Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/EOLDzUvXAvh5SLRYdfXCIeQEs5Y.roa
File: EOLDzUvXAvh5SLRYdfXCIeQEs5Y.roa (raw, json)
Hash identifier: mjKUq3coahQ3IfA1rnEImIZLxnr8LwSHjRCQitgeHJA=
Subject key identifier: 10:E2:C3:CD:4B:D7:02:F8:79:48:B4:58:75:F5:C2:21:E4:04:B3:96
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A14033CEB077891305E0725DC57300D414
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/EOLDzUvXAvh5SLRYdfXCIeQEs5Y.roa
Signing time: Thu 15 Oct 2026 15:34:59 +0000
ROA not before: Thu 15 Oct 2026 15:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.199.151.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:33:ce:b0:77:89:13:05:e0:72:5d:c5:73:00:d4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 15 15:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10e2c3cd4bd702f87948b45875f5c221e404b396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:f7:68:ce:e4:50:e6:c8:d6:46:ea:bd:8b:
1e:a9:6b:95:c4:21:33:68:a3:ed:7a:a5:74:a3:37:
2e:e3:9b:06:44:09:3a:e4:00:a2:f3:7c:a8:6f:eb:
a7:5c:66:60:fa:cd:ba:e8:90:e0:6f:17:da:d1:57:
fb:f9:f4:50:8a:43:c3:84:3b:32:8a:ea:fa:6e:bd:
e6:58:59:5f:7f:fd:8e:c3:c5:64:20:03:aa:7f:07:
31:b5:d0:c2:fc:41:6d:58:51:fc:b0:6b:5a:c6:cd:
95:9c:4f:0d:13:d9:8a:10:f5:9e:26:09:3d:6f:4b:
a6:66:34:61:db:83:91:17:31:64:75:f7:9f:be:64:
9a:10:2b:42:22:60:1c:b9:26:9a:1c:40:fb:d1:38:
ca:cc:c7:ef:3c:0b:d6:21:e3:7d:19:25:22:8f:30:
ff:78:1c:17:44:4b:95:33:0a:c7:dd:f6:e0:a3:4f:
9a:31:08:bc:81:99:f3:50:6d:07:0f:e5:cc:a9:a1:
eb:96:86:8c:7b:cf:d2:03:6a:36:28:1a:10:04:f3:
47:85:e2:b3:28:c8:3d:90:ba:10:8e:02:69:05:6e:
51:5d:43:a4:a4:9a:d1:3f:9f:56:42:6a:7a:58:7f:
87:ab:b8:7e:1b:46:13:3e:9a:ec:12:94:60:e1:6f:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E2:C3:CD:4B:D7:02:F8:79:48:B4:58:75:F5:C2:21:E4:04:B3:96
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/EOLDzUvXAvh5SLRYdfXCIeQEs5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.151.0/24
185.225.170.0/24
185.226.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9d:ee:51:aa:42:b2:7e:d2:9d:42:2a:e4:9a:3f:25:7c:e3:
9a:9a:85:9c:4b:d0:dc:3b:44:a8:6d:b1:de:67:86:b2:9c:fc:
27:df:b2:fb:c5:8a:d4:71:35:53:c3:e0:00:9c:51:40:42:65:
f9:8d:84:51:cb:3f:b6:a9:32:de:5e:b3:24:69:08:99:83:30:
1a:c0:55:a1:23:9c:95:1d:47:5c:70:11:22:2b:94:b0:df:cd:
95:67:2d:f9:93:8a:2f:d4:e0:44:70:7f:34:d5:18:74:24:e8:
65:b8:41:ab:61:b8:44:64:3f:0d:ce:7a:c5:f7:8e:29:6f:47:
e7:67:65:86:80:f9:71:6b:ed:48:97:17:35:0e:73:e2:e2:c6:
57:0b:9b:7f:51:ff:02:c0:6f:65:71:64:08:9a:97:0a:96:3f:
86:4d:9d:46:2c:89:28:fc:22:f2:9a:a1:32:3f:e7:7b:42:ae:
96:85:61:c7:c3:84:3d:be:95:8c:fd:df:71:4c:35:bb:47:0c:
10:1e:b4:67:18:2d:5c:c2:0b:ac:85:8c:09:ed:53:5f:57:50:
58:3b:16:f2:eb:48:6b:a6:41:0a:1f:73:91:4b:88:d1:b7:48:
ab:da:c9:9f:4e:bb:71:2d:d1:b1:2f:19:49:b9:25:37:40:a0:
fe:b9:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:05 2026 by rpki-client