Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vVDSShRrrwTYV95J37bb3l6D4I8.roa
File: vVDSShRrrwTYV95J37bb3l6D4I8.roa (raw, json)
Hash identifier: PwmcJpwCUhaqO20Cel5odPRhmyaGJG40qV/N4BqbnLI=
Subject key identifier: BD:50:D2:4A:14:6B:AF:04:D8:57:DE:49:DF:B6:DB:DE:5E:83:E0:8F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A04F213AA34EB89EAD9361A16310904450
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vVDSShRrrwTYV95J37bb3l6D4I8.roa
Signing time: Sat 29 Aug 2026 20:06:12 +0000
ROA not before: Sat 29 Aug 2026 20:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.199.149.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:21:3a:a3:4e:b8:9e:ad:93:61:a1:63:10:90:44:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 29 20:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd50d24a146baf04d857de49dfb6dbde5e83e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:35:ba:7d:62:c3:61:d9:45:18:b2:1f:45:
16:90:a6:b1:21:3c:fd:1d:d9:71:1d:c1:90:8b:e4:
41:24:0c:fd:6b:6f:db:b2:c1:fc:b6:13:19:55:b8:
7c:08:ba:d1:20:01:2b:bf:1c:50:53:9a:7b:0b:7c:
f0:0e:30:58:fd:60:6d:81:7d:1a:6c:36:67:5a:a3:
d2:e3:34:b9:d3:53:c4:cc:a2:ac:6f:a2:44:de:0b:
66:f5:a7:70:f6:dd:26:91:dc:9d:eb:39:51:f0:99:
4b:d5:f4:92:ae:3a:aa:f0:f7:e0:0a:35:4a:09:9d:
4d:34:d1:49:c7:40:73:91:e4:3d:0b:73:e4:e9:5b:
48:a9:9d:10:0a:e6:02:ff:f2:ca:b9:50:65:83:8e:
6d:81:33:93:5a:9d:3b:ef:4e:22:1f:c6:0d:97:f4:
0d:7d:26:24:fe:cb:bc:09:3a:6f:97:fc:a9:9e:6b:
a2:fc:28:a8:e9:ec:6f:56:40:29:db:a3:9e:68:4f:
27:bf:40:d8:23:6e:28:f1:0a:ea:d2:31:3a:43:63:
19:32:41:2b:b8:de:f6:f6:ee:36:91:e0:ed:ae:bc:
d9:15:85:7d:5e:49:4a:7d:4f:e1:98:ed:2e:8c:0c:
68:02:2a:f5:9c:5d:48:2b:1f:20:5e:a3:02:ec:ce:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:D2:4A:14:6B:AF:04:D8:57:DE:49:DF:B6:DB:DE:5E:83:E0:8F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vVDSShRrrwTYV95J37bb3l6D4I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.149.0/24
185.221.25.0/24
185.225.169.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:8a:d3:e0:68:e1:5a:90:b2:49:b2:15:44:39:7c:7f:aa:
91:76:ac:61:1f:25:37:18:55:74:90:95:05:41:a9:88:09:ff:
96:24:ce:93:da:97:79:ed:fb:d8:48:69:91:a8:4e:2b:db:7c:
79:e1:68:06:0d:6e:82:2c:0a:f0:4f:78:24:a1:82:4d:98:4a:
b2:b1:c9:44:19:07:cd:e4:f7:fe:84:ed:1a:d3:af:f5:bd:6c:
4a:18:0d:a2:45:7a:28:d9:b0:4b:fc:40:86:cb:22:72:05:41:
39:34:3d:2d:18:a9:f9:35:98:ec:65:5d:6d:b1:a8:3c:cc:7e:
23:1c:b5:dd:8e:1e:14:1a:ae:2b:db:35:ab:67:db:17:2b:24:
2e:ec:5f:56:e4:6d:f7:07:57:90:b0:51:c2:53:96:65:c6:92:
4b:fe:9e:de:bb:a1:73:77:a7:6c:a2:ea:bb:00:67:a1:52:c6:
07:6a:75:65:fd:9f:5c:a6:b0:76:3e:f7:c0:42:14:c4:26:94:
02:4c:0d:b4:e4:0f:78:bf:43:ff:ef:a1:3d:5b:09:4c:cb:77:
34:ae:d5:d7:eb:fb:d6:e2:35:1d:43:45:13:b8:7e:e7:73:60:
15:b0:9e:7d:3d:ad:8d:14:fa:d5:3a:d3:02:87:93:c7:4d:bb:
67:1e:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 15:17:56 2026 by rpki-client