Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/_z9pyycrhZshv0I1f5oyGq23-0Q.roa
File: _z9pyycrhZshv0I1f5oyGq23-0Q.roa (raw, json)
Hash identifier: 2wz3wcXIoRnyelfu+ni0ylKCy5GgJ+dezMzIh5BJl0c=
Subject key identifier: FF:3F:69:CB:27:2B:85:9B:21:BF:42:35:7F:9A:32:1A:AD:B7:FB:44
Certificate issuer: /CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
Certificate serial: 019F47EF76652D957CF45FEA9193F3BBBBF3
Authority key identifier: 00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/_z9pyycrhZshv0I1f5oyGq23-0Q.roa
Signing time: Thu 09 Jul 2026 17:31:43 +0000
ROA not before: Thu 09 Jul 2026 17:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44166
IP address blocks: 79.141.80.0/20 maxlen: 20
79.141.92.0/24 maxlen: 24
79.141.94.0/24 maxlen: 24
2a05:dac0::/32 maxlen: 32
2a05:dac0:1::/48 maxlen: 48
2a05:dac0:2::/48 maxlen: 48
2a05:dac0:3::/48 maxlen: 48
2a05:dac1::/32 maxlen: 32
2a05:dac2::/32 maxlen: 32
2a05:dac3::/32 maxlen: 32
2a05:dac4::/32 maxlen: 32
2a05:dac5::/32 maxlen: 32
2a05:dac6::/32 maxlen: 32
2a05:dac7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:ef:76:65:2d:95:7c:f4:5f:ea:91:93:f3:bb:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
Validity
Not Before: Jul 9 17:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff3f69cb272b859b21bf42357f9a321aadb7fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:64:96:16:78:4a:d8:a5:2f:0b:3d:56:c0:
2f:9e:d9:88:83:78:ae:92:2f:ca:30:0f:f6:09:25:
aa:04:3b:58:ee:79:e6:98:cc:26:8e:38:02:6f:22:
5a:5b:fc:c4:34:20:97:02:01:22:c4:e6:bf:19:bf:
2f:06:1a:e5:74:d1:28:a8:02:81:f2:3c:a7:cf:de:
73:e8:76:c1:83:5c:4c:a4:18:17:16:fc:12:65:d9:
98:fd:8f:ca:61:14:9d:df:9a:6a:49:a3:48:dc:b5:
2f:29:71:2f:47:36:29:b5:3d:ce:ba:46:30:0b:19:
8f:8a:d6:ff:f8:3d:5d:e5:33:13:37:54:d2:14:63:
78:44:81:fb:36:4f:97:58:98:3a:16:8b:f0:22:f2:
d0:05:9d:d6:f2:c6:8f:01:2c:fa:e0:50:cc:db:a7:
e2:3a:e7:cf:12:da:47:ae:76:09:a7:2e:54:08:f6:
be:79:34:d7:8b:83:98:43:34:25:d4:6d:9a:6e:e5:
d6:20:a6:25:ef:1d:06:31:4a:86:e3:03:89:74:f7:
e1:36:d6:ad:7e:03:ad:94:4b:76:9c:00:43:b1:0b:
a5:f5:02:57:2e:87:0b:be:fc:3c:55:cb:2f:60:2d:
3d:14:20:00:d1:c0:c4:79:85:ce:36:d3:ec:80:3c:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:69:CB:27:2B:85:9B:21:BF:42:35:7F:9A:32:1A:AD:B7:FB:44
X509v3 Authority Key Identifier:
keyid:00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/_z9pyycrhZshv0I1f5oyGq23-0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.80.0/20
IPv6:
2a05:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:23:c6:25:a9:91:9d:49:42:79:a9:14:c8:b8:11:ba:a4:05:
fb:61:5a:b5:97:ba:79:00:ab:b6:3d:65:b7:93:65:55:2b:a2:
63:3e:42:d9:01:ce:f8:db:21:eb:3b:16:4d:6d:f9:e9:bd:23:
33:69:d6:dd:77:0e:38:c3:df:d5:e4:33:d1:b6:9a:43:80:b4:
b0:05:fb:fa:ef:ce:ac:45:e7:8a:28:79:5e:5b:87:75:ff:ff:
05:2f:60:b8:8f:b6:bd:37:4f:4e:44:db:06:00:c5:25:b7:eb:
4f:13:ee:23:b8:fb:cc:68:a7:0c:58:ba:14:08:4e:06:71:58:
31:23:1b:b6:79:04:c6:27:86:4f:90:e2:93:88:da:3d:b9:0c:
48:63:6f:a0:16:6f:f4:16:52:9c:d4:01:83:15:b1:27:6d:f5:
68:bf:43:4f:af:71:a6:11:b1:80:10:2a:cf:5b:d4:2f:16:6a:
02:8a:50:31:33:dd:11:d8:a9:cc:9d:34:46:59:0b:a4:91:79:
93:23:fa:26:a4:88:41:26:d0:fb:a5:77:bc:e1:9e:54:aa:33:
3b:94:23:05:0f:49:7a:d0:e9:7a:8f:81:f4:98:00:ba:fe:c2:
b6:cf:42:09:ec:2b:06:51:28:a5:79:e0:c1:45:c3:e7:1f:60:
bf:d1:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:25 2026 by rpki-client