Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nrZPDVkntDxi6rRbh4iAig03WNw.roa
File: nrZPDVkntDxi6rRbh4iAig03WNw.roa (raw, json)
Hash identifier: Dtq/GlRJG0tbbhnG1yYpLszkbySlwjO2xXIwvhWU4Ac=
Subject key identifier: 9E:B6:4F:0D:59:27:B4:3C:62:EA:B4:5B:87:88:80:8A:0D:37:58:DC
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0CD5C83F72E58125F0B6191305B621C4F
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nrZPDVkntDxi6rRbh4iAig03WNw.roa
Signing time: Wed 23 Sep 2026 08:23:07 +0000
ROA not before: Wed 23 Sep 2026 08:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 79.182.20.0/24 maxlen: 24
79.182.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:5c:83:f7:2e:58:12:5f:0b:61:91:30:5b:62:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 23 08:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eb64f0d5927b43c62eab45b8788808a0d3758dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:c3:6f:85:9c:91:d7:13:85:5d:e8:40:02:
77:a9:e4:3b:8e:f2:5a:ef:f5:81:cf:1c:8f:cb:eb:
89:c6:84:61:eb:31:3b:07:d0:a6:9b:50:c8:d4:36:
bd:78:ed:c0:15:f4:e4:d3:aa:85:c2:fb:e8:2c:78:
f0:b0:c3:f4:ee:41:df:aa:f9:eb:96:30:33:13:cc:
2f:9a:b8:e0:12:33:59:5b:e0:a4:6a:f6:ea:40:fd:
ee:ec:88:01:7e:f0:1e:38:81:fb:cf:99:11:01:05:
3a:f9:e3:e8:4a:6f:bd:25:cd:90:ad:a8:1d:c1:af:
e3:b1:2f:b3:65:9d:92:12:d6:f5:ef:b5:8b:0f:e1:
a2:49:4e:05:2c:bc:c9:09:91:25:86:3e:b7:06:96:
aa:ef:0c:ab:45:1e:6f:c5:67:2b:35:fb:66:1c:b4:
63:52:85:4b:dd:7d:ef:da:6e:5f:29:1f:ba:50:0b:
00:a6:ae:e3:44:87:64:06:51:2d:a1:46:ef:84:ac:
aa:9c:24:11:8f:7e:9f:be:a6:3b:76:f8:de:5a:7c:
be:94:2c:97:b3:40:b3:7c:08:12:05:4c:35:ce:e9:
24:4d:53:80:22:32:93:8b:ec:6f:55:60:18:76:7f:
a5:b5:86:4e:0a:fa:f4:72:33:16:83:bb:75:39:2f:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:4F:0D:59:27:B4:3C:62:EA:B4:5B:87:88:80:8A:0D:37:58:DC
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nrZPDVkntDxi6rRbh4iAig03WNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.20.0/24
79.182.57.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f0:b1:af:4c:fe:41:d4:31:c9:82:b0:1f:0a:01:0b:0b:6a:
c4:0d:28:33:7b:8b:cc:6d:83:c6:36:e4:08:78:43:35:2d:3a:
0e:07:5f:03:0b:5b:61:fb:d2:3e:16:a5:7b:72:9a:7f:f0:09:
b9:4c:6f:8d:c2:13:f1:42:d7:24:d4:f4:2a:1d:2b:b3:7e:bb:
63:d1:db:d3:e2:80:32:bb:c3:10:1a:3c:d1:5c:b0:63:57:d3:
87:c0:44:a4:b4:0f:10:71:99:9a:18:fa:56:99:f4:93:b9:10:
46:6b:f5:e7:9f:d2:de:37:9c:6d:31:e6:d1:09:df:ea:f1:f0:
a3:f8:4e:5f:94:5a:1e:04:17:af:d8:f2:db:58:3f:21:89:6d:
78:f8:49:ae:de:76:ff:c6:5e:86:44:5f:65:fe:cf:e5:c2:c0:
df:6b:a4:c9:e3:0c:b0:9b:6c:b0:f7:78:f0:94:09:74:31:96:
55:43:5b:82:ab:79:ac:e9:cf:d4:35:c7:2a:90:0c:2b:6b:e5:
f7:eb:e7:78:74:dd:15:57:20:5a:4e:1a:85:60:f9:ce:ad:3a:
ac:7d:f5:7f:a7:55:ef:4f:49:ac:46:e2:2a:9d:ae:7a:63:9c:
f6:43:0c:5f:10:af:e0:55:ea:f6:c5:70:64:4d:3b:83:7a:ef:
e8:85:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:05 2026 by rpki-client