Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/tixQObx3uiV7eqywc2bJKMQFx8A.roa
File: tixQObx3uiV7eqywc2bJKMQFx8A.roa (raw, json)
Hash identifier: NvIyaOipBPDRx4VxCyXcPXusugDOKB1Bdd7bTanCRhw=
Subject key identifier: B6:2C:50:39:BC:77:BA:25:7B:7A:AC:B0:73:66:C9:28:C4:05:C7:C0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A01E859BEC144A0A7E96A32FDCCB95B557
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/tixQObx3uiV7eqywc2bJKMQFx8A.roa
Signing time: Thu 20 Aug 2026 09:34:27 +0000
ROA not before: Thu 20 Aug 2026 09:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 45.155.253.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:85:9b:ec:14:4a:0a:7e:96:a3:2f:dc:cb:95:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 20 09:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b62c5039bc77ba257b7aacb07366c928c405c7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:e5:3b:51:ce:34:ba:10:bc:52:9f:88:82:
6c:f9:4e:97:0f:bb:b9:c4:fb:fd:3b:11:28:8f:ac:
3d:e5:b0:ac:5e:e5:6d:02:33:b9:8d:30:02:0c:a0:
64:2a:e2:a8:7e:03:92:e3:0d:0d:99:2a:fb:33:93:
92:3c:9f:31:88:45:ca:cb:8f:9a:54:8b:e6:0b:a8:
b8:08:db:3f:64:e2:5e:37:95:4b:4e:44:8e:ec:b8:
28:f7:4d:65:94:7f:aa:ec:bd:1d:12:24:36:71:15:
60:27:e1:69:52:f8:5f:37:8f:a0:e5:fa:18:65:27:
06:77:d8:b3:8c:a6:b4:ff:f7:6c:28:fc:d2:90:38:
4d:ec:f9:93:e3:ca:03:f0:9e:f6:1a:32:c7:0b:06:
c8:91:ab:39:31:d7:bb:74:09:e4:96:01:f1:19:8b:
17:e9:af:55:27:78:e0:2d:71:7b:68:d7:ec:fa:89:
89:c3:08:7b:63:22:a8:7e:69:f4:db:f2:6a:4a:05:
84:27:af:c3:cd:98:1f:45:ea:0a:37:38:dd:2c:a4:
c7:e2:a7:07:e1:6a:a7:ef:bc:dc:01:1e:2f:f2:b2:
c8:25:f5:b0:77:de:7a:f0:7d:0c:77:fa:45:d3:d0:
c1:22:ae:30:35:d6:73:fd:7b:99:27:1b:49:06:33:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:50:39:BC:77:BA:25:7B:7A:AC:B0:73:66:C9:28:C4:05:C7:C0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/tixQObx3uiV7eqywc2bJKMQFx8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0/24
79.98.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ee:00:cb:34:a6:7d:e1:54:69:5c:32:39:b5:00:cf:f4:c2:
68:7f:3f:ea:9c:9a:cd:08:97:d0:a7:ab:c6:bd:69:1d:d4:0e:
66:fc:17:99:41:05:cf:45:fc:d5:a4:0c:b9:c8:b2:d8:f5:7f:
e4:b2:89:4c:a3:8f:64:e7:df:f9:db:19:52:f8:8c:f9:01:d6:
2a:f9:53:e5:b2:46:6e:cb:57:0e:b1:d9:bb:0c:fc:4e:aa:be:
8e:93:b9:80:c2:bb:90:c6:cd:61:75:49:59:7e:b9:ad:05:6b:
a7:55:14:f1:a2:5d:b7:c9:fb:9d:fd:21:cb:e0:29:28:0c:ce:
9e:d0:f1:76:5f:29:0a:3b:11:f6:54:90:b0:3f:2f:75:b7:62:
7a:98:f5:89:81:9f:d5:9a:47:87:a1:6d:95:b0:09:37:26:37:
5c:8c:b7:6f:ab:ae:b7:bd:a0:c4:4c:1e:6a:49:b2:6c:0c:32:
68:ab:96:c6:6f:f7:cd:0a:f9:9d:e1:09:ab:6a:a3:81:d4:d8:
e3:45:b2:ea:c1:53:19:f1:67:94:50:69:87:1c:fb:4c:7c:b6:
a2:89:be:2c:0f:bd:73:84:40:17:8a:9e:13:dd:1c:2c:83:a7:
7e:80:7f:41:1d:27:f9:e6:0e:2c:a6:13:6a:b2:c8:36:c6:50:
cf:2e:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:53:30 2026 by rpki-client