Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eNOyh-lgZ8k4Su-Bw5zL7NInVSE.roa
File: eNOyh-lgZ8k4Su-Bw5zL7NInVSE.roa (raw, json)
Hash identifier: /DzV6jPAVXMkA9K8CeiljFOrs28pNmDlQTHpI9cOuwM=
Subject key identifier: 78:D3:B2:87:E9:60:67:C9:38:4A:EF:81:C3:9C:CB:EC:D2:27:55:21
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A1C1CC25B835F71095BF593EEA1E968EFA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eNOyh-lgZ8k4Su-Bw5zL7NInVSE.roa
Signing time: Mon 09 Nov 2026 19:32:23 +0000
ROA not before: Mon 09 Nov 2026 19:32:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
185.226.183.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:cc:25:b8:35:f7:10:95:bf:59:3e:ea:1e:96:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 9 19:32:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78d3b287e96067c9384aef81c39ccbecd2275521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:41:b4:97:94:e4:c9:9e:48:10:49:0f:e9:
1f:c7:51:69:4d:5e:91:6c:9d:5c:50:0a:b1:65:60:
ea:d6:a6:be:1f:70:0e:bd:e5:a1:71:bc:44:b2:09:
87:c4:1b:fa:48:fe:7a:93:55:6a:87:88:41:7b:32:
0f:92:9a:5d:6f:e7:cb:1d:11:43:34:56:f1:a7:1e:
ca:ab:30:2f:d0:61:fe:5b:c6:3e:fc:0b:6f:d7:66:
6c:ff:08:3a:74:0e:ed:52:f7:49:d8:3c:46:22:db:
0b:dc:11:2a:64:f7:fb:79:c5:23:9a:0e:70:bf:bd:
ac:1f:0f:60:50:29:b6:0b:8c:fd:72:ea:90:a0:29:
ff:2c:5d:01:29:fe:27:d1:64:62:87:44:85:c5:e1:
6b:8e:ad:45:9b:49:f3:4d:3a:a5:95:1c:79:90:b8:
df:f9:fe:81:99:c4:8c:b9:17:06:48:1c:90:0c:eb:
32:5d:e1:7c:52:27:bb:d9:cf:23:31:ca:a2:56:3d:
9e:6c:a7:ea:2e:40:51:a2:ea:58:35:5a:cf:ba:4d:
85:10:a3:26:c5:61:34:2f:da:7f:1a:7d:99:76:9a:
2d:4e:8b:21:73:11:3f:9f:c0:1a:ff:4c:31:f4:30:
64:51:5c:95:cb:65:a4:da:0a:4b:b0:f8:62:04:e3:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:B2:87:E9:60:67:C9:38:4A:EF:81:C3:9C:CB:EC:D2:27:55:21
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eNOyh-lgZ8k4Su-Bw5zL7NInVSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.245.0-79.98.246.255
176.125.250.0/23
185.199.148.0/23
185.199.151.0/24
185.199.212.0/24
185.199.214.0/23
185.221.24.0-185.221.26.255
185.225.170.0/24
185.226.180.0/24
185.226.183.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fa:9a:3e:31:84:f4:58:34:0e:e0:ee:73:26:9e:59:d0:e6:
50:10:51:e5:09:bb:82:d8:51:0a:4c:af:13:b0:9b:dc:f7:06:
45:c8:a4:85:4e:f6:46:b5:5f:86:95:31:a1:ea:a8:90:32:79:
94:14:1b:f6:03:4a:d5:2f:95:13:45:9f:4e:df:36:17:d9:d9:
3e:77:80:5f:a6:7f:b1:09:b2:12:99:8c:4b:58:c7:c4:79:05:
f7:2d:12:c7:ff:74:c8:9d:ed:5c:0c:9c:f9:2e:78:52:f0:03:
b9:07:a9:d7:77:3c:24:86:55:cb:cf:3d:d5:3b:07:23:f7:82:
3d:03:ef:09:f4:fe:26:d5:37:55:8b:79:6d:b0:88:ee:b6:e5:
85:9d:a2:83:ad:0f:14:6b:39:40:f1:f7:df:b7:07:9d:49:ec:
0d:bb:4a:6b:94:27:7d:a8:52:57:e6:df:9a:9e:0a:97:0b:33:
69:46:19:f9:24:d9:29:8a:d1:57:11:f6:de:22:4b:2b:37:ef:
c7:65:cf:2a:cd:c7:74:a0:b7:47:2d:2a:22:b0:e3:d3:7f:4d:
18:1d:ab:9b:dc:c4:07:b0:6d:f0:91:38:b5:85:a3:a9:8a:37:
fb:e6:f4:50:c3:ab:a5:0e:1a:7a:58:2f:68:3b:8c:5a:2e:fd:
86:27:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:34:06 2026 by rpki-client