Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/aenF_8D3QkfKBfYdLCxhBN16uDY.roa
File: aenF_8D3QkfKBfYdLCxhBN16uDY.roa (raw, json)
Hash identifier: cjtTQwkuK8+7b7+MC2voWpNoCw71PuMftvOhWVBrIBE=
Subject key identifier: 69:E9:C5:FF:C0:F7:42:47:CA:05:F6:1D:2C:2C:61:04:DD:7A:B8:36
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019CB9C69DC558047D7B9F65D7D9370A4A37
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/aenF_8D3QkfKBfYdLCxhBN16uDY.roa
Signing time: Wed 04 Mar 2026 16:55:27 +0000
ROA not before: Wed 04 Mar 2026 16:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9318
IP address blocks: 158.173.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:c6:9d:c5:58:04:7d:7b:9f:65:d7:d9:37:0a:4a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 4 16:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e9c5ffc0f74247ca05f61d2c2c6104dd7ab836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:28:de:a7:66:d3:20:4f:85:46:df:ee:9a:
d4:b8:76:f7:54:65:a7:5a:39:f5:58:da:39:26:3a:
f9:fa:73:da:a6:56:b8:e1:a6:2f:4a:a8:ff:b1:0b:
9a:97:9d:db:6c:70:3a:6a:07:5e:48:12:7b:07:f2:
f0:b6:c6:3f:57:fb:c4:45:d8:ef:07:3d:82:9d:e2:
5b:f4:63:f8:d2:30:9c:f5:94:02:cc:47:8a:55:8a:
09:50:8d:52:07:e7:60:47:5b:25:c5:d0:ab:f5:b0:
7e:ce:2c:d6:26:ad:d4:08:df:a9:d5:44:0c:fe:95:
49:75:9c:7e:e1:a3:14:7d:84:1c:7a:b8:44:d9:8c:
55:59:c3:d7:78:13:ed:8c:86:6a:ec:fc:58:ee:e6:
5e:36:89:0b:89:1f:d0:ec:69:e0:3b:d3:68:9c:34:
41:95:28:51:e9:be:3b:56:a7:aa:5c:50:28:6e:aa:
ab:3a:34:08:95:00:a1:f4:28:83:8c:d2:f9:b1:9b:
df:d2:fd:7e:22:65:94:41:cd:93:27:c9:47:36:b9:
cb:a0:c5:ea:8a:18:5c:5c:1c:18:1b:66:39:1f:63:
a4:23:e8:ba:15:07:c9:19:0e:49:9a:a0:15:0a:10:
8d:99:13:2e:5d:df:62:4f:14:77:66:31:ab:49:28:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:C5:FF:C0:F7:42:47:CA:05:F6:1D:2C:2C:61:04:DD:7A:B8:36
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/aenF_8D3QkfKBfYdLCxhBN16uDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.193.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4c:42:8b:56:54:be:c1:09:c5:48:c0:22:cc:cc:37:fd:e0:
7b:15:62:5c:3d:df:40:ca:0a:b5:6d:c0:fc:12:ab:e1:7b:52:
2d:29:20:ba:3d:96:da:ea:e5:94:2c:0d:dd:bb:5b:dd:0b:9b:
ff:86:f7:60:39:25:37:0b:6a:fd:b4:f2:25:59:f9:cd:3d:ae:
0d:73:c7:82:b3:29:e3:30:6d:8b:9b:c1:14:85:84:29:63:8f:
6f:d8:04:84:8b:5f:3f:fe:b1:5b:90:fb:81:eb:88:39:0c:65:
37:5c:eb:0e:8b:a9:bc:fc:7a:cb:f1:65:61:1c:ab:25:94:29:
0f:63:58:81:e4:d3:5b:16:4b:97:d1:7f:50:6f:ba:9a:0e:6d:
39:2f:18:6d:a2:c7:8f:ed:91:29:90:4d:85:71:db:ae:08:bd:
90:0d:0a:ff:bb:2e:6b:71:ae:9a:f3:74:45:91:94:72:05:61:
6b:62:c5:f1:cc:cc:21:da:95:d7:3c:be:8a:0b:72:81:9c:3c:
5a:0d:ca:64:f3:29:ec:bc:32:77:8b:ca:4a:a6:d4:85:f7:c5:
17:89:e0:68:90:25:f2:45:b1:f2:2b:be:fc:6c:ce:ab:95:50:
73:33:45:d0:4d:39:63:cb:34:7e:24:f6:4d:c4:c3:69:ea:f8:
91:a2:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 09:17:13 2026 by rpki-client