Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zBCFp8o_tuV_kBEsIWt5fFeZCzo.roa
File: zBCFp8o_tuV_kBEsIWt5fFeZCzo.roa (raw, json)
Hash identifier: s6zrZhzWsfkGNl0cC1SAmvMa2Etx9RUnwtHCxzJ2ErQ=
Subject key identifier: CC:10:85:A7:CA:3F:B6:E5:7F:90:11:2C:21:6B:79:7C:57:99:0B:3A
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F38135F6B830B822DF449FB3B7E00EFB7
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zBCFp8o_tuV_kBEsIWt5fFeZCzo.roa
Signing time: Mon 06 Jul 2026 15:37:01 +0000
ROA not before: Mon 06 Jul 2026 15:37:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44213
IP address blocks: 79.176.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:13:5f:6b:83:0b:82:2d:f4:49:fb:3b:7e:00:ef:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 6 15:37:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc1085a7ca3fb6e57f90112c216b797c57990b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:83:7e:57:04:33:28:3f:a7:e6:ac:a9:22:
06:cd:3a:3e:43:c6:43:48:35:79:48:fb:68:4e:ad:
50:88:76:68:d5:5d:70:2d:01:a6:7f:6b:17:c7:0f:
5c:11:04:a5:45:fd:8d:b2:89:c5:24:02:7c:d2:57:
df:8b:ee:25:31:70:be:26:30:5c:ee:79:15:6d:0d:
c2:78:27:f6:29:55:23:84:9d:21:57:56:7a:1c:cf:
ae:1b:c2:07:75:d6:29:33:55:0b:ab:5e:f5:32:f9:
81:ac:1d:e8:2a:ee:89:bb:54:5c:44:b7:f9:ae:ec:
dd:52:53:f5:06:50:89:37:82:4e:05:ae:70:7d:63:
1c:d2:0a:0a:da:17:88:a0:9b:5e:48:eb:10:25:c8:
fe:a3:f9:7c:9f:60:f6:82:ff:58:fa:42:46:5d:ec:
39:79:1b:08:e2:f1:d9:a6:3e:b1:ad:ec:6c:b1:8e:
92:fb:63:cb:eb:ff:7f:e6:9d:8d:81:8f:99:ae:e7:
01:9c:e9:bc:45:cc:e9:9f:2c:4e:4d:43:2e:ea:30:
e2:1f:a5:bb:c5:d7:f4:68:4d:97:c6:22:68:72:09:
28:25:7c:79:7d:2c:43:a3:7e:3b:af:3b:c9:45:eb:
d6:7e:57:de:cb:6e:da:52:b5:c5:69:9b:f4:fa:9c:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:85:A7:CA:3F:B6:E5:7F:90:11:2C:21:6B:79:7C:57:99:0B:3A
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zBCFp8o_tuV_kBEsIWt5fFeZCzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c3:c4:6d:4c:d0:a4:d4:42:07:13:84:bb:85:71:ae:74:07:
1e:22:2e:0b:8f:b9:95:f4:b1:4b:aa:81:19:07:08:6c:e7:d9:
f7:50:84:b6:82:95:d2:8e:89:5c:86:2c:59:8d:20:6e:ea:6f:
8d:2a:04:4a:3d:27:f5:24:6f:20:f6:0b:db:73:cf:b0:8e:84:
70:6d:ff:4c:0e:45:ab:57:85:d9:6e:7b:1b:f0:28:0d:da:64:
e8:7e:60:12:da:47:9b:ef:27:be:65:19:71:a3:55:01:e1:76:
8a:f6:04:a1:78:a6:84:26:62:1c:c3:4a:f0:cc:f7:3f:19:b3:
a2:bc:9c:26:ff:48:78:1f:70:68:22:60:6f:ad:b5:1b:3d:29:
f1:1e:cc:64:57:c3:f3:45:6d:2e:8f:4b:a0:d9:a6:9c:b0:ec:
13:8d:5c:4c:a6:c4:fd:c9:50:e9:16:66:3a:d1:04:bb:81:06:
8a:56:a9:d7:c4:28:05:fb:ef:bc:c9:f3:a1:75:23:6e:50:19:
9d:af:95:fd:03:a5:17:33:2a:82:5e:89:91:a3:3f:1e:55:36:
ef:42:a3:b9:25:c6:03:3a:68:a3:e3:2b:63:40:99:fe:59:61:
10:5a:e6:99:18:04:20:06:a6:ec:d6:96:ff:19:90:d4:a3:48:
8a:25:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:22 2026 by rpki-client