Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa
File: ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa (raw, json)
Hash identifier: t3U5a9jeFTpwLqazJteiTXIy8kMtT9VQPKdjkLgNQ/w=
Subject key identifier: 9D:D8:E8:C3:17:C0:A3:26:1E:32:9D:2B:DD:2B:F4:71:48:16:32:B7
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A15911FF6AFA921F869B4CDC84621A6863
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa
Signing time: Tue 20 Oct 2026 11:28:34 +0000
ROA not before: Tue 20 Oct 2026 11:28:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 185.199.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:11:ff:6a:fa:92:1f:86:9b:4c:dc:84:62:1a:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 20 11:28:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dd8e8c317c0a3261e329d2bdd2bf471481632b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:3b:72:b6:f4:ac:ad:db:84:fa:ab:41:ed:
85:0a:e1:34:ce:b3:ff:82:19:58:92:dc:c5:72:fa:
77:03:db:cf:e8:61:1b:43:02:c9:ea:a0:36:8e:c1:
97:a6:9c:be:c7:03:2a:c4:aa:eb:69:7a:6d:10:2d:
c6:eb:0d:55:6c:ff:65:06:c9:2b:62:0f:a2:e6:53:
a6:6f:aa:e9:ce:e5:fa:d9:7d:39:ea:ec:ac:e4:63:
e8:98:b2:1e:ba:31:d6:a5:b0:14:56:0e:1d:c6:3e:
25:e4:4b:e6:dd:bd:47:4b:d1:bf:3d:c1:3d:41:22:
15:ad:c5:df:78:46:51:4d:9d:f9:84:2c:a6:00:45:
56:98:cd:74:49:66:57:28:ef:66:a0:ca:5b:40:c6:
41:f3:02:58:80:67:97:01:1e:dc:16:7c:2f:ea:ae:
ec:c3:c7:7d:03:6b:9c:79:41:a6:a4:74:bd:2f:b6:
5e:51:35:d7:01:64:36:31:b8:2c:28:01:fd:fa:1c:
79:e0:3c:b2:82:14:8b:e6:84:04:3a:78:af:48:b3:
fa:1b:76:77:e2:96:bd:91:9e:b8:b9:e8:2b:15:15:
20:c1:14:c5:ca:94:41:ee:47:46:88:a2:f1:de:90:
3f:5b:28:8c:95:bd:25:c9:29:89:76:08:8c:7b:2c:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:E8:C3:17:C0:A3:26:1E:32:9D:2B:DD:2B:F4:71:48:16:32:B7
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c2:6d:1e:5e:cc:95:05:6c:39:37:7e:a5:03:1a:0f:37:68:
02:34:21:d2:e8:cd:29:75:56:2b:be:61:ac:03:06:d5:66:23:
2f:3a:c2:89:c6:3a:d1:08:59:a0:54:93:77:81:a5:bb:fb:36:
c3:6d:e2:91:42:bd:69:bd:ee:ec:1e:b8:7a:b7:31:06:6e:a0:
ad:51:79:b3:09:15:1e:7b:7a:5e:ad:09:3f:bd:cd:e6:3b:3e:
24:70:5f:b7:86:ee:8f:fa:c3:69:17:59:05:60:55:2e:d8:1c:
c2:a8:1e:50:4b:d8:e9:90:87:60:16:c7:2d:d8:24:95:97:44:
00:db:a9:f3:50:97:95:1c:a8:eb:b1:75:48:a0:bb:22:bd:88:
f5:3b:87:ab:ad:7b:f8:4b:42:b2:56:eb:e4:76:f7:11:a7:a6:
a5:84:21:88:73:c5:1d:52:2f:49:cf:81:96:26:04:e3:0e:25:
76:c2:be:a5:8d:f2:21:a2:ab:c7:ca:e1:28:d8:0d:d2:e1:3a:
65:8a:74:51:0b:45:83:d2:da:2a:4b:5d:c7:6c:0c:69:6e:42:
48:8e:ba:6e:a2:db:e0:c6:79:43:51:fe:92:e8:5e:47:14:0a:
0c:64:6c:98:27:15:d2:af:67:62:6d:ea:24:95:08:50:9b:3c:
94:74:05:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFZEf9q+pIfhptM3IRiGmhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYxMDIwMTEyODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGQ4ZThjMzE3YzBhMzI2MWUzMjlkMmJkZDJiZjQ3MTQ4MTYzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLY7crb0rK3bhPqrQe2FCuE0zrP/
ghlYktzFcvp3A9vP6GEbQwLJ6qA2jsGXppy+xwMqxKrraXptEC3G6w1VbP9lBskr
Yg+i5lOmb6rpzuX62X056uys5GPomLIeujHWpbAUVg4dxj4l5Evm3b1HS9G/PcE9
QSIVrcXfeEZRTZ35hCymAEVWmM10SWZXKO9moMpbQMZB8wJYgGeXAR7cFnwv6q7s
w8d9A2uceUGmpHS9L7ZeUTXXAWQ2MbgsKAH9+hx54DyyghSL5oQEOnivSLP6G3Z3
4pa9kZ64uegrFRUgwRTFypRB7kdGiKLx3pA/WyiMlb0lySmJdgiMeyxQzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3Y6MMXwKMmHjKdK90r9HFIFjK3MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvbmRqb3d4ZkFveVllTXAwcjNTdjBjVWdXTXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucfVMA0G
CSqGSIb3DQEBCwUAA4IBAQAPwm0eXsyVBWw5N36lAxoPN2gCNCHS6M0pdVYrvmGs
AwbVZiMvOsKJxjrRCFmgVJN3gaW7+zbDbeKRQr1pve7sHrh6tzEGbqCtUXmzCRUe
e3perQk/vc3mOz4kcF+3hu6P+sNpF1kFYFUu2BzCqB5QS9jpkIdgFsct2CSVl0QA
26nzUJeVHKjrsXVIoLsivYj1O4errXv4S0KyVuvkdvcRp6alhCGIc8UdUi9Jz4GW
JgTjDiV2wr6ljfIhoqvHyuEo2A3S4TplinRRC0WD0toqS13HbAxpbkJIjrpuotvg
xnlDUf6S6F5HFAoMZGyYJxXSr2dibeoklQhQmzyUdAUD
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:30 2026 by rpki-client