Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/pEYKqh-HZTICIznuDDkvZQKOpQs.roa
File: pEYKqh-HZTICIznuDDkvZQKOpQs.roa (raw, json)
Hash identifier: +6JOcYl0e7Kly90geVNRPtpifQQJN2SaFu3Bf0va6jA=
Subject key identifier: A4:46:0A:AA:1F:87:65:32:02:23:39:EE:0C:39:2F:65:02:8E:A5:0B
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0110753491104A0A98C368D1E2B5897FA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/pEYKqh-HZTICIznuDDkvZQKOpQs.roa
Signing time: Mon 17 Aug 2026 18:41:27 +0000
ROA not before: Mon 17 Aug 2026 18:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 185.199.148.0/24 maxlen: 24
185.221.24.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:07:53:49:11:04:a0:a9:8c:36:8d:1e:2b:58:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 17 18:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4460aaa1f876532022339ee0c392f65028ea50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:6f:22:eb:e0:e1:f3:ab:a3:48:15:dd:36:
fb:8c:54:ea:87:26:36:1b:2f:3b:f6:d3:58:f9:c2:
5a:56:2c:f2:3d:46:b3:2b:ed:2e:ee:ec:62:24:26:
f5:df:d6:26:ca:05:4c:eb:eb:75:b2:4f:4d:6e:55:
c4:0e:13:51:14:42:df:d8:0c:ae:b1:b4:c8:38:01:
e9:8d:1d:94:7d:b9:09:65:87:19:bc:86:bc:05:e2:
cc:2a:30:79:f8:b0:e6:e3:b3:b9:0a:24:a7:04:83:
a7:3c:93:75:41:fd:a4:df:c0:85:d1:93:c9:5d:5e:
e6:25:cb:b0:8f:5c:7e:45:e3:0f:53:aa:3e:b8:8a:
4e:c8:e8:b2:34:84:a7:a6:9c:43:96:4a:d1:7f:bf:
89:3a:d7:76:49:fc:e0:b8:1a:8f:22:1f:cc:1a:56:
10:d4:1f:7a:2f:3f:49:d4:b6:15:5c:fa:f0:11:a5:
fe:2e:a0:ff:bb:99:c7:13:64:a5:63:05:60:bc:3e:
04:30:c1:0b:7d:e6:4d:4f:13:05:64:7b:8c:03:d5:
d6:7b:bf:f0:a8:5b:e7:f7:3f:0f:70:70:79:b7:7f:
af:05:8b:56:4d:e4:32:58:77:e8:e7:05:db:ff:e7:
ee:e6:26:db:9b:0c:d0:46:57:ba:33:f5:e8:c1:43:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:46:0A:AA:1F:87:65:32:02:23:39:EE:0C:39:2F:65:02:8E:A5:0B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/pEYKqh-HZTICIznuDDkvZQKOpQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/24
185.221.24.0/24
185.225.168.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f0:62:f7:55:b9:9c:e0:6a:0b:f1:d9:ca:5c:58:59:3a:0c:
f9:ff:68:b8:e7:fe:29:e0:e0:27:75:00:e5:99:e0:5b:e7:83:
13:3e:0f:a8:0f:33:0e:0f:10:a7:8c:00:aa:ea:1f:03:77:56:
bf:81:3f:62:85:22:a7:75:45:60:f3:05:1c:de:5b:d8:12:b1:
77:dc:22:f6:b8:23:92:b8:b5:f1:8f:21:97:ac:c5:0a:d9:17:
91:90:8c:c5:fb:a7:c2:7a:6a:c9:ec:56:76:aa:66:80:56:1d:
3a:39:7c:81:19:d0:0e:ff:39:27:6e:43:13:3d:81:28:fa:db:
de:c9:af:3b:b2:94:04:9f:2c:9b:7e:d4:1d:83:28:6a:c4:22:
a4:e6:9a:12:ed:56:13:a9:47:19:c7:e2:99:bb:24:b7:93:2b:
15:a5:34:b9:d8:83:40:94:a2:69:5e:c2:35:01:5a:0b:4b:44:
c6:d7:f3:b3:d2:c3:fc:b6:89:bb:3b:93:56:75:b2:08:70:ec:
0d:9d:c4:98:52:57:48:91:ff:6e:cf:a5:32:02:10:be:83:d1:
ec:83:90:17:b9:16:33:fe:87:61:22:58:86:e5:bb:c2:89:8c:
f7:9b:30:6e:15:c5:14:54:67:5e:4a:30:c2:64:05:06:ad:53:
26:f7:b9:99
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaARB1NJEQSgqYw2jR4rWJf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwODE3MTg0MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDQ2MGFhYTFmODc2NTMyMDIyMzM5ZWUwYzM5MmY2NTAyOGVhNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu1vIuvg4fOro0gV3Tb7jFTqhyY2
Gy879tNY+cJaVizyPUazK+0u7uxiJCb139YmygVM6+t1sk9NblXEDhNRFELf2Ayu
sbTIOAHpjR2UfbkJZYcZvIa8BeLMKjB5+LDm47O5CiSnBIOnPJN1Qf2k38CF0ZPJ
XV7mJcuwj1x+ReMPU6o+uIpOyOiyNISnppxDlkrRf7+JOtd2SfzguBqPIh/MGlYQ
1B96Lz9J1LYVXPrwEaX+LqD/u5nHE2SlYwVgvD4EMMELfeZNTxMFZHuMA9XWe7/w
qFvn9z8PcHB5t3+vBYtWTeQyWHfo5wXb/+fu5ibbmwzQRle6M/XowUPZVQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKRGCqofh2UyAiM57gw5L2UCjqULMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvcEVZS3FoLUhaVElDSXpudUREa3ZaUUtPcFFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuceUAwQA
ud0YAwQAueGoMA0GCSqGSIb3DQEBCwUAA4IBAQDK8GL3Vbmc4GoL8dnKXFhZOgz5
/2i45/4p4OAndQDlmeBb54MTPg+oDzMODxCnjACq6h8Dd1a/gT9ihSKndUVg8wUc
3lvYErF33CL2uCOSuLXxjyGXrMUK2ReRkIzF+6fCemrJ7FZ2qmaAVh06OXyBGdAO
/zknbkMTPYEo+tveya87spQEnyybftQdgyhqxCKk5poS7VYTqUcZx+KZuyS3kysV
pTS52INAlKJpXsI1AVoLS0TG1/Oz0sP8tom7O5NWdbIIcOwNncSYUldIkf9uz6Uy
AhC+g9Hsg5AXuRYz/odhIliG5bvCiYz3mzBuFcUUVGdeSjDCZAUGrVMm97mZ
-----END CERTIFICATE-----
Generated at Thu Aug 20 08:46:19 2026 by rpki-client