Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YQFW_kM0OXLlOF-0h6FhYjp-ZSE.roa
File: YQFW_kM0OXLlOF-0h6FhYjp-ZSE.roa (raw, json)
Hash identifier: LljkVitMRWExuBqR1y7CmAcQ1XBMZEA10RKewrKTwwU=
Subject key identifier: 61:01:56:FE:43:34:39:72:E5:38:5F:B4:87:A1:61:62:3A:7E:65:21
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C94C7A6870F3ADD08D54F61552FCC672
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YQFW_kM0OXLlOF-0h6FhYjp-ZSE.roa
Signing time: Tue 22 Sep 2026 13:27:07 +0000
ROA not before: Tue 22 Sep 2026 13:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 79.176.14.0/24 maxlen: 24
79.176.15.0/24 maxlen: 24
79.176.16.0/24 maxlen: 24
79.176.17.0/24 maxlen: 24
79.176.18.0/24 maxlen: 24
79.176.21.0/24 maxlen: 24
79.176.38.0/24 maxlen: 24
79.176.44.0/24 maxlen: 24
79.176.49.0/24 maxlen: 24
79.176.50.0/23 maxlen: 24
79.176.57.0/24 maxlen: 24
79.176.61.0/24 maxlen: 24
79.176.70.0/24 maxlen: 24
79.176.87.0/24 maxlen: 24
79.180.0.0/23 maxlen: 24
79.182.7.0/24 maxlen: 24
79.182.8.0/24 maxlen: 24
79.183.145.0/24 maxlen: 24
79.183.146.0/24 maxlen: 24
79.183.147.0/24 maxlen: 24
79.183.148.0/24 maxlen: 24
79.183.149.0/24 maxlen: 24
109.64.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:4c:7a:68:70:f3:ad:d0:8d:54:f6:15:52:fc:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 22 13:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=610156fe43343972e5385fb487a161623a7e6521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:bd:8f:1e:ee:28:d0:06:80:00:2f:65:2b:
d0:8d:46:1b:27:48:81:a3:a0:e1:45:e3:92:53:17:
77:d5:70:85:88:b2:42:21:60:1c:1e:19:cd:32:15:
4b:a2:0f:5e:14:2f:fe:88:47:41:29:39:ff:b5:66:
62:2d:6b:06:db:c8:cb:fc:91:79:69:09:a2:90:93:
ce:38:9d:d0:a8:1e:02:f2:27:35:8c:53:84:01:12:
31:1d:1b:a5:f9:36:36:70:e1:ab:1c:c8:5f:d3:9c:
fe:86:c3:bd:4d:a4:cb:24:c1:4f:79:04:8e:97:fa:
6c:e5:54:51:15:70:cb:28:d5:e5:94:7d:9b:d8:48:
a5:39:d7:b4:b9:16:9c:86:4e:cf:37:15:77:9d:36:
8c:a5:20:b9:75:81:ed:1a:55:95:f1:8a:f3:ba:d5:
07:d5:c1:60:e9:65:8d:ab:44:22:76:aa:69:b4:3e:
8d:bf:e4:a0:4a:79:28:d9:c2:1b:92:2b:9d:f9:bf:
01:c6:31:67:c0:3f:de:4a:be:29:91:af:3a:71:47:
e6:72:e0:ff:93:3c:2a:30:ea:1e:22:9d:bb:78:ea:
a7:25:de:66:7d:46:ac:fc:4b:5e:61:d4:9c:ab:7f:
6d:03:de:e5:42:e4:f6:7d:7a:6c:08:9c:ea:27:fd:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:56:FE:43:34:39:72:E5:38:5F:B4:87:A1:61:62:3A:7E:65:21
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YQFW_kM0OXLlOF-0h6FhYjp-ZSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.14.0-79.176.18.255
79.176.21.0/24
79.176.38.0/24
79.176.44.0/24
79.176.49.0-79.176.51.255
79.176.57.0/24
79.176.61.0/24
79.176.70.0/24
79.176.87.0/24
79.180.0.0/23
79.182.7.0-79.182.8.255
79.183.145.0-79.183.149.255
109.64.2.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:8f:78:50:e5:25:5c:79:1b:f6:24:0a:fd:52:34:a6:92:9d:
28:a3:19:82:fb:17:86:20:57:f4:33:15:24:7a:c6:f3:e3:2b:
80:d7:a0:f1:d4:ae:73:8c:e4:95:a1:05:65:7f:1d:9c:a3:f2:
63:7e:e9:19:01:21:ee:d2:64:7e:26:4f:2d:f2:ed:51:5b:79:
68:1f:68:37:4f:db:df:6b:ec:d8:74:3e:b1:c6:99:29:fd:96:
d8:ab:e2:41:c1:93:f8:e3:8c:9b:ed:35:4b:29:6d:b3:94:27:
ca:9f:33:b0:4c:bf:66:a5:db:2f:14:77:4f:ed:a6:a3:77:29:
bb:ed:66:03:b2:73:19:09:88:50:6c:40:ec:8c:07:39:9c:42:
96:ea:26:3e:e1:98:1e:cc:70:eb:b8:fc:11:31:4f:85:04:4f:
46:fd:d3:ae:33:c1:fb:ac:5d:ac:1f:6f:e5:67:f8:cd:2f:fd:
01:21:49:00:c2:7f:80:84:36:9e:e5:e5:29:c7:df:9b:48:95:
a6:b3:c9:9b:45:0f:be:a2:5b:e8:8b:1c:04:48:3a:8b:fa:6a:
7f:6f:6f:b4:46:4f:18:3c:55:74:d0:68:29:83:e1:d9:0b:8b:
e6:1c:cc:f4:ae:ba:ac:f9:7b:76:51:e3:9a:81:06:4e:e9:65:
ce:7a:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:17:08 2026 by rpki-client