Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/sADGN3z5zbxT_ETc87cKE2utqsk.roa
File: sADGN3z5zbxT_ETc87cKE2utqsk.roa (raw, json)
Hash identifier: F6D+21CWLHrhiQ0Rowb+WOe3AzoIq9Fm1GI3Dd1DjnM=
Subject key identifier: B0:00:C6:37:7C:F9:CD:BC:53:FC:44:DC:F3:B7:0A:13:6B:AD:AA:C9
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0D50821E737A529277047AE64E33CBE69
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/sADGN3z5zbxT_ETc87cKE2utqsk.roa
Signing time: Thu 24 Sep 2026 20:07:55 +0000
ROA not before: Thu 24 Sep 2026 20:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218616
IP address blocks: 79.176.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:08:21:e7:37:a5:29:27:70:47:ae:64:e3:3c:be:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 24 20:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b000c6377cf9cdbc53fc44dcf3b70a136badaac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:53:d8:41:a7:aa:4a:6f:2a:41:36:1d:8e:
7a:f1:0d:6f:53:81:10:fa:1f:94:b7:1a:e5:8a:dd:
9b:9f:38:bf:03:75:ba:b8:62:42:3a:26:e2:23:d6:
81:dc:a0:45:5f:5d:7b:1c:84:a8:50:01:d4:a4:ad:
86:ba:8b:89:ea:fd:31:df:40:06:a2:11:45:95:8e:
56:de:ba:5d:7e:51:6c:91:47:75:c1:36:72:94:d4:
b0:f8:4c:e0:89:b0:44:a6:b4:b6:8a:5a:fd:4f:f1:
03:2b:88:4e:34:5f:60:ef:4a:71:24:2e:0b:77:a8:
3d:2d:57:d9:9b:39:33:a7:be:1e:61:ad:54:ec:cf:
f3:92:40:09:70:3a:fd:0d:9e:4e:e8:4d:63:c5:80:
18:16:eb:e5:94:02:2e:8a:72:bf:db:22:43:74:4b:
10:b6:e3:11:a3:05:45:34:25:34:40:2d:02:3e:a6:
da:a1:6e:aa:7e:f3:3f:65:54:ab:77:a4:8b:ee:3b:
93:4a:5f:86:c9:9d:7d:b8:be:cf:4c:1e:63:5f:e9:
1d:59:7c:6e:0f:f8:81:6b:f9:26:8f:2c:0c:39:1c:
c6:f5:6e:11:e0:68:85:67:9d:91:65:a9:a4:37:ff:
0c:0b:42:d8:73:b2:35:5d:ca:e8:3f:26:9e:13:88:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:C6:37:7C:F9:CD:BC:53:FC:44:DC:F3:B7:0A:13:6B:AD:AA:C9
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/sADGN3z5zbxT_ETc87cKE2utqsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6e:e1:ea:e0:69:c9:cf:a6:88:c2:98:03:73:fa:e4:ae:3e:
1e:b6:6b:4d:b4:26:6c:f8:b3:0d:ca:27:0d:43:44:bf:3a:37:
df:8c:75:d3:f7:1a:a7:73:6e:2f:fe:9e:a2:da:7d:0d:1b:bd:
29:0a:6f:ef:b9:37:95:36:92:fb:8c:86:e0:ad:94:28:11:33:
c9:cd:dd:86:f1:79:c7:39:9a:2b:49:be:73:de:df:34:0a:b6:
e1:3f:2c:1b:e2:c9:42:1a:57:ca:9b:92:c2:79:16:b9:0b:d3:
fa:56:0b:60:e4:07:b1:35:80:96:c3:b3:d4:86:41:b2:20:61:
03:d1:7a:c8:12:33:c5:1e:37:65:94:c7:93:26:f3:c7:47:ea:
3d:45:29:2f:59:45:20:fa:99:18:61:6d:91:de:a1:e5:cd:2d:
f4:01:b2:98:0b:37:f7:ef:6c:74:00:48:29:ee:e6:d5:15:f7:
71:7b:d6:f9:3c:28:d2:e4:7b:d6:0f:27:f0:90:af:53:02:c6:
3f:a0:9a:92:9f:5f:46:58:5b:1e:33:d3:69:c0:8b:00:b7:13:
a0:c8:a1:7a:4d:ae:55:6f:61:3f:5f:a0:0c:fe:d2:62:ac:e4:
95:7a:e6:d6:59:08:9f:58:1e:fa:fc:1c:5d:22:5d:b6:de:7f:
cb:bd:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:38:29 2026 by rpki-client