Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LOd13ZpXkaKfeUJbtyR1jxJvQ0Y.roa
File: LOd13ZpXkaKfeUJbtyR1jxJvQ0Y.roa (raw, json)
Hash identifier: IKhHdSXcnOEQUOnmtFdpxEVHcZtf7CeOvuipXxIU+8M=
Subject key identifier: 2C:E7:75:DD:9A:57:91:A2:9F:79:42:5B:B7:24:75:8F:12:6F:43:46
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F7ED5479FE9BAC429200B9D94C4AC6B57
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LOd13ZpXkaKfeUJbtyR1jxJvQ0Y.roa
Signing time: Mon 20 Jul 2026 09:22:14 +0000
ROA not before: Mon 20 Jul 2026 09:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 79.176.77.0/24 maxlen: 24
79.176.213.0/24 maxlen: 24
79.176.227.0/24 maxlen: 24
79.182.37.0/24 maxlen: 24
79.182.45.0/24 maxlen: 24
109.66.14.0/24 maxlen: 24
109.66.24.0/24 maxlen: 24
109.66.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:d5:47:9f:e9:ba:c4:29:20:0b:9d:94:c4:ac:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 20 09:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ce775dd9a5791a29f79425bb724758f126f4346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:43:47:79:48:aa:19:55:f3:bb:4f:a3:37:75:
8a:ff:00:27:05:34:6a:a6:04:da:b2:d0:fe:93:df:
6f:89:73:cc:ad:22:df:6a:d2:6d:d9:35:fe:d3:43:
93:84:bf:03:27:00:9a:e3:0c:b6:9e:76:d6:70:08:
b3:6b:dd:4b:f2:85:af:a9:ac:21:b2:89:76:f5:e7:
67:9d:2a:a0:ef:54:40:3b:5d:d1:f7:3d:cd:3c:7b:
93:b1:69:ff:ee:5a:a9:dd:fd:30:4c:f9:02:bd:14:
e0:11:c9:1e:01:fa:84:23:e0:e1:ba:fe:bc:cd:59:
75:b8:fb:cc:28:3f:44:76:92:1c:d8:19:fe:d0:90:
ca:a9:72:41:7f:64:58:b2:11:e3:56:1a:9c:41:7e:
96:b2:b8:c8:b7:fb:10:85:97:41:8c:52:4e:91:32:
3f:09:67:82:50:47:fc:32:ac:11:ba:22:30:58:54:
b8:38:88:65:e3:f1:3f:2b:41:c9:bf:ac:a1:55:56:
51:a8:b3:24:ab:e7:41:4f:ab:49:ec:63:8c:a6:ff:
b5:f7:98:79:f3:70:79:e1:a5:4b:1e:57:bf:e6:f5:
2c:6a:a9:95:ea:75:de:eb:00:68:68:8a:be:f7:59:
7e:9d:dd:4a:5f:3a:67:90:da:35:b0:a4:65:77:52:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:75:DD:9A:57:91:A2:9F:79:42:5B:B7:24:75:8F:12:6F:43:46
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LOd13ZpXkaKfeUJbtyR1jxJvQ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.77.0/24
79.176.213.0/24
79.176.227.0/24
79.182.37.0/24
79.182.45.0/24
109.66.14.0/24
109.66.24.0/24
109.66.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cf:da:a3:07:4a:a1:9a:8e:41:ab:76:4c:6b:5d:d2:f8:cf:
a8:15:ea:1a:75:f9:0b:29:a3:1e:6c:b7:2e:d2:cc:22:53:19:
9e:05:29:10:e5:0d:44:85:5e:c4:70:7d:18:39:eb:f8:27:43:
7b:6e:29:ed:8c:8d:14:b7:14:93:be:99:0d:91:f2:01:dd:3d:
f6:7f:2c:d5:33:a3:b8:e6:bd:ab:bd:94:5a:c1:fa:02:77:0d:
f5:ee:38:58:48:93:3b:6e:06:14:aa:7e:6e:83:98:38:7d:d3:
9a:e6:56:c2:17:1b:73:37:0a:c6:c7:48:61:0b:17:03:02:ad:
02:ab:c2:47:7c:74:9d:8e:8a:12:ce:b0:2b:c8:17:14:ee:b5:
ec:b8:1e:3a:83:02:9e:51:22:c8:51:a5:c6:ab:9d:d3:21:87:
82:6c:b0:2a:ee:bd:6a:7b:c5:c0:91:ae:36:35:59:74:ff:4a:
36:96:99:6a:36:bb:68:68:9e:4a:7e:f8:ec:72:a7:f4:c3:24:
c9:21:a7:c5:71:ce:f0:75:f8:71:38:0a:73:d2:58:fc:e3:08:
18:75:f8:9a:ee:af:3e:e0:86:79:d5:d7:45:05:75:56:6b:aa:
5f:e4:26:ad:48:2b:23:db:70:9f:42:45:b8:48:53:da:a5:b8:
ac:37:42:31
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ9+1Uef6brEKSALnZTErGtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzIwMDkyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2U3NzVkZDlhNTc5MWEyOWY3OTQyNWJiNzI0NzU4ZjEyNmY0MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kNHeUiqGVXzu0+jN3WK/wAnBTRq
pgTastD+k99viXPMrSLfatJt2TX+00OThL8DJwCa4wy2nnbWcAiza91L8oWvqawh
sol29ednnSqg71RAO13R9z3NPHuTsWn/7lqp3f0wTPkCvRTgEckeAfqEI+Dhuv68
zVl1uPvMKD9EdpIc2Bn+0JDKqXJBf2RYshHjVhqcQX6WsrjIt/sQhZdBjFJOkTI/
CWeCUEf8MqwRuiIwWFS4OIhl4/E/K0HJv6yhVVZRqLMkq+dBT6tJ7GOMpv+195h5
83B54aVLHle/5vUsaqmV6nXe6wBoaIq+91l+nd1KXzpnkNo1sKRld1JNZQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCzndd2aV5Gin3lCW7ckdY8Sb0NGMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvTE9kMTNacFhrYUtmZVVKYnR5UjFqeEp2UTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAT7BNAwQA
T7DVAwQAT7DjAwQAT7YlAwQAT7YtAwQAbUIOAwQAbUIYAwQAbUKPMA0GCSqGSIb3
DQEBCwUAA4IBAQAPz9qjB0qhmo5Bq3ZMa13S+M+oFeoadfkLKaMebLcu0swiUxme
BSkQ5Q1EhV7EcH0YOev4J0N7bintjI0UtxSTvpkNkfIB3T32fyzVM6O45r2rvZRa
wfoCdw317jhYSJM7bgYUqn5ug5g4fdOa5lbCFxtzNwrGx0hhCxcDAq0Cq8JHfHSd
jooSzrAryBcU7rXsuB46gwKeUSLIUaXGq53TIYeCbLAq7r1qe8XAka42NVl0/0o2
lplqNrtoaJ5Kfvjscqf0wyTJIafFcc7wdfhxOApz0lj84wgYdfia7q8+4IZ51ddF
BXVWa6pf5CatSCsj23CfQkW4SFPapbisN0Ix
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:33 2026 by rpki-client