Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/JL63CBvhwqPEZ24EicyTnRw9mXI.roa
File: JL63CBvhwqPEZ24EicyTnRw9mXI.roa (raw, json)
Hash identifier: oCFS8hp0fLsMJw21lXQxSmeqk93E3ApIgbPSMTVR71g=
Subject key identifier: 24:BE:B7:08:1B:E1:C2:A3:C4:67:6E:04:89:CC:93:9D:1C:3D:99:72
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F6AD539A5D8E17CDCF5EBA90E4E4CB161
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/JL63CBvhwqPEZ24EicyTnRw9mXI.roa
Signing time: Thu 16 Jul 2026 12:09:46 +0000
ROA not before: Thu 16 Jul 2026 12:09:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 79.176.121.0/24 maxlen: 24
79.176.212.0/24 maxlen: 24
79.182.227.0/24 maxlen: 24
79.182.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:d5:39:a5:d8:e1:7c:dc:f5:eb:a9:0e:4e:4c:b1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 16 12:09:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24beb7081be1c2a3c4676e0489cc939d1c3d9972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:ea:4e:1a:ca:90:ae:2a:6e:ad:82:10:27:
7c:eb:9f:37:f9:17:97:bf:27:56:c1:07:5b:15:09:
8a:c0:f9:82:62:d2:58:b0:6b:66:35:fa:b0:0d:5e:
81:bc:2b:b2:62:6f:3a:f2:b9:24:40:35:c8:84:f9:
76:69:9c:38:d3:78:87:72:b3:db:ed:7d:c2:5b:69:
a9:18:1e:94:a2:36:b5:69:8d:e5:75:6b:66:53:e3:
9c:6d:1c:6a:4b:12:bc:2b:7e:d8:e1:d0:2a:a3:86:
78:71:55:4a:aa:60:b1:85:82:1d:56:1c:7f:2c:99:
73:98:cc:35:f3:8a:0c:29:9f:0b:8f:56:91:25:ea:
c1:06:bc:72:f4:37:93:98:12:9c:65:4d:7f:b8:a3:
29:c1:fe:bc:00:f3:d9:46:01:86:1e:47:3a:98:20:
f8:31:b3:c5:bc:c1:49:d3:eb:7a:44:22:66:f9:57:
2e:ae:c0:8f:11:8c:2c:8b:b2:57:bf:c9:16:0b:6a:
e3:2b:94:ea:68:05:88:b7:66:db:49:c8:88:9b:e7:
31:23:7e:56:d2:74:13:88:05:8d:b6:50:0f:ea:49:
81:97:2f:99:48:50:a3:6b:15:84:34:f3:20:55:75:
66:a3:14:78:77:89:59:19:bd:dc:b8:31:08:8e:d4:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BE:B7:08:1B:E1:C2:A3:C4:67:6E:04:89:CC:93:9D:1C:3D:99:72
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/JL63CBvhwqPEZ24EicyTnRw9mXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.121.0/24
79.176.212.0/24
79.182.227.0/24
79.182.255.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8c:72:29:f3:1d:ca:4a:60:89:6c:a2:90:27:ad:1b:ea:88:
e6:ac:dd:39:65:e9:d9:36:24:8e:eb:4c:ed:04:88:21:8a:71:
cb:07:1e:a3:c8:b3:ac:60:e3:f2:84:a0:4e:6f:a5:ae:c1:11:
45:5a:76:62:bc:cf:7e:1d:9c:a2:9b:b2:e0:be:cc:0a:bd:6d:
ee:82:67:88:54:07:ea:d8:fa:3a:66:a5:ec:16:b2:74:58:38:
66:95:47:b1:58:43:43:69:21:62:07:f8:38:fc:05:73:c4:93:
d9:6a:b3:7b:1c:13:b8:f9:7b:96:86:b8:35:f6:ac:9d:19:83:
26:08:47:12:ad:28:60:44:4b:68:61:2a:73:72:ec:71:de:93:
fe:58:65:be:9e:8c:b3:fd:c3:6b:48:b5:0c:a4:08:ff:69:fb:
c2:71:a2:ba:ff:06:33:d1:d2:f8:78:c6:e9:14:17:a9:d1:ec:
b8:3d:01:27:d0:1a:c4:42:f2:b3:73:0d:0d:e2:6c:16:3d:5a:
f8:5e:5a:7b:d9:be:94:01:cd:5b:2d:e0:a4:89:85:82:56:24:
aa:46:d7:78:4b:22:c2:89:16:03:51:60:c2:ff:6f:38:c5:6f:
3b:77:f1:a8:8b:a6:c9:53:8d:c6:6e:38:7f:9c:7b:4b:3e:d9:
0c:f8:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:33 2026 by rpki-client