Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zu7W7Wf8jhUurTZnSXYYkXB2_E0.roa
File: zu7W7Wf8jhUurTZnSXYYkXB2_E0.roa (raw, json)
Hash identifier: UrmWdB5Sry076r/okDdNIvvEv2eEZMpqOZBz3DFRwvE=
Subject key identifier: CE:EE:D6:ED:67:FC:8E:15:2E:AD:36:67:49:76:18:91:70:76:FC:4D
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A06C89613E8A250D74BF3BB3A23DBAC6C0
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zu7W7Wf8jhUurTZnSXYYkXB2_E0.roa
Signing time: Fri 04 Sep 2026 13:08:57 +0000
ROA not before: Fri 04 Sep 2026 13:08:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 79.176.12.0/24 maxlen: 24
79.176.30.0/24 maxlen: 24
79.176.45.0/24 maxlen: 24
79.176.56.0/24 maxlen: 24
79.176.62.0/24 maxlen: 24
79.176.84.0/24 maxlen: 24
79.183.167.0/24 maxlen: 24
79.183.168.0/24 maxlen: 24
109.66.130.0/24 maxlen: 24
109.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:89:61:3e:8a:25:0d:74:bf:3b:b3:a2:3d:ba:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 4 13:08:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceeed6ed67fc8e152ead3667497618917076fc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:c0:29:d9:28:47:24:fc:db:03:8e:86:fc:
0d:16:fe:ea:50:95:01:9e:b6:15:f6:1b:a2:34:fe:
2e:a0:24:dc:8a:ad:fb:65:47:89:4d:6c:01:a1:e0:
b7:1d:57:d2:6b:cc:77:15:cf:97:c2:a2:93:3a:ea:
e2:be:53:ba:c5:cc:d8:67:44:08:0b:88:c4:61:33:
9b:55:af:26:b1:fc:ba:86:7d:0d:09:ee:ae:a7:05:
86:81:c8:94:53:fe:b3:a9:14:69:81:22:c1:f1:e9:
ff:c2:1e:81:ac:f2:0b:9c:9a:b4:65:1f:b9:80:81:
35:fe:16:96:80:31:7b:0d:7c:8e:e8:31:bd:89:c3:
3f:c5:51:1a:23:9e:71:c6:8c:a1:06:67:6c:b3:e6:
b8:01:1a:26:23:a6:2b:15:a5:1b:29:3a:93:d6:c5:
d7:39:82:3d:5c:b3:e9:b7:ba:19:dd:68:78:37:69:
99:b1:ff:a2:89:4e:d9:91:58:f1:80:51:39:84:b6:
b0:d1:34:dd:87:2d:64:3f:be:b8:21:7d:d7:2b:f4:
9c:93:67:c8:7d:e3:52:09:d2:70:49:5c:0c:e6:e5:
5e:5a:50:52:48:63:b4:2a:8d:7f:9d:be:ac:93:8a:
d7:14:9a:c7:0a:10:a3:18:81:15:32:f3:f0:c0:79:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:D6:ED:67:FC:8E:15:2E:AD:36:67:49:76:18:91:70:76:FC:4D
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zu7W7Wf8jhUurTZnSXYYkXB2_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.12.0/24
79.176.30.0/24
79.176.45.0/24
79.176.56.0/24
79.176.62.0/24
79.176.84.0/24
79.183.167.0-79.183.168.255
109.66.130.0/24
109.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2f:0a:4b:77:0b:b9:a8:d8:f9:72:44:b9:b2:86:2e:b4:59:
8f:68:01:e0:a4:27:5f:a1:90:c0:b3:c2:c9:aa:03:ba:8b:5d:
74:2d:f7:59:ce:15:04:91:08:61:2f:f0:94:7a:d6:15:36:b5:
e7:25:e3:ce:00:7f:f9:0f:5e:3e:32:02:44:8e:82:83:4c:78:
5d:9f:c6:6c:df:3f:1b:bc:52:db:4a:0c:22:65:e8:e5:2d:29:
24:49:a2:62:c6:5a:c2:a2:11:85:54:20:fb:02:92:5e:bf:4c:
38:46:f3:f6:fe:87:e9:e3:6a:f5:52:82:08:79:f0:a9:e7:44:
0f:2e:5a:84:b2:50:a3:47:a9:49:8c:d8:2d:53:48:da:17:3a:
55:3a:8d:d4:2a:46:1c:a9:c0:13:30:97:2f:c6:3e:a1:cb:f3:
ec:ef:0c:fe:b0:4a:19:a0:3e:e6:c7:4c:2a:51:98:47:55:c8:
a1:2e:0b:4f:53:08:0e:ea:5c:4f:30:3a:88:c1:b2:e3:8f:6d:
94:33:10:e3:95:b7:d3:d4:ba:20:d1:8c:8f:12:6b:72:77:e0:
e7:a1:67:84:31:97:95:16:6b:0d:eb:16:e7:b4:20:35:96:66:
79:21:a8:c8:1e:d4:cd:e8:fd:32:60:8b:85:b2:9a:56:72:b7:
9e:7e:35:b0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaBsiWE+iiUNdL87s6I9usbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTA0MTMwODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWVlZDZlZDY3ZmM4ZTE1MmVhZDM2Njc0OTc2MTg5MTcwNzZmYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHAKdkoRyT82wOOhvwNFv7qUJUB
nrYV9huiNP4uoCTciq37ZUeJTWwBoeC3HVfSa8x3Fc+XwqKTOurivlO6xczYZ0QI
C4jEYTObVa8msfy6hn0NCe6upwWGgciUU/6zqRRpgSLB8en/wh6BrPILnJq0ZR+5
gIE1/haWgDF7DXyO6DG9icM/xVEaI55xxoyhBmdss+a4ARomI6YrFaUbKTqT1sXX
OYI9XLPpt7oZ3Wh4N2mZsf+iiU7ZkVjxgFE5hLaw0TTdhy1kP764IX3XK/Sck2fI
feNSCdJwSVwM5uVeWlBSSGO0Ko1/nb6sk4rXFJrHChCjGIEVMvPwwHlofQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFM7u1u1n/I4VLq02Z0l2GJFwdvxNMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvenU3VzdXZjhqaFV1clRablNYWVlrWEIyX0UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAT7AMAwQA
T7AeAwQAT7AtAwQAT7A4AwQAT7A+AwQAT7BUMAwDBABPt6cDBABPt6gDBABtQoID
BABtQpQwDQYJKoZIhvcNAQELBQADggEBACEvCkt3C7mo2PlyRLmyhi60WY9oAeCk
J1+hkMCzwsmqA7qLXXQt91nOFQSRCGEv8JR61hU2tecl484Af/kPXj4yAkSOgoNM
eF2fxmzfPxu8UttKDCJl6OUtKSRJomLGWsKiEYVUIPsCkl6/TDhG8/b+h+njavVS
ggh58KnnRA8uWoSyUKNHqUmM2C1TSNoXOlU6jdQqRhypwBMwly/GPqHL8+zvDP6w
ShmgPubHTCpRmEdVyKEuC09TCA7qXE8wOojBsuOPbZQzEOOVt9PUuiDRjI8Sa3J3
4OehZ4Qxl5UWaw3rFue0IDWWZnkhqMge1M3o/TJgi4WymlZyt55+NbA=
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:26 2026 by rpki-client