Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/rpSA8Oxb-LH6KcBBuMQC2Old9Oo.roa
File: rpSA8Oxb-LH6KcBBuMQC2Old9Oo.roa (raw, json)
Hash identifier: 9dyOr1Zbl2EZIg7ii9rjnYQRLykSLoYuJ4czrF0Ofyc=
Subject key identifier: AE:94:80:F0:EC:5B:F8:B1:FA:29:C0:41:B8:C4:02:D8:E9:5D:F4:EA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0A586C29FA99321F0171A921152A25F75
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/rpSA8Oxb-LH6KcBBuMQC2Old9Oo.roa
Signing time: Tue 15 Sep 2026 14:44:27 +0000
ROA not before: Tue 15 Sep 2026 14:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:86:c2:9f:a9:93:21:f0:17:1a:92:11:52:a2:5f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 15 14:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae9480f0ec5bf8b1fa29c041b8c402d8e95df4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:c8:ec:82:4b:97:0d:17:63:b4:f3:a8:cb:
b6:5c:26:41:9c:14:c0:82:97:45:d5:3b:4b:35:dc:
32:57:b0:11:27:a9:12:b5:b6:5d:8a:ba:9b:6d:b8:
ef:98:20:f4:4c:6f:5e:35:e4:42:e8:a3:f1:ed:0a:
95:f6:62:62:fe:bf:73:13:6f:48:be:03:5b:b0:79:
ac:23:77:08:fc:d0:e0:36:01:88:69:13:ee:52:1f:
cb:21:5e:dc:1f:33:4d:6e:ae:34:4a:ab:4f:43:2d:
c3:ea:fd:08:12:e1:69:1f:f1:7d:e7:22:30:8e:88:
22:89:25:4c:a7:7e:bb:d5:b8:4e:a5:35:25:ca:cf:
d3:e3:15:c1:01:f4:7c:c1:a6:90:ac:6a:96:47:a3:
81:81:8d:4c:de:ab:82:89:39:49:ff:1d:bb:1f:ef:
39:ec:5b:7a:15:e2:b1:80:b0:d1:c4:ae:31:5c:69:
37:95:2f:c5:b3:a9:d3:98:2d:a4:eb:31:9c:37:81:
f4:be:e7:e9:8a:5a:9c:5a:37:18:0c:51:b0:b4:05:
30:55:2e:20:46:cb:91:4b:e3:ed:50:35:1e:5d:93:
64:d6:af:b2:26:45:65:fc:5f:41:9c:d7:84:78:96:
1a:22:19:21:2b:80:c0:13:3e:f5:2e:86:99:2b:18:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:80:F0:EC:5B:F8:B1:FA:29:C0:41:B8:C4:02:D8:E9:5D:F4:EA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/rpSA8Oxb-LH6KcBBuMQC2Old9Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
176.125.250.0/23
185.199.148.0/24
185.199.151.0/24
185.199.213.0-185.199.215.255
185.221.24.0/24
185.221.26.0/23
185.225.168.0-185.225.170.255
185.226.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d4:35:43:06:2c:a6:39:6d:83:f4:94:dc:a8:de:ff:5f:98:
3a:d4:fc:27:39:ea:7d:bf:a6:18:bd:db:b9:0a:06:8c:0f:a6:
46:fc:6f:e0:c1:99:2d:94:d2:0e:6c:ea:e5:6b:77:c5:8c:b6:
bd:0b:00:f5:b1:d8:a9:6f:a9:c2:62:a6:69:d1:8f:af:5f:4e:
64:af:43:3f:59:7b:f3:1d:ba:26:ee:ab:0a:56:c5:7e:5f:1c:
d7:54:f3:c7:fd:8e:68:a3:8a:b6:50:83:d2:30:1f:d3:bb:ad:
13:e9:13:e0:99:c9:b7:8b:a8:cf:f2:f4:1c:14:44:01:ed:2f:
74:8d:c0:f4:02:c5:96:69:a9:76:77:38:fc:c7:24:9f:a9:5d:
e9:c9:ae:dd:fc:c8:75:b5:cb:f1:65:84:67:40:a6:b1:f4:b4:
2f:4c:27:27:44:4a:17:c8:6b:8f:87:4c:0a:ea:a0:2f:1f:28:
f4:f1:30:ab:d6:19:62:7d:99:5a:95:ea:fd:02:cb:e0:26:5f:
c0:c4:cf:c5:00:6d:17:93:68:25:84:b0:4c:56:84:61:02:da:
39:c8:39:64:d3:9b:17:ad:90:54:82:39:2b:b1:95:3f:dd:d6:
5a:84:2e:78:c0:86:f7:e5:6a:03:64:26:8d:a5:a7:09:0e:35:
81:3d:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:55:57 2026 by rpki-client