Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P8XIuBzL50TB9KlHzZj6tyncy5k.roa
File: P8XIuBzL50TB9KlHzZj6tyncy5k.roa (raw, json)
Hash identifier: Gj5d2iEgcqnTrVEchq7X/tHsc95pQjTDOBzx7MQAzCU=
Subject key identifier: 3F:C5:C8:B8:1C:CB:E7:44:C1:F4:A9:47:CD:98:FA:B7:29:DC:CB:99
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C6BECA5AF92A45FC595327D72726641A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P8XIuBzL50TB9KlHzZj6tyncy5k.roa
Signing time: Tue 22 Sep 2026 01:33:07 +0000
ROA not before: Tue 22 Sep 2026 01:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 79.180.10.0/24 maxlen: 24
79.180.77.0/24 maxlen: 24
79.180.101.0/24 maxlen: 24
109.64.210.0/24 maxlen: 24
109.66.12.0/24 maxlen: 24
109.66.13.0/24 maxlen: 24
109.66.16.0/24 maxlen: 24
109.66.42.0/24 maxlen: 24
109.66.52.0/24 maxlen: 24
109.66.53.0/24 maxlen: 24
109.66.57.0/24 maxlen: 24
109.66.129.0/24 maxlen: 24
109.66.134.0/24 maxlen: 24
109.66.167.0/24 maxlen: 24
109.66.177.0/24 maxlen: 24
109.66.207.0/24 maxlen: 24
109.66.210.0/24 maxlen: 24
109.66.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:be:ca:5a:f9:2a:45:fc:59:53:27:d7:27:26:64:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 22 01:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fc5c8b81ccbe744c1f4a947cd98fab729dccb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:a3:ad:c3:05:44:09:5a:70:43:f4:16:24:
18:77:54:c8:4e:37:6a:cb:6a:8f:e3:96:43:61:f7:
fd:89:c6:3d:73:9a:55:5c:0f:81:fc:86:b1:43:92:
b7:08:5c:b3:98:11:65:34:61:fe:07:f7:06:8a:65:
f5:76:f2:c0:96:81:49:c5:bc:ce:88:1e:4c:3a:9c:
87:22:14:8a:55:0d:ac:e4:c3:e9:b6:53:2e:ea:81:
68:90:bc:73:32:a2:eb:f3:31:d6:0e:e3:e2:6c:b5:
8a:bd:c5:1e:15:93:60:56:34:8f:64:9b:6a:3c:56:
39:8e:ba:84:b6:5f:ec:41:52:fa:0d:92:40:93:6a:
22:72:f4:9f:12:cc:38:25:d3:4e:59:14:f9:2a:00:
cd:14:be:cc:98:e3:86:95:95:4d:6e:ca:64:f7:df:
74:8a:04:a4:f9:3d:3e:29:e1:d9:b3:d0:17:b1:e1:
59:42:85:c7:8e:30:2e:38:11:dd:23:f6:c6:f7:3f:
b6:32:73:13:1f:09:50:31:9b:a0:f4:b1:6a:3c:04:
b2:32:a0:65:74:fc:b3:9a:ea:b9:b7:5d:2b:e0:e9:
f9:88:33:f2:90:14:05:88:6d:dc:07:29:6d:23:b7:
2b:b0:fa:2a:5b:ab:fb:04:49:46:1c:09:10:04:3e:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:C8:B8:1C:CB:E7:44:C1:F4:A9:47:CD:98:FA:B7:29:DC:CB:99
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P8XIuBzL50TB9KlHzZj6tyncy5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.10.0/24
79.180.77.0/24
79.180.101.0/24
109.64.210.0/24
109.66.12.0/23
109.66.16.0/24
109.66.42.0/24
109.66.52.0/23
109.66.57.0/24
109.66.129.0/24
109.66.134.0/24
109.66.167.0/24
109.66.177.0/24
109.66.207.0/24
109.66.210.0/24
109.66.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ef:d9:bc:45:49:9c:56:d9:cd:17:92:c1:8e:ad:09:2c:3a:
81:f2:ec:0d:81:48:0a:35:ba:6c:fe:3b:4f:11:80:ff:62:18:
95:97:f4:b2:c4:e8:b5:d5:8b:e5:97:49:44:0f:37:c0:91:a9:
ca:53:c8:cc:bb:91:54:a0:5c:56:9a:e8:10:ad:74:f7:16:a7:
21:9b:10:4e:a6:bc:f7:dc:be:9d:cb:77:05:4b:87:be:95:cf:
71:e3:cd:b6:3b:e3:db:d8:37:85:17:db:16:13:e1:72:24:26:
13:ca:f3:f2:35:27:6a:11:f0:d8:a4:54:b4:37:55:fa:ff:1a:
a6:98:99:44:24:54:5e:10:bf:cb:37:2c:b3:e2:48:d4:15:ac:
0e:51:6e:cf:9f:ad:07:de:cc:c1:6f:33:d4:c3:46:8e:f2:29:
99:5e:ec:ba:a4:86:0e:3b:c6:1d:f5:4f:c0:8e:50:87:b9:04:
f3:db:52:d9:b5:91:37:47:a5:df:94:86:20:2e:fd:4c:f5:5c:
d6:5d:a4:78:25:f7:3b:46:c9:79:63:55:24:51:c6:16:ad:39:
b3:4e:26:72:57:dd:21:e0:bc:1f:ac:90:85:5d:b2:96:99:4b:
63:36:a2:1e:ba:a1:2f:b6:17:80:63:73:a8:9a:59:c6:07:61:
e2:99:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:08:18 2026 by rpki-client