Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/6hrkPbsvm0A3PEOtrpWwvrlK67w.roa
File: 6hrkPbsvm0A3PEOtrpWwvrlK67w.roa (raw, json)
Hash identifier: feSlt07kBVGw5KnVdjnlvFJ8OMIxq/T/Sknd6xgCDUc=
Subject key identifier: EA:1A:E4:3D:BB:2F:9B:40:37:3C:43:AD:AE:95:B0:BE:B9:4A:EB:BC
Certificate issuer: /CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Certificate serial: 01A17CBDE6AFA79C72848EF8A58508F59589
Authority key identifier: E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/6hrkPbsvm0A3PEOtrpWwvrlK67w.roa
Signing time: Tue 27 Oct 2026 09:43:01 +0000
ROA not before: Tue 27 Oct 2026 09:43:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 158.156.155.0/24 maxlen: 24
158.156.162.0/24 maxlen: 24
158.156.172.0/24 maxlen: 24
158.156.182.0/24 maxlen: 24
158.156.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:bd:e6:af:a7:9c:72:84:8e:f8:a5:85:08:f5:95:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Validity
Not Before: Oct 27 09:43:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1ae43dbb2f9b40373c43adae95b0beb94aebbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:cb:9a:1a:b3:79:7a:6b:41:6e:e9:b4:97:
59:d7:47:fe:60:16:47:77:81:56:90:98:59:30:ec:
40:ef:90:1f:0d:24:b8:13:f7:19:c8:13:4e:ab:e8:
8a:3e:c7:5c:d3:89:dc:d1:7a:18:37:d7:3b:09:28:
d0:ba:d1:40:36:7f:76:0d:c6:10:43:fe:42:a2:76:
97:a1:16:ca:df:9d:7b:d0:7f:55:41:8e:62:66:9a:
8a:3d:87:60:68:9b:b3:59:50:fe:e2:08:d3:03:8a:
ea:52:f5:83:88:37:3b:33:d9:27:21:22:e5:24:62:
84:05:f3:6a:04:22:9a:f8:d0:60:45:58:b0:aa:e5:
f5:8c:3c:f7:d7:e0:0b:0f:07:19:9b:21:83:0f:05:
11:c5:1f:cf:1d:6e:78:87:d4:ff:46:79:33:0c:94:
cd:f8:59:a7:8a:fa:18:f0:9a:b9:9e:60:7e:b7:39:
4a:aa:6b:c4:68:d7:28:bb:06:03:dd:2e:ac:e7:9b:
81:3e:1b:19:c0:33:c5:35:b3:aa:54:f9:bc:e1:0c:
da:3b:e1:13:65:fd:78:77:58:33:e3:b9:d3:f2:77:
7a:d2:e0:6b:d7:e0:b3:0f:57:af:dc:2a:b4:fe:91:
f9:2e:cf:cc:82:9a:8f:01:ff:a4:64:0d:83:6d:2e:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1A:E4:3D:BB:2F:9B:40:37:3C:43:AD:AE:95:B0:BE:B9:4A:EB:BC
X509v3 Authority Key Identifier:
keyid:E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/6hrkPbsvm0A3PEOtrpWwvrlK67w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.156.155.0/24
158.156.162.0/24
158.156.172.0/24
158.156.182.0/24
158.156.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c4:1d:27:a2:22:a7:21:8c:e1:47:19:49:8b:45:57:08:f6:
e6:98:59:98:3e:b1:6e:79:c0:35:fb:b7:65:29:15:2d:ef:86:
