Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ftgKUHXfC_ybkV3W6vgrX_jvogc.roa
File: ftgKUHXfC_ybkV3W6vgrX_jvogc.roa (raw, json)
Hash identifier: zgf2AQEO8Tp9h9s+DZYjUEBcWTjezfQjN7yVh9AcHOQ=
Subject key identifier: 7E:D8:0A:50:75:DF:0B:FC:9B:91:5D:D6:EA:F8:2B:5F:F8:EF:A2:07
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A095152B7CEC50FD6A894BF05E1DF1F013
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ftgKUHXfC_ybkV3W6vgrX_jvogc.roa
Signing time: Sat 12 Sep 2026 10:06:27 +0000
ROA not before: Sat 12 Sep 2026 10:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:15:2b:7c:ec:50:fd:6a:89:4b:f0:5e:1d:f1:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 12 10:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ed80a5075df0bfc9b915dd6eaf82b5ff8efa207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:ac:92:1f:2a:8d:c1:8e:15:0e:45:36:da:
bf:05:c2:e2:33:92:ab:18:95:f7:0d:96:4c:c3:65:
32:09:ea:dd:ce:9f:b3:ce:0d:16:79:28:d7:75:86:
5b:cd:31:85:19:fe:d2:d8:d5:04:0c:bd:7d:be:b9:
d0:48:a0:e3:5e:56:10:fe:83:ce:c7:ff:61:f9:d5:
4e:57:08:68:f5:a5:5a:57:f9:58:d8:d3:4a:af:ae:
c5:b5:af:78:16:6d:93:84:11:8b:7b:cb:82:f9:30:
e6:70:5f:b0:77:46:06:f3:02:4a:a8:a5:97:25:3f:
9e:1d:f0:9f:50:d5:fe:38:4a:7f:2e:13:3f:8e:3c:
26:50:79:2d:b5:6f:be:a0:e4:6c:3b:cc:57:02:54:
f5:ae:e6:9d:04:ce:df:3e:49:94:a3:e9:d2:15:35:
6d:71:70:be:a2:85:64:60:0c:62:73:a5:4d:46:8f:
b5:c9:1f:aa:fc:d5:e9:39:63:48:54:c5:fa:8c:c9:
ca:ef:09:14:e0:77:a3:99:56:c4:b9:26:c7:23:11:
68:b0:1c:d7:61:63:e7:10:0d:07:3c:c7:c9:0b:a7:
28:68:7d:6a:f6:25:97:a7:4b:da:71:ba:43:25:d3:
a2:c7:63:fb:99:2c:6d:29:14:a6:50:9e:d8:a3:91:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:0A:50:75:DF:0B:FC:9B:91:5D:D6:EA:F8:2B:5F:F8:EF:A2:07
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ftgKUHXfC_ybkV3W6vgrX_jvogc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.245.0-79.98.246.255
Signature Algorithm: sha256WithRSAEncryption
aa:76:b7:01:3a:de:52:1e:3a:ff:7f:a4:f9:55:6e:45:3a:bd:
dd:fe:33:97:7e:4b:42:c8:18:9e:20:23:69:6a:04:82:0c:f2:
32:9d:95:64:fc:05:9c:01:5a:d0:74:07:92:3d:16:d3:8e:da:
b0:16:2f:a9:dd:b4:83:fc:49:b7:14:8c:87:e5:48:fe:b1:0e:
f6:ac:9a:fa:9e:5b:32:8b:d6:55:82:d4:94:46:09:bf:fd:c6:
75:0e:92:93:3e:b4:78:05:d9:74:5f:85:e8:30:18:4c:a4:26:
5d:f5:50:9d:cf:ea:da:c5:aa:35:4f:2a:4e:68:1b:f2:d5:91:
e5:0c:9d:92:05:4e:61:81:77:97:b7:7a:3b:73:89:61:6c:81:
62:cc:29:41:ca:50:ec:f2:71:92:85:aa:0b:8a:72:a0:bc:af:
1e:4c:06:52:f7:2e:52:0b:95:cf:98:73:33:4c:b4:db:fb:e7:
42:b5:96:6b:b5:01:47:a8:39:74:10:82:a0:26:94:8b:5a:ec:
95:3b:a1:64:01:45:e1:4b:9b:77:c2:62:db:70:67:f9:a3:bc:
bb:40:90:e2:ef:9d:f8:cf:51:f7:20:30:d5:65:71:7d:20:06:
f6:fe:15:c9:1b:4b:be:87:c1:48:72:d4:ce:0e:a8:52:9b:3c:
94:b3:eb:20
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaCVFSt87FD9aolL8F4d8fATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwOTEyMTAwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWQ4MGE1MDc1ZGYwYmZjOWI5MTVkZDZlYWY4MmI1ZmY4ZWZhMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYiskh8qjcGOFQ5FNtq/BcLiM5Kr
GJX3DZZMw2UyCerdzp+zzg0WeSjXdYZbzTGFGf7S2NUEDL19vrnQSKDjXlYQ/oPO
x/9h+dVOVwho9aVaV/lY2NNKr67Fta94Fm2ThBGLe8uC+TDmcF+wd0YG8wJKqKWX
JT+eHfCfUNX+OEp/LhM/jjwmUHkttW++oORsO8xXAlT1ruadBM7fPkmUo+nSFTVt
cXC+ooVkYAxic6VNRo+1yR+q/NXpOWNIVMX6jMnK7wkU4HejmVbEuSbHIxFosBzX
YWPnEA0HPMfJC6coaH1q9iWXp0vacbpDJdOix2P7mSxtKRSmUJ7Yo5H0SQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFH7YClB13wv8m5Fd1ur4K1/476IHMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvZnRnS1VIWGZDX3lia1YzVzZ2Z3JYX2p2b2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABPYvUD
BABPYvYwDQYJKoZIhvcNAQELBQADggEBAKp2twE63lIeOv9/pPlVbkU6vd3+M5d+
S0LIGJ4gI2lqBIIM8jKdlWT8BZwBWtB0B5I9FtOO2rAWL6ndtIP8SbcUjIflSP6x
DvasmvqeWzKL1lWC1JRGCb/9xnUOkpM+tHgF2XRfhegwGEykJl31UJ3P6trFqjVP
Kk5oG/LVkeUMnZIFTmGBd5e3ejtziWFsgWLMKUHKUOzycZKFqguKcqC8rx5MBlL3
LlILlc+YczNMtNv750K1lmu1AUeoOXQQgqAmlIta7JU7oWQBReFLm3fCYttwZ/mj
vLtAkOLvnfjPUfcgMNVlcX0gBvb+FckbS76HwUhy1M4OqFKbPJSz6yA=
-----END CERTIFICATE-----
Generated at Thu Sep 17 15:55:54 2026 by rpki-client