Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5iOJWliRm2enMd5puEvsC9HIoBA.roa
File: 5iOJWliRm2enMd5puEvsC9HIoBA.roa (raw, json)
Hash identifier: HauyjeWjjEkKGBnBBzzLqHag+bumCtxC90ywNX3/920=
Subject key identifier: E6:23:89:5A:58:91:9B:67:A7:31:DE:69:B8:4B:EC:0B:D1:C8:A0:10
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C801F911A00239DC50AE4272BFCA522E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5iOJWliRm2enMd5puEvsC9HIoBA.roa
Signing time: Tue 22 Sep 2026 07:26:07 +0000
ROA not before: Tue 22 Sep 2026 07:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63099
IP address blocks: 79.182.116.0/24 maxlen: 24
109.66.131.0/24 maxlen: 24
109.66.135.0/24 maxlen: 24
109.66.136.0/24 maxlen: 24
109.66.145.0/24 maxlen: 24
109.66.154.0/24 maxlen: 24
109.66.161.0/24 maxlen: 24
109.66.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:01:f9:11:a0:02:39:dc:50:ae:42:72:bf:ca:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 22 07:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e623895a58919b67a731de69b84bec0bd1c8a010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:c0:a0:80:db:ad:8f:fc:1e:65:0c:c6:10:
fc:09:61:87:b8:8d:28:72:42:e6:d7:22:a8:38:20:
22:20:b5:e4:84:74:bb:5c:24:0c:42:ac:ac:bb:97:
7a:da:92:0a:e7:7f:df:72:e7:f5:ff:3d:a3:e6:4d:
a9:08:d4:49:55:d3:e8:ce:20:02:cb:e5:6b:51:79:
12:2c:05:47:12:1f:c2:b2:59:20:2b:c9:69:d9:bf:
2b:b5:cb:59:1a:90:2c:6f:42:df:99:97:7a:f2:39:
ae:db:c4:c9:22:f8:8f:21:32:6f:4f:dc:83:1f:21:
4f:8f:b9:88:22:7f:ed:c0:64:c1:6b:bb:03:27:83:
64:fa:8c:f1:4a:9f:b6:e8:81:3b:a7:75:40:4a:74:
97:5e:70:8a:57:c4:87:51:48:74:44:76:20:6b:35:
ad:3c:1d:7e:e2:cc:e2:1c:8a:a6:2b:e3:35:d6:61:
db:b5:8e:ab:b2:d5:29:4e:69:60:dd:b0:4d:df:9e:
4b:b0:8c:56:cd:40:b3:7a:c5:d1:7a:5f:80:b6:0a:
64:dd:fc:48:f1:0e:f9:30:41:ff:b1:97:bb:90:8e:
02:ba:da:95:4b:a9:c0:48:fc:78:91:3f:71:37:a4:
ef:6d:08:27:03:e3:5a:28:80:ce:11:c7:f1:a4:4b:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:89:5A:58:91:9B:67:A7:31:DE:69:B8:4B:EC:0B:D1:C8:A0:10
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/5iOJWliRm2enMd5puEvsC9HIoBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.116.0/24
109.66.131.0/24
109.66.135.0-109.66.136.255
109.66.145.0/24
109.66.154.0/24
109.66.161.0/24
109.66.190.0/24
Signature Algorithm: sha256WithRSAEncryption
23:51:2a:4e:da:64:b3:5e:38:1f:6e:a3:a5:8d:67:cc:27:a0:
d4:14:ce:65:41:9b:e2:38:0d:51:a6:0c:2b:fb:33:4c:71:10:
b9:b7:9e:85:c6:26:5f:2e:45:de:ea:6f:ec:dc:42:0f:5b:b5:
93:8e:2b:ef:b7:58:bf:b4:95:4d:da:5e:08:59:7b:d6:8d:0b:
5d:27:ba:bf:d3:57:96:c1:17:9c:19:bb:e3:49:3f:87:4b:ff:
37:6f:c8:6c:25:3a:57:53:26:03:dd:7d:44:d7:27:b1:80:e4:
38:5d:22:d3:43:6d:4c:b7:f2:03:37:3d:12:fa:90:36:1b:15:
1e:c0:a0:56:35:49:95:cc:5a:37:90:1a:8b:9c:53:97:f6:0b:
13:df:e1:66:9d:46:22:31:d3:ed:1a:6d:33:f5:0d:51:c6:4d:
f3:97:c2:32:01:92:6f:dd:b9:88:2e:bf:f6:d9:cd:b1:f2:00:
29:1b:9d:30:97:cb:8f:a3:30:4c:bd:5b:96:f1:cf:70:28:24:
58:2f:78:55:5f:fe:ca:2b:32:d0:39:2a:b6:46:3c:3f:a6:d1:
d5:7f:ba:5b:11:9c:87:df:28:72:7c:a5:d9:aa:ba:82:4f:6f:
ab:9e:68:39:e2:fd:be:0e:75:63:f8:97:25:8e:62:32:0b:63:
7e:36:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:37:19 2026 by rpki-client