Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/l3kP8XKLnkc7kxARwwBVsIubeYo.roa
File: l3kP8XKLnkc7kxARwwBVsIubeYo.roa (raw, json)
Hash identifier: ODIpUeXui7cr21j59575AUDpip/iPtzw/YNI1x8c83k=
Subject key identifier: 97:79:0F:F1:72:8B:9E:47:3B:93:10:11:C3:00:55:B0:8B:9B:79:8A
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A011075296BD34ED57A76DC3C23133D61F
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/l3kP8XKLnkc7kxARwwBVsIubeYo.roa
Signing time: Mon 17 Aug 2026 18:41:27 +0000
ROA not before: Mon 17 Aug 2026 18:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.212.0/23 maxlen: 23
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.169.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:07:52:96:bd:34:ed:57:a7:6d:c3:c2:31:33:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 17 18:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97790ff1728b9e473b931011c30055b08b9b798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:15:9f:8b:8d:ee:8d:42:18:1e:d3:4c:e9:
3e:dc:82:52:0d:a6:26:2a:26:6c:d4:65:76:83:78:
86:01:35:ef:9a:2b:b9:e0:b3:be:69:b1:c7:5d:f6:
8a:f4:b6:58:6b:de:2a:7d:91:01:29:d7:f4:ff:f8:
70:86:86:b9:67:e1:d5:58:e0:5b:d9:b8:04:d5:43:
3a:98:c3:62:21:98:a6:02:47:f8:87:8d:64:8d:79:
cf:3a:d1:67:6b:9c:22:43:ad:5c:70:3e:97:fe:e8:
68:83:53:b6:e7:73:9a:9f:1e:82:c1:d8:5d:c7:43:
98:8a:0e:e3:68:9c:fe:2a:77:b5:05:40:2f:78:52:
9b:65:38:b5:05:cb:83:b7:c3:d4:fb:61:a2:6c:02:
4e:d0:23:c8:b3:a9:ea:50:16:08:a2:5f:f9:cf:09:
84:a1:fe:8d:18:7a:3c:99:ed:14:1b:35:4e:83:3a:
04:87:e7:2a:ae:23:ab:ac:8b:93:76:a2:c4:1a:3f:
fc:43:12:9d:d4:33:b9:c3:2a:02:19:86:97:91:fd:
be:9d:67:2a:3d:ca:27:1d:73:d0:5c:b7:99:71:6c:
04:b7:88:7c:a6:8d:63:7a:90:82:f0:e9:04:7b:5b:
fc:96:44:02:1d:66:0b:04:7a:a3:91:9d:2e:90:5e:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:0F:F1:72:8B:9E:47:3B:93:10:11:C3:00:55:B0:8B:9B:79:8A
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/l3kP8XKLnkc7kxARwwBVsIubeYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.209.0/24
79.98.245.0/24
176.125.250.0/24
185.199.151.0/24
185.199.212.0/22
185.221.25.0-185.221.27.255
185.225.168.0-185.225.170.255
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:27:23:97:8e:f2:90:29:53:97:39:6b:ff:c1:7e:39:b2:b1:
8c:96:87:f5:cf:98:b9:18:b2:2c:6e:b1:ba:3f:10:4b:b2:d9:
37:00:ab:aa:2f:d4:13:4a:03:72:90:9e:18:76:f4:28:99:a1:
cf:ff:fa:84:db:4a:93:ed:c6:68:a6:f2:f3:67:08:06:d9:ab:
8b:d3:31:3d:5c:d4:2e:a1:8a:3f:9b:de:5d:da:5c:c9:23:51:
9a:77:09:5a:d2:13:43:f2:5a:c8:83:ac:32:1d:d9:55:0d:79:
6d:95:63:eb:43:bf:84:98:f4:9e:0e:c8:4c:0b:01:c3:77:dd:
76:2e:2b:b7:9d:38:84:b6:fb:19:51:69:b2:10:b0:f7:ef:bf:
a1:76:b3:c5:07:52:fa:8a:c2:5d:78:9a:bf:8f:cc:2e:69:d2:
49:42:06:35:ca:5a:11:be:cd:f7:ce:67:0c:f0:cc:69:8c:3d:
71:9e:75:0d:96:6a:5c:06:26:68:a8:91:fc:c3:ea:53:bc:ae:
64:7d:03:9a:34:5c:14:a3:d0:79:8f:57:d0:02:9d:92:4b:55:
f7:7b:43:9c:ba:57:2a:de:a3:6d:d6:8b:13:2c:1e:f2:5c:5f:
e3:72:72:c0:4b:d7:89:88:3c:33:3c:13:16:3c:49:63:21:ad:
96:e6:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 08:46:18 2026 by rpki-client