Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nhvlBTexMzYdSopGwC7dgxpQpMI.roa
File: nhvlBTexMzYdSopGwC7dgxpQpMI.roa (raw, json)
Hash identifier: U2+w8OKlz7AZDKQazAR8t2cIc3asaqKSW/usz9u1R1s=
Subject key identifier: 9E:1B:E5:05:37:B1:33:36:1D:4A:8A:46:C0:2E:DD:83:1A:50:A4:C2
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F8F2FFC23D7FD4F0C80F22565C0BF11E6
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nhvlBTexMzYdSopGwC7dgxpQpMI.roa
Signing time: Thu 23 Jul 2026 13:35:14 +0000
ROA not before: Thu 23 Jul 2026 13:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 79.176.85.0/24 maxlen: 24
79.176.87.0/24 maxlen: 24
79.176.115.0/24 maxlen: 24
79.176.254.0/24 maxlen: 24
79.182.65.0/24 maxlen: 24
79.182.127.0/24 maxlen: 24
79.182.184.0/24 maxlen: 24
79.182.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:2f:fc:23:d7:fd:4f:0c:80:f2:25:65:c0:bf:11:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 23 13:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e1be50537b133361d4a8a46c02edd831a50a4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:8c:c4:ce:af:bd:a6:4e:a5:f5:7a:5e:c4:
69:24:9a:47:9f:69:08:36:2f:9f:00:0e:37:cc:64:
4a:45:db:0b:77:10:da:e6:3d:72:13:45:0f:c9:51:
69:aa:ed:a1:eb:8a:80:bc:43:e4:38:16:98:79:5f:
13:40:2b:b0:a5:35:b9:e1:48:35:5c:24:03:6d:36:
5c:8d:be:cf:0e:e4:9b:65:83:e9:b8:6d:68:d2:73:
20:79:cd:91:bf:f9:bd:a8:05:99:21:f5:e2:c2:97:
7c:08:19:bf:c1:08:5b:2d:61:51:dd:08:07:c4:aa:
e0:36:1c:8b:0d:13:10:26:18:6d:76:d1:96:d0:75:
76:b2:f7:b2:9c:5c:9b:ef:49:6b:f4:7e:e4:1c:5f:
d0:9b:c2:08:5a:93:62:e8:a9:46:25:fd:d3:81:54:
47:7e:4b:41:95:86:7d:a2:d0:7d:a7:2f:f9:1d:34:
71:0e:59:5f:78:2d:7b:4d:4f:cc:35:58:81:6d:00:
d4:23:e6:bb:b2:de:87:d7:82:8e:71:09:90:0f:10:
75:51:6f:38:e8:69:b8:ae:5f:0e:41:e6:3a:62:ca:
5e:4b:62:be:c2:19:50:3b:fa:50:f2:b1:c5:0a:36:
fb:d3:50:92:b7:5c:d3:b9:68:a8:5c:00:79:6b:9d:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:E5:05:37:B1:33:36:1D:4A:8A:46:C0:2E:DD:83:1A:50:A4:C2
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nhvlBTexMzYdSopGwC7dgxpQpMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.85.0/24
79.176.87.0/24
79.176.115.0/24
79.176.254.0/24
79.182.65.0/24
79.182.127.0/24
79.182.184.0/24
79.182.231.0/24
Signature Algorithm: sha256WithRSAEncryption
21:60:52:18:c8:d2:d0:89:cb:e6:e4:60:8c:f2:7c:af:bc:d6:
95:b7:31:43:02:ac:b8:83:eb:24:c7:3d:8b:ec:85:30:68:94:
48:a8:c6:06:dd:4b:6e:3f:77:05:0e:7c:2e:2c:fe:bd:56:5f:
14:8f:87:06:49:fd:84:aa:42:1b:2e:05:73:15:7a:21:f1:9d:
80:25:1d:32:62:89:29:00:90:63:2b:35:f0:fc:d8:4d:bd:cf:
8e:3a:6b:64:0e:2c:23:05:52:34:a9:20:97:0d:87:0a:63:3a:
d6:cd:cc:75:98:99:6f:60:26:e6:58:59:0b:42:94:cc:de:92:
f8:e1:4c:b2:74:f3:00:e9:07:da:da:98:48:77:db:83:75:96:
a6:b4:93:10:b6:8b:93:54:3a:9d:90:4d:be:0a:cb:b0:0e:01:
22:e5:ed:5a:89:22:41:00:10:50:a5:4a:78:36:b3:bd:18:21:
34:d6:c0:a0:00:e3:e0:f1:97:b8:65:d2:4d:43:13:cc:ae:08:
b6:be:c1:13:a8:cf:2e:21:67:2e:f9:02:57:0b:45:1a:e0:2a:
dd:6e:de:e3:cb:10:f2:a6:8e:ee:82:ec:f5:54:7c:c1:94:1e:
9c:92:f8:74:d4:80:56:cc:a9:43:05:02:82:b9:18:9e:cc:6a:
48:93:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:43 2026 by rpki-client