Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa
File: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (raw, json)
Hash identifier: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=
Subject key identifier: 00:4A:64:42:49:1F:2C:6E:AB:26:6E:CD:03:25:A5:6B:1B:76:08:CB
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019D78F2F02C7A008CE4ED8B0CADF3D148AE
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa
Signing time: Fri 10 Apr 2026 19:51:20 +0000
ROA not before: Fri 10 Apr 2026 19:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5398
IP address blocks: 45.143.158.0/24 maxlen: 24
45.143.159.0/24 maxlen: 24
77.220.64.0/19 maxlen: 19
193.221.216.0/23 maxlen: 23
2a0f:e880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:f2:f0:2c:7a:00:8c:e4:ed:8b:0c:ad:f3:d1:48:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Apr 10 19:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=004a6442491f2c6eab266ecd0325a56b1b7608cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:e2:a9:c9:ec:9d:46:67:25:91:25:50:1b:
c6:07:57:fe:6c:fc:7e:35:b1:79:69:ed:73:3a:5e:
bd:7a:ae:a6:92:03:c9:c0:88:ac:74:73:09:b2:c2:
14:9d:fe:52:5e:1b:c4:6d:d4:36:fe:47:d1:55:87:
3f:83:45:49:d1:d3:1b:67:e1:36:a4:17:d9:38:a4:
99:9d:6d:a4:12:28:e8:60:ab:e3:b2:17:63:06:35:
cb:49:55:d2:95:27:9e:89:a2:1c:e0:00:af:f9:5f:
75:60:30:f1:93:d3:7d:41:9f:cd:4e:f5:3d:1a:b8:
50:2f:a5:a1:80:8a:ae:75:91:4a:c9:7c:47:92:96:
25:78:d5:d6:86:f5:48:73:0e:cd:50:5e:5c:7c:3b:
94:5d:d1:d8:a3:8a:0b:56:59:e2:2f:25:06:de:a1:
9c:00:57:3d:20:40:02:e4:23:83:25:72:34:9a:4a:
bd:5f:95:49:8b:ca:a3:09:10:26:32:de:2a:00:7f:
a9:23:c4:5d:d8:b3:81:33:f6:8d:a0:6a:a2:96:10:
9b:65:94:a6:68:e8:72:3f:5e:02:c4:40:8d:8d:00:
12:2d:23:52:f6:f3:c1:04:40:6b:fc:78:13:84:fc:
f3:8e:ae:df:dd:d4:a6:bd:eb:ee:ef:6e:a0:4a:69:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:64:42:49:1F:2C:6E:AB:26:6E:CD:03:25:A5:6B:1B:76:08:CB
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.158.0/23
77.220.64.0/19
193.221.216.0/23
IPv6:
2a0f:e880::/29
Signature Algorithm: sha256WithRSAEncryption
86:b2:91:b2:f3:9c:a9:14:c9:24:c0:44:d8:6a:d7:ea:1e:2b:
7b:7e:88:dd:99:be:75:05:58:0d:5d:87:23:55:bc:eb:1b:c0:
4d:c9:c2:5c:4f:04:2d:c8:21:0c:78:95:fe:bb:5a:a5:df:b4:
41:56:c7:55:03:f7:5b:13:97:78:7a:bb:b2:73:a9:14:4f:85:
78:c2:06:7b:42:54:42:0a:b5:6f:1a:18:63:ae:55:b2:26:b2:
e5:f9:95:fa:e0:0b:9a:39:dc:28:c1:ac:85:b0:ed:60:37:e0:
e9:b6:b5:63:55:b5:9e:54:3b:c5:ca:8a:df:cd:bc:33:49:21:
7b:d5:ef:81:47:a6:3e:b6:1e:27:64:88:48:e2:41:60:26:47:
9d:6a:11:0f:86:84:9f:36:60:03:f7:94:f3:1c:04:05:0d:61:
25:8d:10:28:87:dd:f3:e3:74:00:b9:6c:5a:d1:d2:12:12:60:
86:2d:d5:06:90:4e:a3:42:77:d9:5f:d3:11:ae:43:17:ae:eb:
4a:f5:19:f2:a6:a3:47:9b:8c:f8:84:c3:b3:99:37:00:51:a9:
3c:06:59:67:0c:f1:27:45:ba:47:09:88:31:bf:aa:52:bc:4d:
0e:7b:a2:4b:ab:27:18:17:21:99:d5:45:33:39:9f:70:f7:e3:
8b:66:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:01 2026 by rpki-client