Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa
File: lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa (raw, json)
Hash identifier: mnJpBrQabQ5UZ897yJplacc4MCQhCl2/8KWX6EqeD4k=
Subject key identifier: 95:7E:6C:97:E0:6C:F5:83:CF:7A:54:90:07:77:20:C0:AF:4B:B2:5C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019C68A692BF21769E03D2E70EE9EE167F01
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa
Signing time: Mon 16 Feb 2026 22:51:12 +0000
ROA not before: Mon 16 Feb 2026 22:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/23 maxlen: 23
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:a6:92:bf:21:76:9e:03:d2:e7:0e:e9:ee:16:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 16 22:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=957e6c97e06cf583cf7a5490077720c0af4bb25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:ae:0b:a2:38:03:e8:78:35:58:cb:5d:dc:
33:47:db:85:fd:33:17:fd:75:db:66:ee:a8:e6:33:
07:f3:0a:fc:b4:15:10:4d:35:bb:88:c4:9a:2d:f3:
2e:e1:8f:ec:e2:98:60:0f:26:f2:1a:71:8b:9e:e2:
8b:40:f7:44:31:00:16:54:db:31:60:85:aa:9f:42:
55:69:10:db:d2:55:bf:6a:45:e9:32:b4:2c:de:fc:
36:85:87:a2:fb:7b:1f:b4:ea:df:69:a6:8a:a7:90:
16:c4:c1:c4:38:1d:43:bd:71:3c:8d:a8:85:7f:78:
28:15:bd:46:fe:a6:01:ce:b0:4f:ef:d8:fd:2a:98:
3e:79:17:95:ad:ba:bc:e7:18:0d:cd:cf:6d:09:be:
89:db:df:e7:92:0a:2f:4d:3c:5f:f3:21:88:84:c1:
07:a2:31:2f:da:4f:01:13:41:cd:5a:56:ae:dd:19:
59:19:e8:32:f7:53:c3:fc:f9:33:c1:ef:41:30:79:
ea:0f:f0:00:57:c3:fb:3e:d8:1b:56:23:12:f8:c9:
0c:35:0b:76:b3:02:b4:dc:31:30:ac:37:dc:9b:e1:
1c:ba:3f:ae:d7:62:60:34:21:48:34:30:5d:63:72:
a5:38:7c:45:b8:a4:ce:87:f9:45:a7:2e:9d:6e:b0:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:6C:97:E0:6C:F5:83:CF:7A:54:90:07:77:20:C0:AF:4B:B2:5C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.245.0/24
176.125.250.0/23
185.199.148.0/23
185.199.151.0/24
185.199.213.0-185.199.215.255
185.221.24.0-185.221.26.255
185.225.168.0-185.225.170.255
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:96:54:dd:b9:8a:b8:d8:93:36:7a:f3:16:a3:31:e2:4b:69:
48:66:98:4e:94:ac:d6:65:fe:e9:74:bd:6c:6d:10:36:69:55:
ed:19:d8:8c:63:8c:3a:bb:39:f3:c8:86:a9:72:36:b2:65:ad:
70:c5:9d:26:0d:8e:3d:63:02:20:c4:21:1c:85:0a:80:dc:99:
ad:dc:4c:d1:c2:d6:79:71:b4:93:7c:fe:57:09:25:b8:d7:05:
04:e4:4a:38:cc:80:41:15:14:35:de:70:6a:e6:5d:8b:7f:7b:
47:20:e2:66:ef:ea:50:2c:62:13:b0:21:db:c6:1c:b2:3b:c4:
2b:4c:07:6a:42:07:3f:ac:4c:c6:01:90:25:10:a9:33:9e:c4:
0a:06:28:ea:9d:02:c6:98:20:f1:96:24:9a:d7:66:c7:8e:55:
4a:5c:29:71:22:d4:ae:cd:09:a1:c9:de:32:67:af:b4:04:c9:
0a:62:8b:23:31:d1:f9:a4:58:f8:43:73:0c:21:22:8b:f1:e6:
f0:c9:34:9d:e2:a1:3f:39:6e:45:4b:e5:99:25:82:b3:e5:10:
60:4f:70:28:c8:ee:d2:1a:2b:16:e0:19:e8:ef:be:11:6b:99:
38:75:0d:84:80:84:d2:af:61:db:fd:94:46:98:4a:24:b9:89:
23:17:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 23:31:41 2026 by rpki-client