Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9fAfolcDbPpkSV1otKIcXendNYA.roa
File: 9fAfolcDbPpkSV1otKIcXendNYA.roa (raw, json)
Hash identifier: PBjuHR+AHfo+N5mp1Bxfn4fzOi0CekebUR2R+DEvyuQ=
Subject key identifier: F5:F0:1F:A2:57:03:6C:FA:64:49:5D:68:B4:A2:1C:5D:E9:DD:35:80
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0BAB25FDD9B8E3FB9D3083EA116828E4A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9fAfolcDbPpkSV1otKIcXendNYA.roa
Signing time: Sat 19 Sep 2026 17:24:07 +0000
ROA not before: Sat 19 Sep 2026 17:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:b2:5f:dd:9b:8e:3f:b9:d3:08:3e:a1:16:82:8e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 19 17:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5f01fa257036cfa64495d68b4a21c5de9dd3580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:47:1a:97:f0:5f:9b:8f:7d:f1:0f:d8:ee:
20:c0:6b:ab:36:76:30:42:16:1a:1c:de:c2:3d:bb:
f2:8e:de:e0:8b:e2:21:ce:da:27:e0:2e:1d:94:02:
4c:3f:83:c9:a6:c6:30:f7:8c:40:ac:df:81:38:4a:
2e:ad:f2:b2:cd:9f:6e:f8:a4:b6:06:6b:20:e6:17:
4d:ad:39:16:d4:08:da:e3:c0:d8:59:0c:02:ee:d5:
8a:4b:59:93:24:47:da:9b:e7:f7:a9:fb:d1:de:ea:
d1:8f:e7:4b:3d:7d:df:d7:0d:0f:e0:8e:0a:21:db:
18:02:4f:17:02:68:f9:1b:e6:ef:0b:d5:95:e8:5b:
db:17:e3:12:f7:90:6c:26:ca:46:8f:08:db:44:00:
f3:b0:fc:1b:a8:f6:37:d8:62:7e:61:89:40:28:41:
13:d9:de:17:72:8c:be:b2:83:a2:9c:d9:b0:0d:68:
b3:6f:36:72:3f:02:e7:12:ab:7b:66:e8:0f:ac:c9:
a5:24:3e:aa:6a:bf:cd:b5:47:ac:d3:45:97:84:28:
b5:a7:34:aa:c8:98:a8:b9:dd:39:03:d5:23:29:21:
ee:8c:f1:f5:99:b1:a2:7d:71:c8:93:a3:62:b2:c5:
13:8b:62:66:b4:eb:30:c2:e8:8f:b1:b6:17:39:0f:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F0:1F:A2:57:03:6C:FA:64:49:5D:68:B4:A2:1C:5D:E9:DD:35:80
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9fAfolcDbPpkSV1otKIcXendNYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.246.0/24
176.125.250.0/23
185.199.148.0/24
185.199.151.0/24
185.199.213.0-185.199.215.255
185.221.24.0/24
185.221.26.0/23
185.225.168.0-185.225.170.255
Signature Algorithm: sha256WithRSAEncryption
12:38:5a:86:52:1c:46:88:dd:f4:fe:2b:65:fb:13:d2:8a:a4:
ea:72:88:eb:7c:82:9b:b9:e9:62:55:c0:7b:cb:c7:cc:26:11:
06:67:be:8f:02:66:af:6c:e2:7d:d9:27:bc:bf:69:29:9e:3b:
2a:41:56:8c:7b:f2:b2:f8:ed:2f:7c:9a:1b:5d:3d:c9:7c:3c:
6e:a4:2d:6d:fb:c9:db:b4:7d:8c:ae:40:e3:3e:05:77:ce:30:
0f:97:c8:30:1a:7f:26:ad:6c:b3:dc:63:16:37:9b:86:2d:59:
f1:50:28:83:e9:51:38:71:25:48:e9:5d:51:7e:49:4b:45:3d:
3b:c1:bc:80:7a:12:d3:ef:62:f3:68:72:1c:49:8a:d8:d2:cf:
b8:a0:70:bd:ae:2f:36:65:d1:37:78:9c:02:fa:36:a9:26:ac:
54:0a:ac:06:72:77:9d:3b:89:6b:18:1e:2e:14:2a:a9:ad:fb:
7f:e1:5f:10:e8:83:b4:07:90:5a:28:68:d0:71:ea:76:35:3c:
db:7f:4c:05:51:a3:5d:57:bc:87:e3:64:f1:e4:e1:77:36:bc:
51:ae:15:c2:b4:75:d1:2f:12:1d:fe:c7:17:fd:bb:3a:0e:60:
22:9e:15:7b:ff:5f:2e:13:b5:ba:32:bb:56:d3:9d:08:74:f2:
5e:c3:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:09 2026 by rpki-client