Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8SpwZ5nIi9JaXydJ9CGUIDOR_a8.roa
File: 8SpwZ5nIi9JaXydJ9CGUIDOR_a8.roa (raw, json)
Hash identifier: ZxUvorKeRu64lj4GzI3EKp8DskidQc3zNxO4kc1Vt1k=
Subject key identifier: F1:2A:70:67:99:C8:8B:D2:5A:5F:27:49:F4:21:94:20:33:91:FD:AF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0D9DDE9CCE5D966E4998D77369AB4E1F0
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8SpwZ5nIi9JaXydJ9CGUIDOR_a8.roa
Signing time: Fri 25 Sep 2026 18:39:54 +0000
ROA not before: Fri 25 Sep 2026 18:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:dd:e9:cc:e5:d9:66:e4:99:8d:77:36:9a:b4:e1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 25 18:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f12a706799c88bd25a5f2749f42194203391fdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:aa:ff:74:a4:2a:cb:5c:06:c5:e7:a7:1c:
aa:9c:58:89:86:18:90:ed:74:a3:59:dd:6a:82:48:
4d:ec:30:51:ef:0f:17:6d:43:91:44:42:28:16:b1:
0c:92:7a:bd:38:a4:a9:35:aa:60:07:df:bf:01:f6:
35:67:0f:f1:d1:fb:6e:04:e4:75:7c:b2:76:15:d4:
1b:41:ab:cb:6d:a6:e2:79:81:fa:f6:e7:06:4a:f7:
bf:6c:a0:96:d3:5e:f2:17:a8:7c:57:ee:1b:66:26:
b2:25:af:82:18:36:46:37:a9:de:c5:83:91:c0:36:
a1:aa:28:14:59:0b:c8:51:7b:5f:03:df:fc:09:c8:
a6:53:8f:cb:d2:3c:74:95:fa:00:c4:f4:3a:03:9e:
1a:8b:06:d9:27:cf:4f:72:b8:81:d6:df:57:86:54:
cb:24:bf:a4:78:1e:c0:66:3e:ef:aa:b3:2e:24:53:
ce:25:c7:52:c5:7d:ad:fb:fd:92:cb:ee:19:fd:ff:
77:13:f5:a2:41:07:1a:c9:e6:09:b3:51:1c:65:fe:
fd:a9:93:c6:96:be:af:82:3c:72:55:88:4c:f9:b3:
24:6e:e7:58:b6:5b:50:18:de:28:11:f2:11:b7:70:
16:9b:c4:26:17:8e:1e:55:74:06:f4:73:5b:77:ba:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:70:67:99:C8:8B:D2:5A:5F:27:49:F4:21:94:20:33:91:FD:AF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8SpwZ5nIi9JaXydJ9CGUIDOR_a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.246.0/24
176.125.250.0/23
185.199.148.0/24
185.199.151.0/24
185.199.213.0-185.199.215.255
185.221.24.0/24
185.221.26.0/23
185.225.168.0-185.225.170.255
185.226.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:33:4e:a0:87:9c:b8:67:b9:fc:d5:bd:0d:cf:ce:53:00:aa:
c2:a3:b4:57:4a:22:d2:7b:64:76:b3:27:f7:d0:57:6f:dd:b6:
d5:fc:e7:b7:3d:3e:3f:45:03:0c:0c:81:c4:0c:44:21:e1:1e:
40:7d:79:df:58:39:fb:a9:11:a3:cc:ac:52:90:70:00:cb:0c:
eb:27:10:12:e7:f3:d8:3d:6b:43:81:0e:f5:c9:6d:e0:46:8f:
7f:0a:61:4e:e8:3f:77:8a:fc:1e:d0:fd:a0:05:b9:2c:6a:8f:
88:e9:22:b9:47:c6:66:cc:68:a3:14:e2:65:a3:e6:c5:ba:90:
4a:04:a8:ed:ae:80:09:4d:f2:ef:d9:64:ba:41:d3:ec:f4:07:
eb:f8:d5:2b:f8:8e:ff:a6:f7:82:af:f0:ed:9d:d7:b3:aa:a3:
e0:35:f4:fc:cc:82:31:98:45:c2:3f:6a:33:50:ab:c8:d7:36:
b3:3e:ab:c8:a2:28:24:7d:39:90:da:17:e2:f2:53:ef:41:5e:
02:1f:da:ab:b7:22:cf:85:68:0f:77:83:2f:7a:4e:fd:60:0a:
a3:bb:c1:03:9d:7e:95:c3:7d:ad:7c:82:f7:34:27:b1:a4:1f:
d8:73:97:d2:85:da:e8:5b:7a:32:d4:34:6d:d6:58:5b:10:fa:
24:0f:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:33:58 2026 by rpki-client