Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jUGUoMYUN3ZYoWwyz7MweD_DD8g.roa
File: jUGUoMYUN3ZYoWwyz7MweD_DD8g.roa (raw, json)
Hash identifier: TwO/js2mCJinc13dOSDj9ill0w/sSJlMwVo+p9a4L5g=
Subject key identifier: 8D:41:94:A0:C6:14:37:76:58:A1:6C:32:CF:B3:30:78:3F:C3:0F:C8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FFA4DE64F9697A26067727795FC3A1E58
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jUGUoMYUN3ZYoWwyz7MweD_DD8g.roa
Signing time: Thu 13 Aug 2026 08:47:17 +0000
ROA not before: Thu 13 Aug 2026 08:47:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142473
IP address blocks: 176.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:4d:e6:4f:96:97:a2:60:67:72:77:95:fc:3a:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 13 08:47:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d4194a0c614377658a16c32cfb330783fc30fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:80:aa:10:e1:2a:17:0b:9c:a7:a9:3d:94:
35:37:ea:40:af:34:b6:92:4e:63:87:df:36:9a:4e:
4f:13:28:5c:d3:a6:9e:34:ba:f1:71:ba:75:5f:55:
23:35:da:85:04:79:4b:a5:34:49:a7:e2:c5:04:2b:
b0:39:02:d2:ed:c0:ff:ba:c7:04:eb:0a:28:4c:4c:
a0:cc:fd:e6:d7:c8:1c:19:83:de:0d:27:0f:84:47:
02:b3:05:68:c0:ab:dc:49:77:94:d5:ed:ed:15:6d:
8c:76:c1:02:21:c6:9c:7f:75:d6:7d:83:d5:24:7c:
69:77:4b:ba:f4:18:6c:4c:46:ff:0d:d9:78:e2:9b:
95:cd:06:fc:f8:48:f9:55:6d:86:a1:78:48:17:98:
c0:be:c3:16:02:bd:a7:5f:5b:aa:73:2d:f2:66:69:
18:6d:7a:b2:d6:15:23:45:4a:68:7a:81:0e:ae:28:
3a:dc:1c:67:71:c6:da:33:42:41:82:04:ea:2d:69:
d7:9f:ea:09:d9:eb:59:d6:8e:f0:d6:17:c8:d0:6f:
4d:f3:f3:2c:c5:1f:c8:cc:7a:1f:a0:da:98:c2:3c:
12:f3:64:c9:1c:47:5f:f4:e2:67:31:cb:2b:61:db:
45:fc:85:37:d0:86:55:d8:26:25:34:eb:d6:5b:d1:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:94:A0:C6:14:37:76:58:A1:6C:32:CF:B3:30:78:3F:C3:0F:C8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jUGUoMYUN3ZYoWwyz7MweD_DD8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
57:37:e8:fd:94:87:15:f6:67:27:14:fd:43:97:02:cf:84:2a:
da:50:09:43:f7:c7:db:4b:bf:90:d4:aa:89:e2:ee:a1:c9:00:
10:5f:d4:f3:79:67:be:e0:32:a4:25:24:ff:c1:8d:22:df:44:
20:59:19:c0:03:90:4d:79:20:b2:ad:7c:ee:20:bb:ae:64:d2:
8e:b2:6d:11:13:ab:f3:d2:73:c6:b9:0d:97:5d:12:1f:c5:02:
4a:8b:24:08:ef:6a:b7:96:97:a8:60:36:43:4d:f5:1b:85:b4:
9b:df:e2:39:21:53:ea:79:de:21:46:76:ec:4b:8c:f4:5f:41:
b3:3c:0d:1d:8b:1c:36:7f:c0:ea:8d:49:db:27:22:49:df:cd:
17:bf:19:ed:e3:1c:72:88:62:ea:02:ab:26:7c:2f:b6:10:88:
fc:69:02:e9:b3:80:cf:52:9a:81:79:0e:03:55:7d:6c:5c:d1:
1d:d8:56:b6:af:b6:bd:d5:26:02:38:4b:d5:34:b0:dd:2b:89:
40:76:1f:b3:ee:b2:67:46:d4:a0:2d:2d:ee:d6:e7:b3:13:2f:
73:f4:b6:47:68:95:e6:68:09:df:1e:c2:8d:43:33:79:ec:b1:
41:9a:01:9f:58:a8:d0:f7:7d:71:f0:ad:5f:e6:3d:56:76:07:
de:e0:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 08:46:19 2026 by rpki-client