Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa
File: U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa (raw, json)
Hash identifier: p+ru4cW+r6HSaCaeHZW8AaCBmqzOtYP77c4DAVcoILk=
Subject key identifier: 53:45:98:09:32:DB:DC:12:FC:0D:CA:A9:F6:3A:15:B4:C8:15:C3:E8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A1591115839751062775A5F7FA13DEABE9
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa
Signing time: Tue 20 Oct 2026 11:27:34 +0000
ROA not before: Tue 20 Oct 2026 11:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402309
IP address blocks: 185.199.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:11:15:83:97:51:06:27:75:a5:f7:fa:13:de:ab:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 20 11:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5345980932dbdc12fc0dcaa9f63a15b4c815c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:9c:4b:5c:8f:a2:e6:4a:b8:c3:db:ff:15:
47:06:41:1c:01:42:3d:1a:72:97:03:01:4e:22:2a:
57:92:bc:46:4f:63:db:d3:fe:ac:50:77:36:93:4b:
bd:11:92:9d:81:bd:82:22:84:21:49:64:64:8b:4a:
04:85:72:25:d7:52:b9:55:02:28:e1:a5:f5:92:23:
c4:31:af:6e:19:17:05:db:e9:10:4a:71:66:0b:ba:
c6:18:11:6b:e7:48:e5:e8:9c:06:51:e0:29:cb:20:
22:09:ac:fd:45:12:5f:af:48:da:a5:ea:b2:dc:f6:
10:ca:3c:7e:c1:0a:a6:8e:a8:cf:62:34:7c:04:e0:
5f:e5:71:79:1c:1f:f9:8b:e9:1a:81:29:66:92:a5:
b4:9c:a6:7f:c3:9f:01:40:8b:b5:25:91:28:34:72:
9f:8a:ad:67:9d:75:c7:d4:07:8d:bf:f4:88:46:b3:
c1:09:61:52:d4:73:d3:1d:59:7f:28:cc:6c:f1:8f:
2c:e2:2d:0e:17:94:1a:c3:98:af:e7:cd:d5:9e:34:
3d:9e:09:ab:0f:00:f1:d8:9e:82:24:58:b0:3e:84:
7d:f1:2c:a1:3f:62:4b:9d:20:2d:bc:95:96:3b:d3:
6b:f1:ce:d9:3a:43:31:07:b0:23:9d:35:a6:4e:1f:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:98:09:32:DB:DC:12:FC:0D:CA:A9:F6:3A:15:B4:C8:15:C3:E8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ac:24:ee:5a:e0:19:19:6d:6f:18:33:01:cf:06:64:e6:9e:
1e:e5:8b:01:3b:0e:cb:33:ab:c2:35:50:f4:28:ee:88:e7:95:
f0:2a:b5:a3:ea:88:05:c6:6c:fb:f5:c6:c7:b8:fe:1f:cd:3a:
9b:f3:7b:ba:28:ba:26:b5:5e:d6:49:e6:49:f0:04:88:44:16:
69:60:db:e9:5a:a6:85:e3:fe:8b:7c:05:98:fa:31:e7:98:26:
13:fb:11:da:56:81:1e:bf:ec:cc:42:31:ba:4c:57:c4:af:81:
84:fd:49:dc:d8:6e:15:d0:cf:fb:1e:e6:59:b3:9d:5d:77:66:
39:df:7a:20:dd:27:7b:a9:99:99:f4:3b:94:8d:78:67:fc:8b:
44:92:ec:39:84:bf:34:d8:19:0f:5d:49:03:b5:85:28:40:4b:
44:5d:35:8b:2f:80:45:1c:4e:64:f8:f9:0f:0f:24:69:0b:ff:
1e:f9:49:a7:96:73:d3:5e:a5:84:39:5d:7c:95:5d:da:46:7c:
76:65:48:07:e1:33:55:2d:d7:0f:7b:d5:21:21:1d:d3:bd:c0:
8b:68:df:6f:58:36:ad:5c:69:98:94:00:e6:1b:c6:1d:bf:4a:
6b:bd:61:aa:03:d9:3c:8c:7a:fa:dd:cb:54:b9:e7:d1:69:f9:
11:9a:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:43 2026 by rpki-client