Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/toUOTmW0M08TLKO07jKnR26OHaE.roa
File: toUOTmW0M08TLKO07jKnR26OHaE.roa (raw, json)
Hash identifier: hAdT0FbAGUzuGcuaRxZxLT9Kd44YeNC8kzsswA4T5Gc=
Subject key identifier: B6:85:0E:4E:65:B4:33:4F:13:2C:A3:B4:EE:32:A7:47:6E:8E:1D:A1
Certificate issuer: /CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Certificate serial: 01A177BC338FEF2037A36071C75F510B153A
Authority key identifier: E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/toUOTmW0M08TLKO07jKnR26OHaE.roa
Signing time: Mon 26 Oct 2026 10:23:05 +0000
ROA not before: Mon 26 Oct 2026 10:23:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3215
IP address blocks: 158.156.156.0/24 maxlen: 24
158.156.163.0/24 maxlen: 24
158.156.173.0/24 maxlen: 24
158.156.175.0/24 maxlen: 24
158.156.183.0/24 maxlen: 24
158.156.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:bc:33:8f:ef:20:37:a3:60:71:c7:5f:51:0b:15:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Validity
Not Before: Oct 26 10:23:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6850e4e65b4334f132ca3b4ee32a7476e8e1da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:2b:21:44:01:cd:a0:82:34:96:14:71:20:
cb:bb:4a:47:25:5c:9c:28:78:63:89:ed:32:d8:74:
ab:20:72:07:75:01:63:b1:28:b3:8c:04:1e:a1:b6:
fc:8e:8d:7e:2d:9a:75:03:09:ed:71:33:95:78:0c:
1b:2f:13:06:9a:54:6f:d2:01:bb:8f:34:ca:48:9d:
e5:7a:55:fa:ad:89:0d:71:e0:44:28:ee:63:33:33:
72:4f:d4:f2:27:10:84:5f:1e:2a:74:7a:ea:a5:52:
f6:53:37:c8:6a:49:0b:1d:35:5f:60:38:c9:76:25:
cb:58:50:5f:55:9b:ab:e9:6a:ea:20:4c:20:90:24:
83:fc:f8:53:1f:2d:f4:0c:b6:44:c7:ef:e8:0e:32:
1b:aa:e0:39:21:14:78:69:12:a2:19:44:03:a4:4c:
d3:54:b7:87:86:9e:81:96:bf:06:70:15:02:87:91:
41:76:f5:77:2d:80:66:b2:b9:fa:2c:ca:ad:12:a9:
15:2f:0f:06:77:83:91:5e:28:27:26:3f:c2:63:d0:
d8:bc:2f:af:7d:0a:35:18:9e:76:ec:d2:f8:08:51:
39:12:1f:a9:cb:92:3e:d3:94:e2:a9:47:9d:82:f6:
25:ad:51:55:c8:fd:c5:32:b6:f3:25:15:54:38:ea:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:85:0E:4E:65:B4:33:4F:13:2C:A3:B4:EE:32:A7:47:6E:8E:1D:A1
X509v3 Authority Key Identifier:
keyid:E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/toUOTmW0M08TLKO07jKnR26OHaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.156.156.0/24
158.156.163.0/24
158.156.173.0/24
158.156.175.0/24
158.156.183.0/24
158.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:97:1f:2e:7c:35:17:7f:1d:82:e3:30:c2:5f:31:f4:1a:95:
bb:db:93:01:27:f7:29:0a:40:eb:87:05:3d:29:66:15:4b:82:
50:aa:bf:80:cb:56:db:c6:59:e9:c5:b1:f9:dc:7c:47:5d:57:
fe:80:4b:5c:6a:f5:f0:70:4a:60:35:b1:00:65:ec:70:4c:86:
26:a9:d3:d9:87:b7:f7:6e:b7:ba:47:17:b5:cb:7f:5e:8e:2c:
8e:90:6c:d7:84:4a:56:b5:5c:fc:d3:99:c6:5e:7e:5b:5f:0c:
28:d1:66:ea:6d:c3:24:b0:8b:e4:90:f8:f0:51:72:83:80:c5:
ce:53:0d:3c:e1:0c:5e:23:75:ee:9d:51:b4:b3:25:ee:19:23:
62:84:17:cf:4a:f6:f3:2c:12:56:fa:81:c0:ef:b5:5a:cc:c9:
27:90:b0:55:3a:94:e1:ca:a6:12:fa:e0:24:9c:f0:87:f1:00:
d9:32:ce:70:c2:4f:76:26:56:2f:28:8c:2a:db:cf:48:fc:ef:
b7:04:cb:97:51:38:7f:84:fa:60:9e:23:3a:59:bc:b4:cf:6c:
f7:e1:d9:97:86:93:d2:cd:ce:9c:88:0e:7b:36:db:c5:11:9b:
51:a1:3e:09:85:3e:eb:09:75:5d:e0:30:66:3e:15:32:f1:15:
f4:74:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:00 2026 by rpki-client