Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/aHo5M1RoL7FKPSf5l-vOxtoiiyc.roa
File: aHo5M1RoL7FKPSf5l-vOxtoiiyc.roa (raw, json)
Hash identifier: nQApn0hLdraUfEmIQ3A7TNFwA+SqKqDap59Iwwu352M=
Subject key identifier: 68:7A:39:33:54:68:2F:B1:4A:3D:27:F9:97:EB:CE:C6:DA:22:8B:27
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0859BAE6C661656CE83A2D97C9EBAB66C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/aHo5M1RoL7FKPSf5l-vOxtoiiyc.roa
Signing time: Wed 09 Sep 2026 09:59:27 +0000
ROA not before: Wed 09 Sep 2026 09:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.221.25.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:9b:ae:6c:66:16:56:ce:83:a2:d9:7c:9e:ba:b6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 9 09:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=687a393354682fb14a3d27f997ebcec6da228b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:cd:a0:3e:72:06:a4:1e:c9:98:75:06:c0:
59:fe:43:be:70:5e:d7:5f:32:5b:cb:76:8b:4a:9f:
c9:d1:c4:95:9e:a4:d6:a7:3d:08:85:58:e4:5c:7e:
51:5c:e7:29:61:12:e5:c3:e2:83:7e:f3:c8:e8:87:
45:87:91:48:4f:3a:3e:91:27:df:81:8c:51:3f:f1:
57:15:88:42:c5:fe:67:bb:24:aa:10:77:a2:8d:16:
24:f0:dc:0f:19:77:30:23:2e:f7:28:81:81:90:d7:
78:58:c0:14:cc:b3:ab:49:24:c3:3b:26:c8:1b:86:
d6:25:85:b4:c7:d8:01:30:4e:84:0a:67:ed:73:05:
f5:49:24:f3:7e:85:f0:60:d9:fa:82:f4:28:66:87:
9a:3a:1c:82:6e:6e:6f:6a:69:c8:9f:0b:5d:a4:29:
15:79:70:90:95:0c:0f:90:e6:42:35:f8:9d:e3:93:
6b:ea:d2:fe:5f:47:66:a3:9d:2d:e7:16:91:14:fe:
6b:ed:dc:5d:f6:da:3f:97:35:45:c6:25:59:10:41:
f9:d3:e4:b1:aa:63:e2:f7:5d:b8:67:b1:2a:ca:7d:
aa:6a:bb:c2:9c:64:bb:fa:ad:0c:b7:97:45:e1:29:
d3:5f:6b:7b:96:d5:03:07:6b:16:6d:10:49:d9:54:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7A:39:33:54:68:2F:B1:4A:3D:27:F9:97:EB:CE:C6:DA:22:8B:27
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/aHo5M1RoL7FKPSf5l-vOxtoiiyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.25.0/24
185.225.169.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b6:1c:c0:e1:c8:30:2c:c4:49:91:d8:be:58:81:a8:76:2e:
6d:16:44:f4:c2:44:5e:e2:5b:a2:ac:b7:26:bc:79:87:f8:39:
5f:0e:7a:2c:01:d9:d8:25:90:42:18:5b:c0:84:f1:75:fb:ef:
f6:86:61:4c:52:dc:92:85:ec:cb:30:e0:69:51:2b:4a:a8:fd:
82:e3:68:c9:30:64:25:2f:67:c1:8b:f8:dc:1a:80:0b:2b:a5:
fd:33:fb:7d:2e:f1:15:bf:8b:96:88:01:df:3c:90:0f:ed:97:
0f:cf:f6:03:3c:9b:c3:bd:44:b0:c4:42:22:5d:d6:a5:92:55:
f5:94:53:14:0f:f2:e3:32:35:17:05:7b:b8:19:31:28:86:5a:
4d:2f:bf:e4:94:1a:5d:6c:6a:5d:42:64:b6:f2:a7:ef:41:77:
d3:23:d2:0f:a6:bf:6e:30:95:31:ce:b9:ef:8a:9e:40:3c:8f:
0a:c3:33:9b:0f:af:8f:8f:11:5e:27:b3:a8:78:4f:a8:2e:62:
76:27:54:ff:a1:29:95:61:02:a0:db:71:23:8d:3f:10:db:1b:
4e:6d:39:7d:8c:27:a0:f3:fd:7f:85:aa:fc:88:d7:57:5e:54:
1d:17:28:bf:d6:4d:ea:7b:0f:c1:4d:5a:c4:64:e1:3c:7d:d8:
f0:80:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:29 2026 by rpki-client