Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/aecG-UrRCvNF8-zxKB-MJJ91DJA.roa
File: aecG-UrRCvNF8-zxKB-MJJ91DJA.roa (raw, json)
Hash identifier: iuPKh30JGSUKp64fOMK86xBDmaIh09F0AulkyXe0ZLg=
Subject key identifier: 69:E7:06:F9:4A:D1:0A:F3:45:F3:EC:F1:28:1F:8C:24:9F:75:0C:90
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A03CFDE7482E69C18D94F42A12CEB2B792
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/aecG-UrRCvNF8-zxKB-MJJ91DJA.roa
Signing time: Wed 26 Aug 2026 07:34:27 +0000
ROA not before: Wed 26 Aug 2026 07:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 87.58.222.0/23 maxlen: 23
150.251.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:fd:e7:48:2e:69:c1:8d:94:f4:2a:12:ce:b2:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 26 07:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e706f94ad10af345f3ecf1281f8c249f750c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:9e:1e:db:19:c1:ab:61:a3:2c:82:e9:23:
b5:e9:19:91:31:2c:4a:db:11:4d:a9:fd:c9:23:63:
23:bb:52:4e:12:b8:de:5e:fa:62:de:01:6d:2e:ac:
a6:9c:5c:98:b4:dc:03:57:9e:ec:8f:30:79:4b:e3:
8d:dd:78:e1:ec:3c:23:94:c7:82:af:3c:e9:88:8e:
8d:15:41:55:f2:e3:5c:77:60:d0:51:da:b3:dc:36:
98:aa:9c:a1:7d:3e:7d:1c:cc:09:70:3e:6a:95:6e:
93:ef:44:c9:f3:de:6a:45:ae:67:a0:cf:41:d7:16:
95:27:c3:bc:53:b8:6e:4d:4d:72:4c:b1:ea:3e:b0:
63:31:f8:9b:80:d9:ec:1f:9a:eb:c8:cf:7f:2b:f6:
9f:b0:ec:0b:8c:5f:26:71:f3:df:07:b3:1f:b3:26:
ec:12:53:24:35:01:40:84:de:6f:8b:d3:66:1b:e3:
0d:0c:96:1b:2e:55:cf:5d:a8:c8:87:e1:4f:9f:e5:
6a:0a:2e:6d:d2:97:6f:34:6e:47:d9:d4:5e:b9:4f:
59:5d:10:a4:de:b9:f6:80:62:10:67:98:6e:02:3c:
15:57:a7:3f:d1:b3:2a:eb:4a:e0:bf:a0:cb:b8:6d:
80:b2:4c:28:53:dc:fd:68:ea:e2:0e:7d:12:f8:0e:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:06:F9:4A:D1:0A:F3:45:F3:EC:F1:28:1F:8C:24:9F:75:0C:90
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/aecG-UrRCvNF8-zxKB-MJJ91DJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.222.0/23
150.251.144.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3f:45:24:25:d7:fa:75:90:62:ab:73:14:8b:af:76:c3:0a:
0d:ef:4c:d1:95:7d:87:a7:9a:44:f6:21:8f:fb:95:15:96:bb:
7e:ee:92:c7:65:cd:ad:1d:8c:96:f4:1e:c7:b2:a9:c5:44:f3:
a1:28:3a:5c:0c:cb:8b:c9:ca:a9:43:e2:ed:97:67:0f:0e:73:
41:38:b4:c4:33:1c:17:18:67:1b:1f:45:40:d6:4f:4e:21:ee:
15:f5:95:7f:16:53:2f:60:8f:de:40:e4:6b:70:c0:4d:5a:b0:
48:60:31:a5:c7:2e:84:2b:60:73:ea:a1:83:1f:f3:2b:85:e6:
10:20:6c:86:19:d6:8f:98:69:d7:1c:85:82:2d:03:a3:99:33:
61:23:a0:7a:d9:dd:fd:c0:7f:62:2e:8e:a1:b2:d1:ee:01:b1:
6e:ea:61:a6:d9:5d:da:01:1e:c8:35:97:b6:a5:62:b0:89:59:
f3:55:c9:09:60:8e:8b:19:5d:bc:b1:53:5d:20:ec:1a:c2:50:
ae:e3:38:4e:67:57:8d:43:e4:29:4d:65:be:e1:dc:4a:0f:5c:
c1:f8:ef:a1:94:d1:12:af:03:03:ed:4a:bc:fe:44:f9:ac:d9:
4a:64:54:b4:ae:98:dc:a8:6c:4a:ad:c4:6c:f7:d8:c9:17:00:
4f:72:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:35 2026 by rpki-client