cd:6f:e8:b3:a8:15:06:04:ee:c8:a6:2c:e2:be:17:86:75:20:
0c:9a:00:eb:01:a0:ce:d3:60:38:2b:ce:7f:22:a3:b7:b3:34:
58:84:f6:55:fe:41:6c:f0:42:ec:33:07:6a:e3:ab:9c:50:0a:
4c:1e:d6:54:fc:3d:a3:0d:ed:cc:e5:72:a1:66:71:9e:18:65:
50:e6:b0:be:9b:1a:73:73:61:85:4d:df:f9:bb:d0:f1:c1:8b:
f7:20:3a:8d:06:63:76:ca:50:a3:56:f4:04:f5:dd:20:c5:b3:
ed:ab:5f:cc:2f:59:0f:70:e8:c4:37:93:70:87:6f:40:2e:47:
0b:47:41:af:d4:45:d6:f2:55:7d:f4:8a:c3:e5:43:20:70:07:
94:72:14:c6:c9:aa:98:54:4b:d8:57:4f:79:7c:05:70:bb:cb:
f9:7c:84:84:7f:3f:09:88:1a:bc:a1:fa:b1:a4:ff:0c:83:e2:
aa:30:6c:f1:7b:66:bb:54:83:10:19:e7:f8:81:32:ba:6c:a3:
e1:c7:85:1a:3a:e9:65:1e:3b:47:76:a2:33:4c:cb:cf:e0:c7:
60:13:51:7b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaF8veavp5xyhI74pYUI9ZWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOWVlMWIyYzFiOGRmMTYzODY3YTI0MmEzMGZkZWE1NGYw
MWRlMzQwHhcNMjYxMDI3MDk0MzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTFhZTQzZGJiMmY5YjQwMzczYzQzYWRhZTk1YjBiZWI5NGFlYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8vLmhqzeXprQW7ptJdZ10f+YBZH
d4FWkJhZMOxA75AfDSS4E/cZyBNOq+iKPsdc04nc0XoYN9c7CSjQutFANn92DcYQ
Q/5ConaXoRbK35170H9VQY5iZpqKPYdgaJuzWVD+4gjTA4rqUvWDiDc7M9knISLl
JGKEBfNqBCKa+NBgRViwquX1jDz31+ALDwcZmyGDDwURxR/PHW54h9T/RnkzDJTN
+FmnivoY8Jq5nmB+tzlKqmvEaNcouwYD3S6s55uBPhsZwDPFNbOqVPm84QzaO+ET
Zf14d1gz47nT8nd60uBr1+CzD1ev3Cq0/pH5Ls/MgpqPAf+kZA2DbS5B8wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOoa5D27L5tANzxDra6VsL65Suu8MB8GA1UdIwQY
MBaAFOCe4bLBuN8WOGeiQqMP3qVPAd40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEo3aHNzRzQzeFk0WjZKQ293X2VwVThCM2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNDllYzctOWYxOS00NTJhLThjNzct
MTlmZTUxMmZmYjQ2LzEvNmhya1Bic3ZtMEEzUEVPdHJwV3d2cmxLNjd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hNDllYzctOWYxOS00NTJhLThjNzctMTlmZTUxMmZmYjQ2
LzEvNEo3aHNzRzQzeFk0WjZKQ293X2VwVThCM2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAnpybAwQA
npyiAwQAnpysAwQAnpy2AwQAnpzBMA0GCSqGSIb3DQEBCwUAA4IBAQB7xB0noiKn
IYzhRxlJi0VXCPbmmFmYPrFuecA1+7dlKRUt74bNb+izqBUGBO7IpizivheGdSAM
mgDrAaDO02A4K85/IqO3szRYhPZV/kFs8ELsMwdq46ucUApMHtZU/D2jDe3M5XKh
ZnGeGGVQ5rC+mxpzc2GFTd/5u9DxwYv3IDqNBmN2ylCjVvQE9d0gxbPtq1/ML1kP
cOjEN5Nwh29ALkcLR0Gv1EXW8lV99IrD5UMgcAeUchTGyaqYVEvYV095fAVwu8v5
fISEfz8JiBq8ofqxpP8Mg+KqMGzxe2a7VIMQGef4gTK6bKPhx4UaOullHjtHdqIz
TMvP4MdgE1F7
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:37:13 2026 by rpki-client