Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/S8AKTEHCvMkHQfsn_Sm9RE-DF1w.roa
File: S8AKTEHCvMkHQfsn_Sm9RE-DF1w.roa (raw, json)
Hash identifier: vrgwS8Ru/0HG13wh+v7ryxf6pZvHlJ0P+Yy4dpbSB6s=
Subject key identifier: 4B:C0:0A:4C:41:C2:BC:C9:07:41:FB:27:FD:29:BD:44:4F:83:17:5C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A198A8DD972B2B1E8429549AC18091EB8E
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/S8AKTEHCvMkHQfsn_Sm9RE-DF1w.roa
Signing time: Sun 01 Nov 2026 19:49:25 +0000
ROA not before: Sun 01 Nov 2026 19:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137410
IP address blocks: 185.226.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:a8:dd:97:2b:2b:1e:84:29:54:9a:c1:80:91:eb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 1 19:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bc00a4c41c2bcc90741fb27fd29bd444f83175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:98:33:22:45:98:2c:1a:f8:9d:92:af:a3:
6f:eb:da:8c:bb:7f:2b:d5:fe:53:0a:c5:46:87:c0:
0d:6a:e6:7b:53:87:74:1a:45:f4:5d:48:4e:9e:6b:
2e:ae:f2:22:48:09:93:d6:19:37:fe:9e:be:7e:69:
f3:b1:dc:2f:9d:09:94:7e:a3:25:a6:02:7f:f2:2d:
36:cc:09:05:04:c3:9c:01:f9:92:ae:6c:2f:ac:00:
16:33:17:cf:00:60:17:32:d6:f9:3b:13:3e:62:3d:
47:d9:ad:9e:e1:72:da:47:5b:53:ff:76:0e:a6:23:
cb:2e:9b:d4:d1:d2:ff:5b:38:c6:61:3d:da:2e:ae:
a3:81:c9:83:19:b9:cf:a1:01:f6:9c:77:5f:4f:38:
92:2c:89:0b:85:64:01:2b:25:dc:de:57:a7:de:f2:
1b:74:33:ed:9b:db:e9:c9:e1:94:06:4f:ae:66:b7:
40:97:ef:16:ec:04:76:06:74:ba:ec:5c:38:e6:c2:
69:91:19:74:84:5b:43:26:eb:7c:99:87:81:bc:55:
4e:5e:dd:f6:5e:7b:68:f7:fc:bf:99:05:5f:16:61:
ca:ac:9b:d8:2f:5a:a5:78:7a:63:e2:1d:e1:f2:0f:
11:e7:dd:a6:8f:9a:b0:a4:d8:4e:c4:58:1b:7a:78:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C0:0A:4C:41:C2:BC:C9:07:41:FB:27:FD:29:BD:44:4F:83:17:5C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/S8AKTEHCvMkHQfsn_Sm9RE-DF1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
10:aa:0a:e4:c2:ad:08:51:4f:b9:bb:77:6e:21:7e:1b:73:74:
d8:9d:b8:73:e5:e0:52:3f:9e:63:5c:51:d3:fc:0d:71:f5:74:
9c:10:97:c8:f1:9e:8f:2d:ce:bf:5c:db:a7:16:f5:6e:e3:82:
59:11:ca:e0:c3:1a:5b:c6:f5:9c:5b:d1:d0:ec:ff:a3:3e:91:
8c:ea:58:56:4f:46:b5:8d:70:a8:01:6e:b5:41:27:54:f1:76:
3f:6b:21:09:70:fb:2b:66:67:7b:cc:a5:32:16:e7:6a:c0:c9:
70:db:e5:1f:04:ad:49:6f:61:96:b8:62:07:33:17:cd:0b:fa:
94:43:6c:f1:cc:07:e8:48:f2:db:d4:c1:b0:28:e4:29:c8:79:
b3:9d:1b:af:80:22:82:e9:5a:38:e8:98:da:68:af:60:09:58:
6c:9b:1a:c4:16:67:5e:5b:83:0b:25:80:fd:d4:03:7e:06:2b:
4e:30:5b:bc:bd:63:fc:f3:74:a5:ef:e4:82:62:54:15:ae:84:
46:6e:99:6a:75:c5:1f:4c:5d:34:99:41:35:3b:20:81:0b:be:
0d:9d:41:eb:bc:d3:b8:8d:07:54:f5:d4:83:c9:6d:1e:d4:65:
26:7d:cf:61:7a:c9:69:14:1a:d6:3b:31:8e:1c:a3:af:fd:45:
55:3d:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:57 2026 by rpki-client