Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2RVScBFmLrguvZKcAVopID1IIw4.roa
File: 2RVScBFmLrguvZKcAVopID1IIw4.roa (raw, json)
Hash identifier: fMtmwEeBJcU9F/MSODJEfgSMoBu55I7dpytdfwBJCTo=
Subject key identifier: D9:15:52:70:11:66:2E:B8:2E:BD:92:9C:01:5A:29:20:3D:48:23:0E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F45D17A8EDD0899D76BC5D133F400FD1D
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2RVScBFmLrguvZKcAVopID1IIw4.roa
Signing time: Thu 09 Jul 2026 07:39:44 +0000
ROA not before: Thu 09 Jul 2026 07:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 79.176.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:d1:7a:8e:dd:08:99:d7:6b:c5:d1:33:f4:00:fd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 9 07:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d915527011662eb82ebd929c015a29203d48230e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:83:18:0e:23:84:63:6e:eb:4e:bd:63:e5:
d8:17:fd:c1:e3:5f:42:db:b4:e9:5f:59:20:c9:f4:
45:34:35:3a:27:8d:2e:70:d2:3c:c4:8a:5c:56:67:
86:cd:1b:5e:0f:d6:c4:6d:a3:86:7f:38:7b:c3:f0:
f4:40:fe:c1:68:d4:66:ee:b1:a5:a4:01:4a:41:50:
a2:3f:5c:84:cf:13:b2:a4:8f:03:e4:69:9d:bd:d4:
b9:b6:5a:7e:a7:e0:e6:15:f9:26:af:71:d8:5b:5c:
62:a1:08:91:a0:2a:9b:52:b3:69:15:54:c3:c1:b9:
5c:77:0d:1d:f4:e4:a9:14:73:87:27:cd:96:64:58:
d8:3a:7b:ec:20:2d:20:8e:67:9f:6d:5a:5d:cd:41:
bb:15:0d:67:97:4e:bc:1c:72:af:0b:d7:f9:96:be:
78:2d:44:05:60:35:de:33:42:92:5d:20:a4:80:63:
28:fb:5d:36:5e:2a:f8:fa:89:c6:c0:7e:d0:1b:0e:
1f:ae:09:73:f7:dc:6d:22:2d:8b:c1:57:60:3b:b8:
00:a1:fd:f7:10:65:19:cc:6e:c8:4b:8d:d5:79:24:
f7:bd:b4:3c:1d:ca:8a:32:ee:5d:df:61:fa:22:bb:
50:e6:e7:60:1d:24:75:d2:a8:be:79:11:86:68:93:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:15:52:70:11:66:2E:B8:2E:BD:92:9C:01:5A:29:20:3D:48:23:0E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2RVScBFmLrguvZKcAVopID1IIw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.255.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e2:f7:5c:2a:52:c9:cc:55:c6:f7:3e:fc:3a:50:6f:89:d5:
85:da:d6:8a:fe:f2:51:8b:fd:ee:4c:1a:ea:96:07:76:a5:bf:
d8:8f:58:fc:3a:9d:df:73:51:fb:a2:f8:96:60:df:1a:e3:c0:
18:5f:42:6a:07:4c:e4:63:39:68:61:0e:a4:bb:09:89:b9:85:
be:e7:b0:46:14:47:4b:12:66:a2:54:e5:d8:f7:e1:10:42:3a:
9d:c5:e8:4e:42:9b:79:93:30:1b:08:41:95:ff:d8:d3:96:3b:
86:b3:02:36:30:50:04:f6:23:14:e0:a6:03:80:84:af:78:6b:
82:c8:29:e3:d0:9e:c1:18:4e:e5:2d:8a:cd:5a:04:ce:72:57:
8d:a1:18:59:a3:88:6f:f8:60:25:6b:b7:c1:16:b3:b2:fe:b5:
f6:56:bf:cc:4f:39:5c:4f:cd:48:48:dc:af:d6:d9:34:5f:6b:
2f:a9:12:30:14:dd:ba:ea:16:2f:4f:2a:bc:7c:2e:13:5e:e7:
2c:67:56:7a:23:76:fe:44:88:c6:66:65:91:0f:f2:90:45:4d:
66:38:cb:22:de:1f:7f:a0:17:9a:76:ac:46:b9:7b:35:3a:28:
1d:04:66:c1:7c:0e:00:3b:c7:d8:dd:cb:f2:12:90:b6:83:da:
74:32:23:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:28 2026 by rpki-client