Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AEHQOe1h1isBRiPkjgHgbpHc46A.roa
File: AEHQOe1h1isBRiPkjgHgbpHc46A.roa (raw, json)
Hash identifier: fT6ksZGK6ShyxdlI5XesK5Z4OY5Ay0p7QjchbUx7s7Y=
Subject key identifier: 00:41:D0:39:ED:61:D6:2B:01:46:23:E4:8E:01:E0:6E:91:DC:E3:A0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D6195E61CE277984E2E43A0A51FC0E186
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AEHQOe1h1isBRiPkjgHgbpHc46A.roa
Signing time: Mon 06 Apr 2026 06:58:26 +0000
ROA not before: Mon 06 Apr 2026 06:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8100
IP address blocks: 193.58.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:95:e6:1c:e2:77:98:4e:2e:43:a0:a5:1f:c0:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 06:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0041d039ed61d62b014623e48e01e06e91dce3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:32:48:06:8a:00:92:ed:5e:8f:a1:32:66:
1e:9a:fc:d8:20:29:16:f5:c2:19:34:cb:ea:37:bd:
5d:de:e4:8c:6a:8c:ec:29:69:78:70:5e:3c:00:80:
e6:e5:98:8e:f1:b3:cb:9f:92:66:d4:66:68:11:5f:
36:83:08:3e:a0:23:c8:e7:4e:97:37:63:48:21:29:
7e:41:02:27:a2:34:54:50:a3:3b:34:2d:0b:90:b7:
23:3b:91:bb:dc:34:74:8a:9f:68:05:5b:3c:4d:56:
b2:65:2d:a7:a0:4e:78:e6:82:1f:f4:b8:87:65:aa:
10:c1:ca:35:1d:c9:d8:a8:9c:d5:93:ef:4a:48:4a:
2c:1a:20:6c:89:33:86:cb:6f:ba:dc:16:07:37:59:
1f:0a:0a:b1:2a:2a:03:ab:a8:41:c7:15:38:99:35:
87:14:fa:85:90:f2:49:26:10:0a:91:f0:aa:8d:61:
bf:09:d7:b8:05:55:48:a2:7b:8f:82:f3:fb:5c:19:
9d:77:5f:9a:6e:0c:a5:03:a5:1f:71:e4:6c:e5:06:
fd:5f:eb:ee:30:d9:84:13:c9:71:46:57:92:ad:5d:
5b:fe:61:03:91:96:78:ae:63:d7:f9:e7:8d:53:56:
33:51:7e:a6:d9:19:5a:13:1e:ae:a3:cd:78:c7:9c:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:D0:39:ED:61:D6:2B:01:46:23:E4:8E:01:E0:6E:91:DC:E3:A0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AEHQOe1h1isBRiPkjgHgbpHc46A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
42:99:d0:84:ac:e5:4e:23:d2:55:f0:bd:f2:88:13:34:34:4c:
f5:9a:00:11:09:82:0a:1d:a4:bb:17:ea:08:e8:f4:94:21:93:
87:35:35:0a:5a:11:1f:ec:8f:09:3f:7b:a5:8e:b2:1b:25:5e:
09:c0:bf:19:5a:c4:b6:d6:4e:d2:2f:e3:ec:00:0b:65:30:27:
e4:b4:ae:aa:e6:2e:4f:9a:dd:b4:6a:c6:cb:c7:97:5f:95:d5:
b6:fe:8a:3f:07:7f:12:54:73:5b:1e:5e:34:4e:9b:09:5c:c4:
3b:86:9d:39:30:4f:a2:03:67:1a:00:78:ee:ee:4b:d7:91:08:
3e:35:d3:08:03:07:6f:e7:b5:38:2b:74:8a:75:b9:06:24:1f:
f5:8a:fc:8d:41:e8:ff:bf:f4:00:36:4e:33:d5:bb:f3:9f:e8:
f4:6a:a6:36:4c:0f:bb:27:b6:2c:14:14:e3:3d:2d:39:99:00:
2f:62:19:1a:5d:ba:6d:72:18:e7:1f:47:b4:07:c7:3d:e1:19:
63:07:eb:3b:fb:7b:22:27:db:3e:d9:1b:7e:f9:48:01:05:74:
98:b1:2b:93:66:bd:ef:88:1b:00:fb:5d:d2:65:27:70:b8:df:
a4:a9:42:af:42:fe:f4:35:d2:84:3c:76:7a:d9:a1:17:ed:bd:
c4:64:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 17:18:23 2026 by rpki-client