Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AIXE1IYivo2_FHeiJTqPyOilC9s.roa
File: AIXE1IYivo2_FHeiJTqPyOilC9s.roa (raw, json)
Hash identifier: bocAO2CA3zUatXXpWyANo1kFxN1aaQCxsee8nQsWGdE=
Subject key identifier: 00:85:C4:D4:86:22:BE:8D:BF:14:77:A2:25:3A:8F:C8:E8:A5:0B:DB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F5F8977DCD11530E0AC17A89377A71EFF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AIXE1IYivo2_FHeiJTqPyOilC9s.roa
Signing time: Tue 14 Jul 2026 07:31:12 +0000
ROA not before: Tue 14 Jul 2026 07:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 62.41.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:89:77:dc:d1:15:30:e0:ac:17:a8:93:77:a7:1e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 14 07:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0085c4d48622be8dbf1477a2253a8fc8e8a50bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:ce:4e:85:d8:a4:70:d5:5d:4f:4e:07:6d:
1e:30:bc:91:81:d7:14:e8:02:88:f3:39:76:fb:9b:
94:97:91:26:25:11:b7:c0:95:2b:3f:1b:92:ae:ac:
b7:ed:b5:83:58:7b:8c:54:66:93:ab:53:62:95:d4:
5c:0a:41:0c:ee:27:28:2b:28:27:f4:81:7a:1f:73:
1b:32:94:a9:a5:75:71:b8:c9:ba:e9:40:c3:f4:86:
b5:7e:37:46:a1:1b:d6:35:3c:59:73:1c:cb:41:ee:
c5:7f:c8:f8:14:5b:4a:22:88:a3:87:b5:b0:3a:0c:
77:a3:8c:cd:21:19:27:ac:a4:e3:51:d9:fb:b3:cd:
11:96:f5:bb:6e:1c:f5:f2:30:a1:c7:2c:f0:d6:9d:
db:80:c5:1c:2e:2d:89:af:87:15:7d:b7:d7:7b:7b:
49:24:5a:0b:63:7c:5f:a8:9f:d3:af:3a:e1:59:66:
01:d5:32:e9:41:9a:02:eb:ab:82:af:d5:59:d0:94:
f6:8e:69:75:bb:b2:ff:65:dd:2a:02:0d:5a:74:bf:
d5:88:01:be:a5:bb:d6:41:1b:8f:e9:10:d1:80:58:
35:de:d4:e1:e8:a7:3b:9e:f8:8b:34:2a:62:16:f5:
06:eb:fe:73:d0:65:d4:79:88:78:64:ba:0a:c7:46:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:C4:D4:86:22:BE:8D:BF:14:77:A2:25:3A:8F:C8:E8:A5:0B:DB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AIXE1IYivo2_FHeiJTqPyOilC9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.27.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:f0:42:38:b4:48:36:06:95:8c:03:d1:c0:ae:91:1c:6e:4d:
cb:a1:ed:c2:cf:e9:ae:af:32:e2:26:ff:56:b0:99:3b:a3:86:
5a:97:ac:ff:0c:b8:44:63:42:e8:68:df:ad:ca:42:0a:36:72:
a0:13:83:6c:82:f4:08:a5:32:5c:5b:6d:b6:ac:19:a8:f4:87:
1b:94:43:9b:68:bd:e4:67:a7:13:3f:50:f9:6b:f1:48:70:0b:
0c:3f:72:17:48:56:70:ed:44:8c:5e:c5:d5:d8:e5:ab:25:f7:
4d:53:ef:41:95:82:2c:95:0a:b3:86:c7:96:b7:6a:58:03:ec:
9e:03:1c:a1:3d:3d:07:3e:5e:13:4e:5e:d7:e6:24:65:da:1b:
8a:18:d5:16:d0:f5:39:51:5c:2a:8e:a2:91:b6:61:47:4a:0f:
a3:26:c8:a2:e3:3c:f7:72:ab:7f:d3:19:d8:69:1a:e9:97:85:
b0:89:f6:62:fc:b8:d8:17:4b:09:9a:5c:cc:7b:2c:7b:fe:44:
ca:4a:63:b4:f5:fc:0e:03:c3:3c:97:22:71:db:b1:1c:81:63:
4c:c2:20:46:01:7b:14:3d:fc:53:85:0e:33:03:af:93:75:6d:
bc:80:2e:8b:7a:9c:00:1a:63:4a:3c:ff:74:ee:ae:b5:95:70:
d2:4a:d9:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9fiXfc0RUw4KwXqJN3px7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzE0MDczMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDg1YzRkNDg2MjJiZThkYmYxNDc3YTIyNTNhOGZjOGU4YTUwYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiPOToXYpHDVXU9OB20eMLyRgdcU
6AKI8zl2+5uUl5EmJRG3wJUrPxuSrqy37bWDWHuMVGaTq1NildRcCkEM7icoKygn
9IF6H3MbMpSppXVxuMm66UDD9Ia1fjdGoRvWNTxZcxzLQe7Ff8j4FFtKIoijh7Ww
Ogx3o4zNIRknrKTjUdn7s80RlvW7bhz18jChxyzw1p3bgMUcLi2Jr4cVfbfXe3tJ
JFoLY3xfqJ/TrzrhWWYB1TLpQZoC66uCr9VZ0JT2jml1u7L/Zd0qAg1adL/ViAG+
pbvWQRuP6RDRgFg13tTh6Kc7nviLNCpiFvUG6/5z0GXUeYh4ZLoKx0acuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACFxNSGIr6NvxR3oiU6j8jopQvbMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvQUlYRTFJWWl2bzJfRkhlaUpUcVB5T2lsQzlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPikbMA0G
CSqGSIb3DQEBCwUAA4IBAQDC8EI4tEg2BpWMA9HArpEcbk3Loe3Cz+murzLiJv9W
sJk7o4Zal6z/DLhEY0LoaN+tykIKNnKgE4NsgvQIpTJcW222rBmo9IcblEObaL3k
Z6cTP1D5a/FIcAsMP3IXSFZw7USMXsXV2OWrJfdNU+9BlYIslQqzhseWt2pYA+ye
AxyhPT0HPl4TTl7X5iRl2huKGNUW0PU5UVwqjqKRtmFHSg+jJsii4zz3cqt/0xnY
aRrpl4WwifZi/LjYF0sJmlzMeyx7/kTKSmO09fwOA8M8lyJx27EcgWNMwiBGAXsU
PfxThQ4zA6+TdW28gC6LepwAGmNKPP907q61lXDSStk1
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:56 2026 by rpki-client