Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_P0C-SR8Kw9w9haP-aP3nTgQVNI.roa
File: _P0C-SR8Kw9w9haP-aP3nTgQVNI.roa (raw, json)
Hash identifier: 8MfPM40gokqxEviwGWTmZUjx1l7KKFS499HIMZ/P+Eg=
Subject key identifier: FC:FD:02:F9:24:7C:2B:0F:70:F6:16:8F:F9:A3:F7:9D:38:10:54:D2
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A075F6740A8F5300170501AFDCD59A7BAA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_P0C-SR8Kw9w9haP-aP3nTgQVNI.roa
Signing time: Sun 06 Sep 2026 09:04:40 +0000
ROA not before: Sun 06 Sep 2026 09:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.199.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:f6:74:0a:8f:53:00:17:05:01:af:dc:d5:9a:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 6 09:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcfd02f9247c2b0f70f6168ff9a3f79d381054d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:6a:1f:5b:f1:ac:f3:05:ee:50:90:8e:48:
33:14:b4:ae:82:46:be:12:d0:05:d3:40:ca:03:c1:
22:12:56:0c:33:b8:48:5e:ac:15:45:81:ed:4f:17:
38:81:73:a5:7d:f0:c8:97:c1:5e:ba:bc:e2:19:78:
96:71:7c:a7:4b:1c:ae:02:62:f7:7c:6d:82:93:f0:
64:c3:ef:44:e8:9a:2c:32:4f:df:49:11:2b:56:33:
53:45:97:15:6f:99:00:f6:8b:32:d2:83:cb:c0:8a:
28:cb:52:4f:88:0e:03:eb:86:cb:1c:ee:62:38:06:
0b:56:a6:12:64:57:54:7b:21:d0:07:14:c2:54:39:
cc:91:41:a0:00:d6:73:38:44:b3:37:e2:c0:34:bc:
97:e3:c3:2a:75:e9:02:21:34:9a:80:5c:05:0f:82:
fa:6b:42:b4:ab:20:82:6c:30:3f:4a:b9:b3:17:e7:
63:0e:f6:7b:fc:03:51:c3:ce:7c:9b:3e:1f:10:a8:
39:c3:56:fa:6f:aa:40:60:1d:ce:ce:54:d5:88:13:
10:5b:ca:bf:01:cc:c3:2f:ab:58:8f:6f:7b:84:53:
3d:be:3f:6b:2e:db:65:d5:4f:6c:bf:4d:92:44:15:
f2:33:36:7f:86:2d:5f:e6:47:b3:5b:0a:56:16:96:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:02:F9:24:7C:2B:0F:70:F6:16:8F:F9:A3:F7:9D:38:10:54:D2
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_P0C-SR8Kw9w9haP-aP3nTgQVNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.149.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e0:38:90:e4:d7:50:9a:05:9c:79:ec:82:c4:d5:ac:27:9d:
e1:7f:06:1b:87:d3:f1:37:a4:48:9c:a0:6a:99:d4:49:ca:dd:
9a:99:0c:2c:8b:5c:6e:66:0f:13:6b:42:f1:1e:8d:de:40:c0:
15:b6:38:7b:89:f4:38:14:31:94:99:c6:ec:29:7f:26:14:a9:
56:fa:dc:5d:00:67:d8:1f:a8:7e:74:5e:9e:40:3d:6f:95:40:
07:2e:97:cb:f8:18:f0:d1:17:da:d2:11:c1:9d:b3:b1:dc:38:
bf:67:9d:81:0c:c4:43:9c:5e:8f:10:09:dd:fc:25:ab:d7:5f:
ec:ce:96:cf:7f:a2:5a:5a:a2:36:e9:dc:34:0a:2c:72:d2:c6:
a9:f0:4c:37:97:21:7d:8b:4f:b8:08:8e:86:14:fc:4d:45:c5:
7b:8e:f1:92:5a:2b:72:2c:da:7d:a4:d5:14:51:66:62:bb:0b:
6e:03:43:05:31:f2:32:e5:fd:6e:b2:28:6c:fd:5d:52:f2:5a:
40:7e:4e:05:6c:a3:aa:a5:39:ac:62:e1:91:19:99:81:ce:1b:
45:4e:25:e9:e4:9b:33:21:78:7b:dd:1b:bc:51:fd:cc:7a:a8:
2a:93:95:8a:b2:82:5d:f2:75:8f:1b:9e:dc:79:f5:45:8d:bb:
a2:d9:90:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:29 2026 by rpki-client