Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lUvgRvKTr0drfF9HBU6MPHX53jg.roa
File: lUvgRvKTr0drfF9HBU6MPHX53jg.roa (raw, json)
Hash identifier: CyU0Ra8LeEhZZFXq5pcOQgbm3LZ1WdCEBpi5b5T49Kc=
Subject key identifier: 95:4B:E0:46:F2:93:AF:47:6B:7C:5F:47:05:4E:8C:3C:75:F9:DE:38
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A060F6E09A18A2BAD308D016ADBA2B5575
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lUvgRvKTr0drfF9HBU6MPHX53jg.roa
Signing time: Wed 02 Sep 2026 07:13:07 +0000
ROA not before: Wed 02 Sep 2026 07:13:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.212.0/23 maxlen: 23
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:f6:e0:9a:18:a2:ba:d3:08:d0:16:ad:ba:2b:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 2 07:13:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=954be046f293af476b7c5f47054e8c3c75f9de38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:03:02:49:81:45:19:ae:a3:38:ce:08:24:
e4:f0:94:94:58:de:a6:af:46:c3:79:c0:bd:ec:cf:
2f:c9:98:53:5f:3f:39:11:60:08:84:9d:9a:66:62:
5f:25:b8:8c:21:3a:25:a6:ba:d0:1e:49:fa:ab:12:
20:88:76:05:04:04:6c:37:fb:25:de:9e:5a:35:63:
57:f5:c1:6e:77:dc:03:34:29:11:aa:87:3a:a3:1c:
c5:b7:a0:da:01:ae:9f:c4:d2:63:4a:0e:a1:1d:78:
dd:0e:1b:32:56:42:de:f5:c2:28:66:5d:1e:0f:9e:
55:9d:55:7b:45:0e:2b:74:b8:57:5d:6e:5d:c7:32:
c0:d2:03:44:0b:4d:94:4e:22:08:48:eb:67:85:34:
3b:4c:03:b1:36:62:2c:c3:c1:b0:ce:05:fb:f9:97:
2f:a1:ed:eb:38:55:67:4d:65:e0:c8:4f:89:17:68:
24:d4:38:ea:d9:31:a0:e9:99:1f:78:92:a2:4d:3b:
c7:4c:a8:95:36:34:b9:51:4b:84:53:5c:8b:3f:82:
78:10:e0:8f:97:0d:3e:a0:61:ff:c9:11:e2:10:d2:
ab:a3:39:02:10:cf:e8:65:17:e8:6c:0e:32:2f:fc:
7c:64:25:84:fa:57:fd:70:a4:03:c1:41:73:aa:28:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:E0:46:F2:93:AF:47:6B:7C:5F:47:05:4E:8C:3C:75:F9:DE:38
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lUvgRvKTr0drfF9HBU6MPHX53jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.209.0/24
176.125.250.0/24
185.199.151.0/24
185.199.212.0/22
185.221.26.0/23
185.225.168.0-185.225.170.255
Signature Algorithm: sha256WithRSAEncryption
6a:3d:5d:9a:07:67:c5:66:3e:15:89:8e:e5:c3:20:9e:39:d3:
be:9e:57:b7:88:6a:b1:e2:b2:55:4f:dc:21:aa:96:93:b8:b8:
bf:20:7a:fd:0f:05:07:7b:ee:bb:c2:1b:24:2a:2e:cb:d7:44:
d4:a6:d1:c9:c5:7a:bd:16:50:0e:e4:5c:af:e5:d1:86:7b:95:
5f:66:26:21:42:d1:93:11:86:1b:06:63:49:fa:1f:3a:4c:38:
95:7b:5d:30:10:7d:6c:12:05:66:b4:8a:a3:9c:18:f7:62:3e:
4d:89:65:b6:73:5a:2f:1b:b6:ae:76:5b:b3:cc:e8:db:ba:7b:
7f:22:58:d1:46:08:95:ec:15:de:55:34:59:85:14:f2:b0:42:
eb:db:50:9c:2d:a5:70:7d:d1:9e:05:16:52:79:83:d7:0e:74:
53:65:ba:d0:de:84:c0:f6:81:51:b0:6c:63:fc:6e:b7:71:61:
4f:e8:90:42:5b:65:d8:a9:38:d9:ec:dc:ee:69:f5:f6:6c:e3:
79:e6:ec:de:16:4d:39:38:fc:b5:21:91:ca:4d:58:51:08:58:
5d:e8:d6:c6:8b:1c:a7:ae:8a:f0:a3:80:7e:b1:85:d6:48:40:
9d:91:0a:67:da:bc:6a:82:0c:ec:9b:31:2d:36:c4:8f:a9:5f:
f7:0e:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:14:16 2026 by rpki-client