Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0ktKC-f4nDyI1i5cUIWyitRoyGM.roa
File: 0ktKC-f4nDyI1i5cUIWyitRoyGM.roa (raw, json)
Hash identifier: pRXCJVbRDGRpG1mXoJ+u7IH5zOUK6pPz7zPKHQVprAA=
Subject key identifier: D2:4B:4A:0B:E7:F8:9C:3C:88:D6:2E:5C:50:85:B2:8A:D4:68:C8:63
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A164CA61922A8592F4DDA2CA8C3868C747
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0ktKC-f4nDyI1i5cUIWyitRoyGM.roa
Signing time: Thu 22 Oct 2026 18:05:47 +0000
ROA not before: Thu 22 Oct 2026 18:05:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218729
IP address blocks: 185.221.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:ca:61:92:2a:85:92:f4:dd:a2:ca:8c:38:68:c7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 22 18:05:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d24b4a0be7f89c3c88d62e5c5085b28ad468c863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:27:fe:2f:7e:0a:38:55:28:9a:3a:ff:6b:
ba:96:53:88:ff:b8:73:0c:d0:59:01:32:13:5e:d1:
23:d3:78:c6:6f:82:e3:d9:59:fa:00:51:c2:67:ab:
a8:96:b1:9c:2e:2e:d0:a4:7d:ad:97:00:85:f0:48:
4e:53:80:26:95:b1:11:97:f5:f5:48:6e:0a:01:15:
8b:3e:2a:c7:27:64:ff:24:03:60:b6:2d:58:38:5c:
39:ec:5a:08:f4:1b:0d:1c:2d:36:82:98:3f:a9:66:
93:da:34:f1:2a:0f:cb:ea:a9:b1:b2:56:86:ff:5a:
52:06:2c:49:29:4d:ec:a2:15:70:ae:34:f6:bf:e5:
12:b2:e1:97:98:0a:19:5a:75:bb:cf:5f:87:81:aa:
66:0c:5e:e8:55:f4:dc:cf:44:1c:93:c7:49:59:b0:
2a:04:12:15:8c:56:9a:43:21:d5:c1:82:b5:2b:ab:
2e:61:7a:15:44:ed:b6:ab:6a:c0:ac:45:b9:d5:fe:
b9:e6:2c:12:df:30:83:28:8e:e9:38:7f:dd:e2:65:
7e:f9:97:5c:f3:5c:8b:c0:37:ea:ac:5b:22:5d:d3:
75:4b:85:ed:28:18:5c:05:05:9e:ef:38:fe:fb:1b:
1d:05:ad:1c:8a:60:37:a5:29:b1:04:d7:98:a8:8e:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4B:4A:0B:E7:F8:9C:3C:88:D6:2E:5C:50:85:B2:8A:D4:68:C8:63
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0ktKC-f4nDyI1i5cUIWyitRoyGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.27.0/24
Signature Algorithm: sha256WithRSAEncryption
03:38:f0:42:36:ca:fd:18:cf:4d:ff:8e:3f:c8:0d:26:c8:a1:
0e:f9:e3:4a:da:0c:5e:de:00:81:9d:c9:33:33:43:48:15:e3:
71:89:b5:e7:62:77:35:49:a3:59:d4:e1:25:da:15:d7:6c:77:
3d:07:d4:1d:21:cc:8c:65:9b:ed:85:c7:47:4d:01:6e:0e:79:
65:b1:32:0c:4e:20:ee:50:a5:3b:ad:e7:02:ab:0f:81:7e:f9:
3c:04:23:32:ef:b9:19:5e:9f:61:26:10:c7:a9:65:b1:e1:4d:
b4:2f:c6:2b:0c:9c:2c:3b:83:12:ab:f4:e7:be:94:97:78:43:
fd:27:94:d2:8c:fa:c1:19:62:e8:3d:ba:18:b2:4d:20:85:de:
e1:ae:82:89:47:5f:fd:8b:78:13:97:9f:d0:80:95:ce:07:8a:
b7:10:33:43:a0:98:98:0e:6f:84:6a:16:b0:5d:a8:6a:eb:46:
b8:40:a0:be:94:c2:0e:ad:77:b1:db:9f:82:30:62:c7:0b:07:
77:f2:34:1f:92:db:c5:04:13:23:ea:69:e9:59:2d:47:65:7f:
94:4e:e9:ce:86:50:73:62:f2:51:64:2c:50:0f:0c:3d:27:90:
60:14:9b:c2:86:b7:40:d5:be:4e:aa:99:fd:fe:5c:63:88:2c:
16:cc:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:49 2026 by rpki-client