Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zQXVrYEwwy5l2qY9Yl1wT7p06iQ.roa
File: zQXVrYEwwy5l2qY9Yl1wT7p06iQ.roa (raw, json)
Hash identifier: 77rICbTLzf6YbndloP5V1m7TdTvpRVmsJmjzeBw1ClU=
Subject key identifier: CD:05:D5:AD:81:30:C3:2E:65:DA:A6:3D:62:5D:70:4F:BA:74:EA:24
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F4A071FF7C8F1E8A1ACEF4D20C4C32B23
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zQXVrYEwwy5l2qY9Yl1wT7p06iQ.roa
Signing time: Fri 10 Jul 2026 03:16:48 +0000
ROA not before: Fri 10 Jul 2026 03:16:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141575
IP address blocks: 79.182.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:07:1f:f7:c8:f1:e8:a1:ac:ef:4d:20:c4:c3:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 10 03:16:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd05d5ad8130c32e65daa63d625d704fba74ea24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:01:d2:c7:5e:04:ae:d6:fa:2e:f9:39:70:
c4:04:2d:2e:f5:39:9c:45:59:f4:1f:52:15:68:6c:
be:5f:4f:dd:c2:13:02:ee:f5:bf:9b:a4:26:05:a4:
83:3d:a0:a4:cd:80:2b:9d:c5:ec:20:44:f8:2b:18:
8e:0f:0a:64:ec:2d:08:27:55:a6:92:70:48:1e:b4:
26:7e:89:18:a7:ad:42:70:01:80:50:22:fd:31:c5:
df:4b:46:70:0d:26:bd:2d:fe:38:17:07:0a:b9:9d:
db:40:23:14:2d:b6:30:14:c2:9b:16:c3:3e:76:aa:
84:47:5f:5f:eb:96:3b:d4:ec:3e:e0:53:33:f1:4b:
07:04:76:a3:45:39:c6:83:3f:e7:04:84:26:2f:d1:
9f:a8:5c:c8:c5:be:f9:7c:92:91:60:67:a5:00:2c:
92:d0:79:aa:bf:e9:b1:ba:6f:b5:2e:e6:f2:44:bf:
58:b0:0a:37:17:d4:b7:3a:e2:ee:e8:db:13:2c:11:
02:03:ad:52:6b:a6:86:eb:5d:d0:70:02:69:2e:00:
b6:a0:aa:2e:1b:38:d3:c6:90:10:f8:68:79:c0:12:
cc:b7:8e:38:71:fa:cd:42:7a:53:9a:c1:8a:bc:38:
13:6d:8b:07:58:34:01:32:4a:0e:7e:a9:81:e5:c4:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:D5:AD:81:30:C3:2E:65:DA:A6:3D:62:5D:70:4F:BA:74:EA:24
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/zQXVrYEwwy5l2qY9Yl1wT7p06iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:af:47:7a:cc:96:18:ec:62:e4:f0:0e:b5:f2:36:30:13:42:
9b:84:31:a6:2f:e4:5b:d0:35:0c:81:23:4f:0c:2d:54:3f:57:
4d:02:b5:c4:7d:07:28:07:df:a0:94:e0:17:02:57:fe:92:75:
cc:a1:7d:b2:58:55:8b:1a:2c:d4:a9:f2:97:60:8d:8e:57:8a:
72:d9:33:e0:90:19:39:7d:0f:b2:69:77:2c:58:4d:1c:7f:bf:
cb:14:eb:31:a7:9c:a3:99:66:ce:c9:f7:d2:71:63:57:f7:cb:
97:59:6e:ee:b5:77:14:8f:f5:ea:be:39:3a:ec:06:5e:01:16:
87:bf:9b:7c:8e:51:30:26:d4:06:c3:da:0c:b8:8e:98:62:62:
c5:df:3f:39:71:ab:32:b9:c2:d3:43:9e:51:a5:08:27:df:0f:
19:5b:d7:f0:4c:7b:4c:08:09:e0:f3:9d:3c:a4:63:b4:50:0d:
5f:1c:c4:23:fe:e5:9d:44:21:de:3d:7f:7f:b7:c6:03:91:d9:
62:5d:62:c8:9c:37:24:5b:04:c8:b8:f7:34:c1:88:e5:3c:94:
b8:41:ac:02:69:03:17:eb:55:cb:96:34:9c:4c:7b:e9:8a:c6:
db:96:4a:d1:f1:69:66:23:13:db:9c:3b:bb:d5:c7:3d:7f:d3:
a4:c3:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:47 2026 by rpki-client