Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0VoVKdv0YilzQvn24_sCZeyVKr8.roa
File: 0VoVKdv0YilzQvn24_sCZeyVKr8.roa (raw, json)
Hash identifier: NUUJFCbfs9KNWhRCXMVBeOwBxJfOsZ72+OQ2JmV7RBE=
Subject key identifier: D1:5A:15:29:DB:F4:62:29:73:42:F9:F6:E3:FB:02:65:EC:95:2A:BF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A17C8138DBB7C64D758FB6566D45622063
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0VoVKdv0YilzQvn24_sCZeyVKr8.roa
Signing time: Tue 27 Oct 2026 08:36:45 +0000
ROA not before: Tue 27 Oct 2026 08:36:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.199.151.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:81:38:db:b7:c6:4d:75:8f:b6:56:6d:45:62:20:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 27 08:36:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d15a1529dbf462297342f9f6e3fb0265ec952abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:68:50:a4:0d:23:d6:c0:af:83:ef:75:68:
e4:8a:61:10:bf:a5:82:91:54:ec:66:ce:84:7f:27:
4e:12:0b:6c:05:62:7e:12:cf:e8:5f:5f:0a:fd:73:
ee:c5:eb:b5:ad:1f:1f:d1:69:76:30:6c:54:76:65:
5a:7c:b0:02:8f:6f:8c:b1:4a:38:2c:c5:ab:3f:a4:
ca:f6:8c:7e:92:8c:e9:12:23:99:c1:03:09:9c:8c:
97:d0:d1:ca:05:00:a1:bb:46:3a:f7:8b:6f:0c:45:
45:a3:31:8d:b7:b7:91:d3:1b:23:9c:5e:c6:ea:c2:
44:16:b2:79:e7:ef:6b:30:b0:83:0e:f9:2d:a2:95:
eb:6f:84:5a:a3:f0:10:06:7e:e7:5b:6d:46:85:c2:
f7:0f:16:7d:e5:44:6f:8d:52:61:cb:93:4b:c5:b8:
2d:ab:23:dd:99:8e:e0:82:7b:5d:4f:ff:2b:97:d1:
8d:fa:4c:81:97:ea:98:17:e4:6b:22:53:c3:70:15:
fd:e8:5c:02:fa:04:e1:92:c4:42:06:d2:08:5c:de:
65:88:28:14:5f:c3:52:ce:1a:3c:75:b0:38:e5:4f:
f4:78:05:f9:e2:f1:36:f6:95:d6:ef:bd:86:cd:23:
f3:55:73:a4:99:cb:68:90:53:7d:8f:cd:ad:d1:5d:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:15:29:DB:F4:62:29:73:42:F9:F6:E3:FB:02:65:EC:95:2A:BF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0VoVKdv0YilzQvn24_sCZeyVKr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.151.0/24
185.226.180.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a9:69:29:d3:ee:73:32:21:e4:c0:11:0d:c8:94:9c:d6:fe:
a4:ca:76:b9:0f:64:9c:ae:aa:67:bc:6a:d3:db:5b:05:63:5d:
d8:96:bb:dc:10:be:63:ed:0d:b6:5e:6a:bb:13:22:1d:af:5a:
64:fa:1f:22:66:f9:44:b4:48:eb:90:f4:52:0c:81:7b:32:90:
2a:6b:a5:ab:81:88:67:c4:17:48:49:11:e0:f7:6e:59:de:7e:
cd:77:88:25:7d:b9:96:4e:ba:85:1b:17:a1:b6:9e:26:20:ac:
75:b7:cf:90:d0:af:ac:be:99:f8:c0:aa:d9:a2:56:96:1d:3b:
8d:51:00:70:86:32:82:b9:8d:87:31:5f:89:45:67:67:41:71:
5a:00:26:f8:a4:e0:3d:67:8e:2d:24:17:cd:59:03:26:9d:9a:
d3:81:0f:ca:02:2f:f3:17:e3:f5:47:75:2a:f0:5d:89:a2:a7:
9a:fe:99:94:5c:5d:bd:cc:a9:db:f0:31:23:88:fc:4a:16:49:
9e:9c:86:ee:2e:fd:e2:ad:16:3d:af:5e:87:05:b4:1b:ff:d5:
4a:a3:d2:1a:61:17:50:3a:3c:42:20:46:d9:99:64:e7:a5:7a:
59:78:b3:b3:90:70:95:82:4e:ff:b6:77:ee:23:d2:f3:91:9f:
a1:cc:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:52:37 2026 by rpki-client