Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa
File: lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa (raw, json)
Hash identifier: T92tND3IEW1reiuj3gmoUrXVMN89kxo9MEcrKTaBfds=
Subject key identifier: 96:03:EA:D3:95:6C:4D:48:6F:1A:C1:90:E9:24:97:31:50:60:90:38
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0A584EEFBBE58E9A9B6C8AEE2BFF70E52
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa
Signing time: Tue 15 Sep 2026 14:42:27 +0000
ROA not before: Tue 15 Sep 2026 14:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.199.149.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:84:ee:fb:be:58:e9:a9:b6:c8:ae:e2:bf:f7:0e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 15 14:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9603ead3956c4d486f1ac190e924973150609038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:7a:1b:06:f4:b9:15:e5:3f:bc:7f:d5:c4:
fa:e8:05:2c:ce:45:5b:f6:58:bd:84:ef:05:7d:80:
bc:2d:2f:d8:8a:f8:5f:22:be:9c:36:83:ed:55:6f:
b1:ab:40:35:6e:2b:f0:9b:71:21:35:7b:6b:f3:25:
22:4b:b0:76:a4:a1:a5:fc:54:47:46:95:b1:a3:8c:
29:19:e4:0f:7f:bf:80:de:b5:00:ef:ba:43:0b:12:
bf:99:14:4a:40:01:df:f7:f1:33:e8:64:f3:4f:0b:
ed:5a:c8:73:88:ef:1a:58:7a:4c:f9:cb:75:7d:29:
4a:81:c2:f0:53:ee:c0:53:43:71:16:d1:6f:46:bb:
c4:e1:4d:15:1d:75:fb:9e:24:42:c4:dc:42:99:33:
f1:60:38:84:2c:8d:67:c8:62:4f:12:4b:5d:2b:28:
2f:07:1f:f0:b2:dd:83:28:4c:9c:b1:12:38:18:bf:
aa:bc:89:bd:36:10:82:ab:46:d2:c6:9e:f3:a7:98:
f6:5b:c4:17:de:93:3d:e5:1f:26:bb:9d:8e:ae:7b:
46:8e:60:3e:7c:d3:aa:ae:50:80:78:49:d3:7e:76:
2f:11:e5:a4:53:3f:a5:a4:e9:75:29:f9:f1:ba:24:
9e:54:12:83:75:eb:9b:a3:d7:73:7a:d0:cd:25:15:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:EA:D3:95:6C:4D:48:6F:1A:C1:90:E9:24:97:31:50:60:90:38
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.149.0/24
185.199.212.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:0a:07:1b:fb:5e:07:c8:31:76:c8:8f:de:10:86:54:04:3f:
d7:74:ca:3c:98:1f:2a:e5:d6:2f:ae:22:e2:ba:58:21:3a:dd:
27:b4:d0:02:56:a8:e1:5f:4c:5e:cc:4f:34:5c:f0:54:29:ae:
d9:99:28:1c:a6:47:a6:fa:89:4d:48:64:ae:b3:7a:f5:f0:6a:
f9:1e:71:08:2b:7f:d9:2b:da:85:3a:96:c1:6d:b6:0a:6f:e8:
65:28:09:00:f3:2e:cb:a0:7e:ab:5b:ba:09:6c:08:31:0d:2f:
67:b6:f8:22:b0:62:4e:7c:c2:2e:ad:cd:a5:50:38:8a:bb:b1:
64:ac:83:d6:27:eb:9d:a6:6b:fe:b6:ec:28:e8:35:d7:40:4b:
cf:c1:6a:89:9d:89:d8:2b:c1:48:cf:e2:da:86:8e:80:01:16:
4f:7f:0b:02:c4:b6:3c:70:4c:79:e3:3f:3e:11:0b:07:bb:a0:
24:16:c9:1f:3f:dd:f1:47:b7:9a:8c:4f:2a:bd:f3:c8:09:a6:
1a:1e:0a:e1:92:4f:ae:e6:1c:8f:90:a8:5d:9b:35:49:63:88:
49:84:4e:23:bd:c4:cb:00:5b:be:a1:36:30:fc:51:34:22:7e:
cb:11:1a:5b:c3:dc:60:77:db:3c:8e:35:d8:ec:cd:2b:3b:5a:
02:9e:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:55:46 2026 by rpki-client