Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/oWL5joytfin_gt-k-BUcQBuOefw.roa
File: oWL5joytfin_gt-k-BUcQBuOefw.roa (raw, json)
Hash identifier: EOEkeib+twkPeieXgGeJ/sLRKfqsyBday+MtX6lBB6c=
Subject key identifier: A1:62:F9:8E:8C:AD:7E:29:FF:82:DF:A4:F8:15:1C:40:1B:8E:79:FC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0859BADC80922B4A2A3754E5C61F195BB
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/oWL5joytfin_gt-k-BUcQBuOefw.roa
Signing time: Wed 09 Sep 2026 09:59:27 +0000
ROA not before: Wed 09 Sep 2026 09:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.212.0/23 maxlen: 23
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:9b:ad:c8:09:22:b4:a2:a3:75:4e:5c:61:f1:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 9 09:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a162f98e8cad7e29ff82dfa4f8151c401b8e79fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:7a:31:48:0c:cf:f5:c7:bf:8a:07:d1:82:
be:d4:b6:a2:ff:a9:f8:c3:14:5e:40:ec:09:7b:2c:
23:23:9e:0a:8d:cb:96:19:14:4e:93:6e:bb:df:e3:
9a:78:06:e9:4d:66:b0:79:9e:42:12:a9:77:c2:e2:
9a:bc:fe:b4:99:8d:e7:c7:30:fd:95:47:f7:79:5b:
4d:ad:d5:35:4b:87:12:24:b4:68:59:25:a8:bd:b3:
22:27:dc:27:41:da:66:1a:d8:54:d3:cc:d6:41:a0:
dc:31:2e:77:51:6d:bf:46:ed:ea:5f:0b:aa:27:b0:
5b:2d:79:ad:39:49:fc:97:78:ca:44:05:ac:af:2b:
eb:74:ac:d0:6a:fa:84:65:f3:c0:1d:f1:29:77:d4:
5a:ef:f3:f6:c4:b6:21:f3:89:eb:67:fd:3f:a3:96:
91:88:dd:12:ac:eb:36:a2:94:07:d3:46:e6:a6:b9:
8d:57:b2:c8:6a:0f:8a:e4:71:6d:05:52:2b:e4:ec:
ed:df:01:6d:18:e3:17:8e:82:de:6e:96:64:62:75:
c5:54:dc:79:0d:4c:b8:9e:09:45:62:43:ff:4f:d7:
6e:83:73:ec:fe:5c:17:13:51:20:7b:2d:d4:32:a9:
dd:7e:f0:af:b0:a0:f2:5d:37:0c:01:d4:3c:43:b3:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:62:F9:8E:8C:AD:7E:29:FF:82:DF:A4:F8:15:1C:40:1B:8E:79:FC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/oWL5joytfin_gt-k-BUcQBuOefw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.209.0/24
176.125.250.0/23
185.199.151.0/24
185.199.212.0/22
185.221.26.0/23
185.225.168.0-185.225.170.255
Signature Algorithm: sha256WithRSAEncryption
59:19:32:19:ef:90:8f:a9:29:3c:af:86:3d:15:af:58:d2:b6:
3f:32:bb:2f:ed:9c:6b:8b:62:19:a2:cc:c0:5a:df:d6:d6:77:
4c:d8:0e:44:0c:05:64:31:05:c4:dd:ab:4c:5c:a6:bd:37:6b:
a0:5b:f8:53:07:68:43:45:5e:31:f2:6f:75:8e:15:c0:20:74:
48:b1:ea:c4:95:3a:ad:55:6e:20:21:c1:ff:98:56:02:50:71:
f3:3a:b2:c3:20:ef:1e:87:04:57:f4:21:a7:6c:09:df:f3:cf:
f4:34:e9:77:5e:17:bb:55:46:28:07:a9:20:a3:ed:88:38:8d:
f9:fc:db:17:9f:0b:28:4c:6d:9c:55:b5:bb:ea:06:be:bd:48:
02:f8:92:45:68:41:b5:15:ec:08:29:b7:ac:4f:f1:0d:75:47:
fe:9c:1f:0f:33:51:00:cc:b9:d7:80:86:a0:07:35:fb:00:ff:
cb:c2:a4:4d:da:de:2e:19:eb:ad:d0:d2:72:6c:77:5d:5f:03:
62:b0:6c:8a:d1:f7:5b:52:0f:25:92:38:be:01:58:68:a2:7c:
d4:50:c8:f8:3b:d7:01:ef:4c:a1:93:cb:89:02:5f:fd:79:aa:
e4:25:1b:d6:25:ac:d8:76:72:df:d6:d7:b5:1e:6f:3c:63:fe:
c6:08:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:30 2026 by rpki-client