Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/J9YCSkM49BjnhiXXJKvmWQEJ4Ho.roa
File: J9YCSkM49BjnhiXXJKvmWQEJ4Ho.roa (raw, json)
Hash identifier: 4RZntlRk2dY9YToU9ls7G2Ny8ezvQ5iIruNNeLeodHo=
Subject key identifier: 27:D6:02:4A:43:38:F4:18:E7:86:25:D7:24:AB:E6:59:01:09:E0:7A
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A03EE6CBBE4D7AFE38FCC153EB96130C7E
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/J9YCSkM49BjnhiXXJKvmWQEJ4Ho.roa
Signing time: Wed 26 Aug 2026 16:28:27 +0000
ROA not before: Wed 26 Aug 2026 16:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.199.149.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:e6:cb:be:4d:7a:fe:38:fc:c1:53:eb:96:13:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 26 16:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27d6024a4338f418e78625d724abe6590109e07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:cc:f8:9a:86:b3:2d:7e:48:57:66:ac:a0:
64:51:bb:95:e2:36:e4:c5:1c:5c:10:55:05:b2:72:
53:e8:b2:c0:fb:6a:2c:fc:f1:4a:5b:5a:b4:3b:e7:
1c:66:62:32:f3:d8:72:c8:26:ac:ba:de:44:ac:c5:
ce:7e:08:3c:f1:ea:7d:22:11:8b:f7:df:b0:ac:b7:
d7:3f:df:e0:17:4c:e1:43:cb:4d:be:89:dd:43:fd:
fa:86:91:eb:40:41:a8:a6:e2:d7:e8:89:6d:a3:9a:
69:9c:1e:09:21:85:6b:4d:f0:bd:d6:45:d5:65:7b:
4f:8b:fe:61:0e:44:8a:5c:7c:b8:73:04:7d:df:f6:
84:0c:a0:b1:69:3d:d9:3f:c4:6b:ae:c8:db:38:81:
da:87:71:08:3d:9e:8c:3f:0b:1c:38:d2:97:00:96:
1c:dc:ec:6c:24:80:12:ae:0a:b0:e8:6c:7a:98:28:
6d:4b:1a:15:0d:b3:43:a0:b5:96:3b:b1:e7:38:60:
1b:54:5d:bf:a7:fb:ff:05:7a:ff:b8:61:a6:3d:45:
69:d5:d4:59:61:05:d9:aa:7e:12:7d:06:e2:d6:ff:
f5:57:6c:f3:5c:65:d4:21:aa:19:c3:47:a7:86:26:
d1:65:98:3a:6f:4c:6b:46:52:c5:5d:37:55:78:32:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:02:4A:43:38:F4:18:E7:86:25:D7:24:AB:E6:59:01:09:E0:7A
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/J9YCSkM49BjnhiXXJKvmWQEJ4Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.149.0/24
185.221.25.0/24
185.225.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:97:12:60:e8:91:07:e2:f1:6f:58:66:e9:4f:1c:6d:55:4e:
80:88:07:da:03:ee:a2:c4:aa:51:bb:a8:04:d9:87:17:f1:68:
1f:94:5a:3f:57:f4:f8:11:b6:fc:30:ab:a7:b3:25:35:c1:6f:
ed:dc:09:7e:36:9b:d5:f8:11:f1:c7:51:b8:a3:7e:8f:9f:ff:
e6:df:42:3e:b5:cd:69:e4:f4:c1:77:ff:85:19:22:98:91:f9:
41:00:2d:b4:8e:59:95:a4:16:66:97:47:9b:1c:7a:d5:91:77:
3f:c6:55:da:25:32:c6:1a:ae:a3:39:50:e2:2e:86:3a:e1:94:
93:c5:2b:26:b4:de:60:cf:fe:3c:58:03:57:db:95:b8:1e:aa:
fc:b1:4b:c5:3a:00:82:20:1d:cd:e3:5d:3d:56:89:58:d0:23:
c8:dc:0e:f4:5f:a9:d2:f6:35:28:2e:66:dd:b6:09:a3:b9:18:
96:1e:6f:37:d6:1b:4c:00:2c:a1:4d:1e:d1:cd:be:aa:b0:ea:
be:63:3f:13:fb:a4:f8:0a:b4:71:ed:65:db:bc:cb:3e:de:40:
af:7d:e6:26:74:df:d2:9b:dc:57:d4:c5:4f:ee:5e:d5:0b:bf:
79:a0:47:05:ec:e0:b8:73:4c:8b:b4:ef:d3:4f:fa:b8:b4:f5:
b8:c6:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:43:44 2026 by rpki-client