Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vcKt5W7LNR-jKY2SI5bC1jCK6tw.roa
File: vcKt5W7LNR-jKY2SI5bC1jCK6tw.roa (raw, json)
Hash identifier: FLQ9RRF3YmE7lXTh4GwRBI1gCsAaA+JXKOxdV9Z6XkM=
Subject key identifier: BD:C2:AD:E5:6E:CB:35:1F:A3:29:8D:92:23:96:C2:D6:30:8A:EA:DC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FF77A3E1E4A5D0D0EA0B37B26D3CDA8B0
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vcKt5W7LNR-jKY2SI5bC1jCK6tw.roa
Signing time: Wed 12 Aug 2026 19:36:51 +0000
ROA not before: Wed 12 Aug 2026 19:36:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 185.199.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:7a:3e:1e:4a:5d:0d:0e:a0:b3:7b:26:d3:cd:a8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 12 19:36:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc2ade56ecb351fa3298d922396c2d6308aeadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:e7:8f:55:02:f0:e8:79:0e:ed:f6:31:01:
a4:56:30:e0:10:68:4f:23:ac:84:29:73:72:e3:7b:
c7:7d:47:58:d5:75:92:28:ee:98:79:a9:db:0a:f7:
71:f9:76:67:29:04:71:84:7d:7c:51:f8:04:19:85:
a2:8d:7e:08:c2:dd:48:52:3c:3a:90:e1:c8:d4:5c:
fe:4b:79:36:4b:bb:1f:c4:5f:c9:bf:e3:e1:e2:a1:
5f:f4:08:e1:79:f1:e1:ff:72:d5:30:b1:54:b6:69:
3c:b3:27:1b:2e:ae:4d:db:c2:09:96:de:59:b4:64:
6a:9b:75:98:a0:bc:5f:ad:5b:e9:46:92:52:ef:66:
44:e4:99:9d:cf:58:87:94:7a:1a:00:7e:f8:35:b3:
3e:23:d3:a9:b9:46:01:63:a0:8a:86:8f:18:77:31:
52:c5:3c:1b:3f:ff:de:fd:c2:e5:b3:93:9f:ca:6d:
36:73:7f:ce:c9:0e:33:d9:b2:28:90:da:74:f7:71:
ef:05:fb:d8:35:74:0d:dd:92:f2:ba:88:43:66:d2:
1c:e9:44:02:72:fc:ae:e9:3f:5b:64:ee:97:1e:dd:
e8:31:23:4c:95:49:e8:6a:79:c8:92:dd:41:43:78:
62:91:45:eb:bd:5d:2b:a6:7e:7b:44:be:cf:b1:49:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:AD:E5:6E:CB:35:1F:A3:29:8D:92:23:96:C2:D6:30:8A:EA:DC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vcKt5W7LNR-jKY2SI5bC1jCK6tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:32:97:9a:06:e0:97:0a:61:18:04:e7:2d:e8:06:12:9f:80:
5d:46:2d:02:6b:dd:67:2d:7c:6d:28:07:1a:21:41:da:b9:16:
d5:d4:62:ff:65:38:b1:2c:e8:12:20:ba:b9:df:6b:ba:8a:b4:
92:fa:fe:8f:25:8a:11:8b:03:f5:22:6f:53:17:12:b7:f8:d4:
c8:36:fe:b0:97:d5:67:57:73:a8:eb:2b:67:0f:d3:09:c3:69:
b3:73:75:7f:1d:ab:8c:3c:bc:3c:66:d9:61:31:7e:22:10:09:
37:52:1f:70:0b:1a:53:11:70:b8:34:04:d3:61:68:48:de:f0:
1c:2b:a2:0e:14:81:23:52:fc:b7:2d:fc:6b:ec:23:8d:8b:21:
af:25:63:3e:54:e3:56:75:07:51:43:ad:17:5c:38:a0:c7:00:
de:fe:35:13:ea:c3:c9:de:60:fd:60:1f:2a:bd:74:78:49:dc:
a6:3f:8b:4e:54:65:69:7a:c7:a1:f0:2e:2f:c7:8f:4d:70:36:
e0:62:e1:92:96:ae:8a:a2:32:1c:f6:71:d9:88:28:3c:7d:96:
a9:bf:b0:ab:80:1f:bf:34:e3:97:6f:e0:15:62:fd:e0:1b:cd:
7a:50:df:ae:4c:e1:ce:22:72:3c:7a:6b:8d:e8:2c:49:28:9b:
a6:8a:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:25 2026 by rpki-client