Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/eaRU8ArJ7pd71GW8eGNZdKDKSzg.roa
File: eaRU8ArJ7pd71GW8eGNZdKDKSzg.roa (raw, json)
Hash identifier: UMgWTM4VW3d6SEyYOSZSzAnOp1pFMK895I+iWlLcwOk=
Subject key identifier: 79:A4:54:F0:0A:C9:EE:97:7B:D4:65:BC:78:63:59:74:A0:CA:4B:38
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F7C86C467C158458A6051AD7E271C004C
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/eaRU8ArJ7pd71GW8eGNZdKDKSzg.roa
Signing time: Sun 19 Jul 2026 22:37:14 +0000
ROA not before: Sun 19 Jul 2026 22:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 109.66.52.0/24 maxlen: 24
109.66.59.0/24 maxlen: 24
109.66.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7c:86:c4:67:c1:58:45:8a:60:51:ad:7e:27:1c:00:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 19 22:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79a454f00ac9ee977bd465bc78635974a0ca4b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1c:05:84:cc:b8:56:1b:17:86:57:87:80:2b:
ba:ab:e4:b6:b5:b8:49:af:31:02:90:dd:32:61:09:
85:14:66:3f:27:fb:5a:f9:b3:e2:30:4b:e0:79:fc:
72:78:03:56:e6:2e:b7:4a:ed:19:9e:b8:d4:b7:94:
ab:3a:5f:5e:72:07:86:d5:4a:65:9c:cc:81:3a:d9:
b2:1d:e2:50:98:64:f3:0c:7c:6b:34:56:39:80:50:
78:51:9c:76:49:32:a4:e8:6a:1c:8a:82:7a:39:6a:
d8:2b:5e:62:08:2b:12:9d:8a:40:80:cf:7c:64:dd:
34:6d:62:e1:d5:7a:bb:fc:66:60:79:bb:ed:a3:31:
73:e9:b8:44:6e:b5:ef:a9:98:d4:ae:17:a6:03:ff:
07:07:bf:f3:40:d4:86:2e:98:4d:f9:c3:07:7e:50:
94:50:1e:f0:dc:25:8f:27:7c:18:07:2a:09:ee:83:
db:bd:c9:b4:19:ac:6f:bb:02:e4:14:0e:9a:1d:7e:
c2:d5:1d:97:60:bd:f6:bf:19:43:65:53:90:bd:26:
9f:5c:dc:c8:9c:d5:0d:f9:83:72:01:f7:74:da:c8:
bd:54:f4:21:8e:22:13:56:79:d5:99:0f:ca:70:10:
d7:30:0f:86:30:66:2a:41:28:ba:82:2a:fb:18:0e:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:54:F0:0A:C9:EE:97:7B:D4:65:BC:78:63:59:74:A0:CA:4B:38
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/eaRU8ArJ7pd71GW8eGNZdKDKSzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.52.0/24
109.66.59.0/24
109.66.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4f:bb:79:77:48:08:63:74:07:91:57:26:58:b4:56:77:62:
b0:06:d1:3d:d3:3e:f6:3d:06:4d:a6:23:eb:e2:bb:c5:87:f7:
ba:8d:4d:2b:9b:53:db:12:0c:60:a6:4b:cc:cc:e6:30:84:da:
ab:4e:86:0a:94:26:c5:bc:a4:dc:5a:12:08:22:07:39:c2:56:
b4:ce:14:ac:d5:4a:d3:30:11:2a:6e:d5:f2:49:45:80:94:c3:
74:9c:71:ce:5e:d3:87:d0:62:48:1c:20:b8:6f:87:c8:d8:35:
07:43:64:2a:3c:f7:6e:6a:ee:3d:91:7f:db:85:60:93:67:f7:
b4:43:97:b0:88:14:3a:13:e1:a3:5e:61:e7:53:94:3e:73:82:
08:44:f1:12:60:ee:49:70:35:31:66:e5:5c:ab:71:58:0c:45:
8f:15:ae:cc:0f:a9:45:e3:b9:5d:84:ab:41:3d:1a:0d:8f:c9:
e0:14:06:ec:72:5d:61:94:11:f0:b9:ce:f6:38:0f:e9:5a:ed:
fe:64:73:a5:c5:4a:78:d5:c0:b3:54:fa:e6:c2:69:7f:0a:c1:
5f:f1:d1:f4:4e:16:96:74:5c:8f:41:14:9f:25:9f:61:fe:bc:
09:ef:58:cc:19:66:38:39:3d:eb:7f:86:6e:16:71:4d:94:13:
16:d9:f0:4a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ98hsRnwVhFimBRrX4nHABMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzE5MjIzNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE0NTRmMDBhYzllZTk3N2JkNDY1YmM3ODYzNTk3NGEwY2E0YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hwFhMy4VhsXhleHgCu6q+S2tbhJ
rzECkN0yYQmFFGY/J/ta+bPiMEvgefxyeANW5i63Su0ZnrjUt5SrOl9ecgeG1Upl
nMyBOtmyHeJQmGTzDHxrNFY5gFB4UZx2STKk6GocioJ6OWrYK15iCCsSnYpAgM98
ZN00bWLh1Xq7/GZgebvtozFz6bhEbrXvqZjUrhemA/8HB7/zQNSGLphN+cMHflCU
UB7w3CWPJ3wYByoJ7oPbvcm0GaxvuwLkFA6aHX7C1R2XYL32vxlDZVOQvSafXNzI
nNUN+YNyAfd02si9VPQhjiITVnnVmQ/KcBDXMA+GMGYqQSi6gir7GA4KNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHmkVPAKye6Xe9RlvHhjWXSgyks4MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvZWFSVThBcko3cGQ3MUdXOGVHTlpkS0RLU3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbUI0AwQA
bUI7AwQAbUJRMA0GCSqGSIb3DQEBCwUAA4IBAQA8T7t5d0gIY3QHkVcmWLRWd2Kw
BtE90z72PQZNpiPr4rvFh/e6jU0rm1PbEgxgpkvMzOYwhNqrToYKlCbFvKTcWhII
Igc5wla0zhSs1UrTMBEqbtXySUWAlMN0nHHOXtOH0GJIHCC4b4fI2DUHQ2QqPPdu
au49kX/bhWCTZ/e0Q5ewiBQ6E+GjXmHnU5Q+c4IIRPESYO5JcDUxZuVcq3FYDEWP
Fa7MD6lF47ldhKtBPRoNj8ngFAbscl1hlBHwuc72OA/pWu3+ZHOlxUp41cCzVPrm
wml/CsFf8dH0ThaWdFyPQRSfJZ9h/rwJ71jMGWY4OT3rf4ZuFnFNlBMW2fBK
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:59 2026 by rpki-client