Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Hq7KSfGbAabjKZnXngUy09CKrlo.roa
File: Hq7KSfGbAabjKZnXngUy09CKrlo.roa (raw, json)
Hash identifier: iLEIXofURIxZfA42GaocsCdFXbCIkXKJ+whds6C0PiU=
Subject key identifier: 1E:AE:CA:49:F1:9B:01:A6:E3:29:99:D7:9E:05:32:D3:D0:8A:AE:5A
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A14AF1ACD102E823A5A71AA542C8E71841
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Hq7KSfGbAabjKZnXngUy09CKrlo.roa
Signing time: Sat 17 Oct 2026 17:38:34 +0000
ROA not before: Sat 17 Oct 2026 17:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:f1:ac:d1:02:e8:23:a5:a7:1a:a5:42:c8:e7:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 17 17:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eaeca49f19b01a6e32999d79e0532d3d08aae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:fe:fe:90:8c:79:33:6e:ca:64:8d:09:93:
a5:95:bf:a3:8a:a0:73:2d:b0:d9:57:41:3c:20:31:
2d:b9:1b:d8:8a:2e:61:2e:f8:92:0a:fa:73:29:fc:
10:81:80:9d:bd:14:3e:5c:0f:74:fc:ee:83:09:f0:
8a:ce:d7:20:be:09:d4:0c:40:14:25:cb:51:13:9b:
80:25:3e:cd:d4:6d:65:be:31:22:da:ee:73:09:cf:
81:49:58:14:1c:a7:7b:d3:6f:28:4a:cf:5c:92:e5:
01:27:bd:97:74:2c:a0:be:a2:2f:f5:d1:f6:80:9f:
28:08:fa:8c:22:73:68:a9:e5:99:b5:ce:64:ce:f9:
33:f6:7f:fe:13:63:6b:58:4a:4a:d3:29:74:f8:94:
1b:9e:56:8a:b8:73:7a:05:8d:f3:f3:b3:3b:6c:5f:
5c:24:2a:b7:a6:c8:0e:12:2a:83:4c:f0:58:2f:b8:
64:ab:19:8f:9f:f0:c4:e3:b3:6c:44:fa:46:11:7e:
52:93:00:32:07:c8:f7:31:60:ae:ef:dc:ea:b0:df:
ca:ba:ee:f3:fd:e3:bc:8a:9a:17:86:21:b7:b8:0a:
5f:f6:0b:44:37:59:ab:bb:a6:af:72:33:64:d0:07:
47:f1:ce:1b:6a:c5:be:52:a1:82:c1:4b:fa:53:d6:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:CA:49:F1:9B:01:A6:E3:29:99:D7:9E:05:32:D3:D0:8A:AE:5A
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Hq7KSfGbAabjKZnXngUy09CKrlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.168.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:28:5e:fe:94:68:0c:c8:5a:50:d2:16:dd:a1:3d:49:ab:84:
02:d9:ce:18:17:7f:18:fe:c9:6c:06:5a:46:4f:38:b1:5f:7a:
84:27:a2:c9:7a:ea:f1:1c:ca:43:ba:1d:bc:0e:60:11:5b:78:
ca:ec:43:64:7e:8b:2b:47:dc:5e:21:25:48:97:0b:1c:53:16:
69:84:8f:14:b6:5a:66:d0:e7:49:78:51:19:29:f6:91:4e:51:
7e:fc:f6:65:85:32:8d:9f:10:9a:b4:3c:63:bd:8b:70:f1:62:
20:6a:1d:47:32:5b:25:28:b5:ab:0d:78:81:92:f9:55:94:7c:
7a:19:9e:5e:5a:6a:96:92:5f:67:f3:23:e7:27:ce:d6:99:74:
2f:ba:bf:0d:c6:8c:6f:35:c5:c6:4c:a0:ee:59:8f:a1:04:6d:
9f:f0:c6:ba:e8:2b:5b:6a:61:7b:0c:96:e7:4e:39:eb:36:87:
3d:94:56:19:93:27:db:0c:e7:f2:9f:c7:f6:c7:b4:56:bc:b6:
ba:ee:62:fb:54:1f:08:e4:17:9a:a3:b9:84:ba:3d:8f:16:9d:
70:4d:7a:a0:1c:c5:c6:da:f3:8f:ce:42:26:c2:53:a7:c2:8b:
39:de:22:61:d0:04:35:30:3c:de:6e:06:8f:9c:f8:0e:8e:6d:
5c:59:2e:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFK8azRAugjpacapULI5xhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYxMDE3MTczODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWFlY2E0OWYxOWIwMWE2ZTMyOTk5ZDc5ZTA1MzJkM2QwOGFhZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE/+/pCMeTNuymSNCZOllb+jiqBz
LbDZV0E8IDEtuRvYii5hLviSCvpzKfwQgYCdvRQ+XA90/O6DCfCKztcgvgnUDEAU
JctRE5uAJT7N1G1lvjEi2u5zCc+BSVgUHKd7028oSs9ckuUBJ72XdCygvqIv9dH2
gJ8oCPqMInNoqeWZtc5kzvkz9n/+E2NrWEpK0yl0+JQbnlaKuHN6BY3z87M7bF9c
JCq3psgOEiqDTPBYL7hkqxmPn/DE47NsRPpGEX5SkwAyB8j3MWCu79zqsN/Kuu7z
/eO8ipoXhiG3uApf9gtEN1mru6avcjNk0AdH8c4basW+UqGCwUv6U9assQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6uyknxmwGm4ymZ154FMtPQiq5aMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvSHE3S1NmR2JBYWJqS1puWG5nVXkwOUNLcmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueGoMA0G
CSqGSIb3DQEBCwUAA4IBAQBvKF7+lGgMyFpQ0hbdoT1Jq4QC2c4YF38Y/slsBlpG
TzixX3qEJ6LJeurxHMpDuh28DmARW3jK7ENkfosrR9xeISVIlwscUxZphI8Utlpm
0OdJeFEZKfaRTlF+/PZlhTKNnxCatDxjvYtw8WIgah1HMlslKLWrDXiBkvlVlHx6
GZ5eWmqWkl9n8yPnJ87WmXQvur8NxoxvNcXGTKDuWY+hBG2f8Ma66CtbamF7DJbn
TjnrNoc9lFYZkyfbDOfyn8f2x7RWvLa67mL7VB8I5Beao7mEuj2PFp1wTXqgHMXG
2vOPzkImwlOnwos53iJh0AQ1MDzebgaPnPgOjm1cWS4Z
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:16 2026 by rpki-client