a:60:1e:2b:b1:b7:3a:ed:1c:8a:17:cd:9a:7e:81:50:09:9c:
2d:60:d5:9b:97:8c:ab:4b:41:a7:78:5b:af:0b:ef:a0:71:8a:
b6:3a:e0:9c:83:38:e7:7d:3c:11:64:f2:ec:b1:60:72:77:66:
5f:32:59:27:1e:3a:20:ac:44:6f:98:14:2f:e4:de:4c:6f:25:
d0:7f:3e:c1:34:ef:a7:86:12:c0:0b:06:cd:f4:89:be:42:2e:
20:e6:53:4e:95:24:7f:6e:4f:c0:f2:3f:04:f9:40:29:c8:1f:
0a:2e:bb:54:94:cf:7e:a7:ce:8e:ad:81:f6:75:13:54:08:b5:
36:65:31:92:9f:19:2e:bc:46:6f:ec:3a:88:4e:96:5c:cf:49:
2e:fd:59:ee:84:31:a1:45:ee:45:62:f7:78:fb:6a:ca:44:0b:
17:d6:8b:8c:aa:01:87:34:78:6a:e2:0e:45:83:d6:a8:94:7e:
55:56:9c:b4:c0:91:08:84:ba:71:e1:24:01:b0:07:1c:4c:f8:
47:8b:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:27 2026 by rpki-client