Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/OAq0yRpCTzJxbF55xDfVT8AcyyE.roa
File: OAq0yRpCTzJxbF55xDfVT8AcyyE.roa (raw, json)
Hash identifier: rtAUUjH3W7C8dVV/gy/YbjwKxDAbzE25bO65NAEe+1Y=
Subject key identifier: 38:0A:B4:C9:1A:42:4F:32:71:6C:5E:79:C4:37:D5:4F:C0:1C:CB:21
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 019EE90DADF8788408D7160BD920058C90BC
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/OAq0yRpCTzJxbF55xDfVT8AcyyE.roa
Signing time: Sun 21 Jun 2026 07:20:48 +0000
ROA not before: Sun 21 Jun 2026 07:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200304
IP address blocks: 79.110.160.0/22 maxlen: 22
79.110.160.0/24 maxlen: 24
79.110.161.0/24 maxlen: 24
79.110.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:0d:ad:f8:78:84:08:d7:16:0b:d9:20:05:8c:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Jun 21 07:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=380ab4c91a424f32716c5e79c437d54fc01ccb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:46:cf:da:0a:d7:d8:0c:66:a7:83:f5:40:
21:ef:94:05:e2:11:c1:db:95:4c:77:f9:c5:9c:3e:
a4:74:d9:33:f7:ab:23:cf:12:ba:78:23:af:1c:5b:
61:54:e0:27:3c:20:7e:da:28:6b:98:0d:10:fd:07:
72:da:60:d0:86:09:b0:ba:ad:45:91:38:33:46:4d:
f8:03:1d:b4:3d:b4:12:bb:63:3b:80:d0:b0:70:80:
fe:c0:04:65:5f:10:1a:86:d0:28:0a:9c:60:0b:db:
bc:36:9d:ac:16:79:8a:97:14:26:af:b6:b4:ae:ca:
95:66:74:4c:36:69:9f:43:9d:7c:34:fc:81:30:2d:
82:d3:c5:27:fa:8a:7b:f1:f0:21:2f:9a:d4:84:df:
c5:7d:8c:92:54:77:1b:6e:5b:83:dd:87:bc:2b:77:
e7:45:64:bf:28:16:bf:78:bb:4c:f3:88:17:41:4c:
e1:eb:05:19:20:0e:3d:f9:ba:15:35:e6:33:84:22:
0d:ed:0c:03:91:4e:65:06:08:75:22:81:6c:c8:9b:
17:16:27:f4:64:01:ad:04:8b:77:77:75:d3:d7:2b:
35:0c:83:09:89:4f:70:ff:37:42:9f:5c:72:91:75:
e9:8e:09:59:ce:4f:a5:d1:f7:1b:57:6b:8f:05:2f:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:B4:C9:1A:42:4F:32:71:6C:5E:79:C4:37:D5:4F:C0:1C:CB:21
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/OAq0yRpCTzJxbF55xDfVT8AcyyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:e4:86:2f:ba:f3:e2:45:77:0a:ae:84:5d:9a:7f:0b:5c:50:
f5:a8:0d:05:3a:39:b3:77:78:e2:3f:6a:29:62:46:a8:8f:23:
21:0f:35:1d:cd:fb:b4:ee:5e:6b:21:ab:34:5b:c2:03:05:56:
8d:c9:f6:f9:04:53:2a:23:06:18:69:eb:41:67:63:e6:64:cd:
10:65:2a:31:b3:3c:bc:cd:6a:5a:d8:c9:55:09:8d:20:93:e7:
7b:3b:6f:13:36:64:cb:97:77:43:00:f9:70:fe:39:cf:bf:39:
2c:45:61:bc:64:71:21:7e:a3:68:d0:50:15:a1:7a:14:fb:71:
49:ec:c3:12:a4:9f:02:22:3e:db:45:14:70:df:7c:ac:8c:7a:
75:3c:ba:a9:53:9b:d4:22:ab:80:c3:7b:f5:57:09:b1:a1:dc:
b3:19:e4:72:d6:b6:2f:09:00:6d:e1:7a:59:e4:d6:41:08:47:
e5:43:29:70:f8:6c:73:18:fb:6c:2b:6a:77:e7:f9:fd:52:66:
0b:a7:96:3b:04:d3:f0:ad:b9:c7:a4:e0:5d:17:03:9f:c3:60:
25:00:cd:7b:ac:19:cc:f5:8b:a5:88:eb:6c:51:e5:69:95:ad:
38:fd:99:d0:26:db:f6:0b:42:f9:99:9c:e1:96:71:b6:93:d4:
58:57:1e:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7pDa34eIQI1xYL2SAFjJC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2U1OTdmN2JhMTRhZGEzNWY0ZjZjNTBmOGE2NTgzYTA0
ZmNjMzUwHhcNMjYwNjIxMDcyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODBhYjRjOTFhNDI0ZjMyNzE2YzVlNzljNDM3ZDU0ZmMwMWNjYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8JGz9oK19gMZqeD9UAh75QF4hHB
25VMd/nFnD6kdNkz96sjzxK6eCOvHFthVOAnPCB+2ihrmA0Q/Qdy2mDQhgmwuq1F
kTgzRk34Ax20PbQSu2M7gNCwcID+wARlXxAahtAoCpxgC9u8Np2sFnmKlxQmr7a0
rsqVZnRMNmmfQ518NPyBMC2C08Un+op78fAhL5rUhN/FfYySVHcbbluD3Ye8K3fn
RWS/KBa/eLtM84gXQUzh6wUZIA49+boVNeYzhCIN7QwDkU5lBgh1IoFsyJsXFif0
ZAGtBIt3d3XT1ys1DIMJiU9w/zdCn1xykXXpjglZzk+l0fcbV2uPBS/vFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgKtMkaQk8ycWxeecQ31U/AHMshMB8GA1UdIwQY
MBaAFOk+WX97oUraNfT2xQ+KZYOgT8w1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGIt
MDcwYjQyNTYyNjJiLzEvT0FxMHlScENUekp4YkY1NXhEZlZUOEFjeXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGItMDcwYjQyNTYyNjJi
LzEvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCT26gMA0G
CSqGSIb3DQEBCwUAA4IBAQA+5IYvuvPiRXcKroRdmn8LXFD1qA0FOjmzd3jiP2op
YkaojyMhDzUdzfu07l5rIas0W8IDBVaNyfb5BFMqIwYYaetBZ2PmZM0QZSoxszy8
zWpa2MlVCY0gk+d7O28TNmTLl3dDAPlw/jnPvzksRWG8ZHEhfqNo0FAVoXoU+3FJ
7MMSpJ8CIj7bRRRw33ysjHp1PLqpU5vUIquAw3v1VwmxodyzGeRy1rYvCQBt4XpZ
5NZBCEflQylw+GxzGPtsK2p35/n9UmYLp5Y7BNPwrbnHpOBdFwOfw2AlAM17rBnM
9YuliOtsUeVpla04/ZnQJtv2C0L5mZzhlnG2k9RYVx58
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:13:42 2026 by rpki-client