Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/aEgfxGBED_4qs62is2tYteIzsJs.roa
File: aEgfxGBED_4qs62is2tYteIzsJs.roa (raw, json)
Hash identifier: 1lt/1E5WYG+3Ra7s94kP4j/WRmJkYHKY/VxFl0nCOkA=
Subject key identifier: 68:48:1F:C4:60:44:0F:FE:2A:B3:AD:A2:B3:6B:58:B5:E2:33:B0:9B
Certificate issuer: /CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Certificate serial: 01A15DA4CC315540C9E783A4919D240AC122
Authority key identifier: E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/aEgfxGBED_4qs62is2tYteIzsJs.roa
Signing time: Wed 21 Oct 2026 08:47:23 +0000
ROA not before: Wed 21 Oct 2026 08:47:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2830
IP address blocks: 158.156.174.0/24 maxlen: 24
158.156.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:a4:cc:31:55:40:c9:e7:83:a4:91:9d:24:0a:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Validity
Not Before: Oct 21 08:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68481fc460440ffe2ab3ada2b36b58b5e233b09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:73:f5:b8:96:89:6b:11:96:d8:64:b3:fb:
c2:a2:de:b3:34:3d:a8:ef:9d:b4:49:00:d7:dc:5d:
55:07:5d:e5:a5:88:45:ec:39:e6:db:c2:49:25:8d:
de:f9:5f:a2:da:5c:77:63:a3:d5:e1:af:c3:81:a4:
cf:cc:24:fa:d1:95:bc:66:86:9f:0e:92:f3:6c:5a:
c1:49:65:9b:d6:b8:cd:33:d8:e3:8f:3b:31:f0:b2:
46:e0:59:5c:5f:8e:5f:88:c8:d8:db:72:7b:23:26:
a3:9c:74:41:fe:7c:e3:36:4f:55:77:c2:2a:ad:51:
0e:a5:80:4a:a2:ed:db:81:ca:6e:52:0c:09:36:dd:
93:c2:e5:ab:22:4a:c4:0e:9f:58:84:1b:b2:18:7d:
54:bc:b4:be:28:95:61:de:6e:f4:c2:43:5c:fe:03:
7a:52:09:04:42:0b:3b:19:bb:c2:d5:7b:31:d7:46:
12:21:5a:de:b2:16:8b:ec:02:9f:e0:3f:0d:f3:d1:
de:3b:a4:40:5c:d6:a3:6a:3a:2f:ca:2e:a2:c8:3c:
5a:e6:35:d7:b6:56:c4:e3:26:48:3c:5b:5e:0b:f6:
a9:b3:ae:96:ab:49:96:32:94:40:93:b6:00:98:d1:
50:91:5f:5a:d8:cc:87:ed:fc:4a:2d:b9:82:4d:0e:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:1F:C4:60:44:0F:FE:2A:B3:AD:A2:B3:6B:58:B5:E2:33:B0:9B
X509v3 Authority Key Identifier:
keyid:E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/aEgfxGBED_4qs62is2tYteIzsJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.156.174.0/24
158.156.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6a:e2:5f:2e:e7:1e:d8:1b:d7:97:0c:a0:a8:d5:17:4b:27:
6d:c7:a7:20:4c:46:aa:25:1a:4c:55:61:16:c4:67:1b:f9:40:
01:54:c3:2e:f5:2e:70:b4:b4:4a:0d:b9:d0:87:4f:31:b5:a0:
93:2f:ea:96:5d:44:64:9d:88:cb:1b:86:13:17:3c:ef:56:a8:
21:47:e2:c4:75:8e:d0:96:24:af:51:7d:09:81:2e:f7:a4:2c:
43:c2:62:8c:01:2a:4d:d5:45:5e:67:94:50:b9:88:7b:c3:39:
bc:26:c5:14:f2:60:9e:5c:54:f4:ad:90:f9:c2:08:68:e0:5e:
19:36:d5:d0:24:54:8c:29:20:f7:5b:a7:2a:dd:5c:e8:26:15:
7a:5a:0b:44:d6:f0:cd:9d:d4:89:ba:63:6b:8f:3a:41:a9:73:
96:fc:9d:25:ba:59:2d:80:47:e6:75:a7:d6:d4:89:93:24:f4:
0f:0d:4b:cb:4c:c6:55:69:90:0a:31:b9:6b:fb:71:32:f8:02:
b4:27:1b:00:35:02:cf:96:26:56:1e:b4:45:76:21:80:01:7b:
99:91:29:7d:ad:e6:91:f2:4d:1f:69:f6:c7:fe:84:26:72:31:
a9:a5:33:10:7d:5d:61:11:05:6b:2a:e7:39:b0:b1:11:5e:fe:
be:c1:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:58 2026 by rpki-client