Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/__NrHLwnSMdGhhMQ3OcQ1iVCPL0.roa
File: __NrHLwnSMdGhhMQ3OcQ1iVCPL0.roa (raw, json)
Hash identifier: v9YHTsLW1Mg2gKDf7eWnPUVlHVc4e/NkwNFGyg6HjM0=
Subject key identifier: FF:F3:6B:1C:BC:27:48:C7:46:86:13:10:DC:E7:10:D6:25:42:3C:BD
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0CE25EED13F0AD639BF331CD50017B315
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/__NrHLwnSMdGhhMQ3OcQ1iVCPL0.roa
Signing time: Wed 23 Sep 2026 12:03:07 +0000
ROA not before: Wed 23 Sep 2026 12:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 79.180.4.0/22 maxlen: 23
109.64.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:25:ee:d1:3f:0a:d6:39:bf:33:1c:d5:00:17:b3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 23 12:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff36b1cbc2748c746861310dce710d625423cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:66:ad:16:75:b5:2d:10:76:4c:33:f4:89:
0c:8a:2b:29:e5:a0:e4:6e:d9:e5:3e:22:aa:56:2f:
93:7d:5c:5e:19:95:68:dd:3b:64:3c:ac:4a:79:e7:
48:ff:e0:33:7d:0c:cd:14:46:9b:e9:59:02:7f:2d:
8a:ec:58:c7:78:fb:f0:79:39:2f:99:b6:98:71:0a:
94:e3:22:03:f2:1f:13:3f:61:1d:f4:62:b9:40:56:
5c:a3:71:2d:4e:78:06:91:e8:db:0c:f0:c0:9a:4e:
47:ca:8c:66:73:13:2a:28:d2:28:c6:c2:76:9c:c0:
26:85:23:fe:cc:d9:f3:9e:8d:e9:87:1b:d5:3d:bf:
ff:f5:e9:df:cc:9e:da:0f:03:cc:d6:3c:38:5f:07:
4e:22:f4:09:39:8c:bf:14:26:c1:e2:8a:ff:7e:90:
db:70:01:c6:26:51:29:bb:71:4d:c3:98:8b:81:07:
b2:ba:88:d9:a9:77:be:66:67:57:c2:e5:3d:30:f7:
72:ce:01:7a:82:8e:5c:4b:b4:79:af:ba:32:b0:b1:
5d:15:5a:6c:ca:35:83:85:d4:37:ca:c0:4c:76:3f:
c7:2c:d2:56:58:b8:6c:2e:4f:38:9f:d9:59:78:3a:
d1:91:9c:b9:77:ac:00:25:e0:af:e0:b1:1d:3c:ea:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:6B:1C:BC:27:48:C7:46:86:13:10:DC:E7:10:D6:25:42:3C:BD
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/__NrHLwnSMdGhhMQ3OcQ1iVCPL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.4.0/22
109.64.194.0/23
Signature Algorithm: sha256WithRSAEncryption
08:ac:ae:c7:14:ec:13:36:94:27:d2:88:61:86:eb:c8:1c:3f:
68:17:73:db:4a:1e:5d:10:a1:21:fa:6b:5e:21:44:f8:bb:46:
2c:eb:24:b7:7c:8b:13:31:fc:45:c8:32:4f:ab:9e:e3:fd:8c:
16:85:a9:e8:6b:d9:ff:ba:49:d9:ad:af:ca:51:4c:fb:04:32:
b3:6d:98:b2:a6:72:79:bb:61:58:0e:ad:e0:51:c5:b7:d4:b0:
ac:94:06:85:46:ab:30:01:3e:7b:4f:ae:d6:b2:da:03:0c:a8:
09:2f:f6:85:4e:04:87:d6:bf:44:98:43:27:da:e0:42:78:a5:
ca:46:df:2a:3a:22:de:3e:b9:4d:d8:7f:e5:0f:dd:d0:d2:0e:
62:fd:cc:fe:3d:e9:0b:52:d7:b8:61:b5:20:50:04:2f:b4:a8:
11:4c:03:b1:c2:ff:91:85:4b:44:12:c8:c3:92:6b:82:c5:58:
2c:76:54:ac:9d:85:ed:c1:d2:9f:66:4f:ed:97:47:54:d0:e0:
0f:6c:a2:fa:94:bb:a3:41:03:e9:ef:e9:0f:cb:dd:88:e1:a3:
83:f0:dd:72:88:ed:1b:bd:f1:93:97:ad:6a:42:c5:75:25:bc:
02:15:f0:94:c2:9f:41:53:dd:95:86:1a:26:4d:5d:05:8e:fd:
e3:89:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:37:38 2026 by rpki-client