Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/aagIksMopc799P33hATJVhYhv50.roa
File: aagIksMopc799P33hATJVhYhv50.roa (raw, json)
Hash identifier: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=
Subject key identifier: 69:A8:08:92:C3:28:A5:CE:FD:F4:FD:F7:84:04:C9:56:16:21:BF:9D
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019E1AE2443C7E7AC19DA478035CC3836641
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/aagIksMopc799P33hATJVhYhv50.roa
Signing time: Tue 12 May 2026 06:31:36 +0000
ROA not before: Tue 12 May 2026 06:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 91.225.225.0/24 maxlen: 24
188.191.100.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:e2:44:3c:7e:7a:c1:9d:a4:78:03:5c:c3:83:66:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 12 06:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a80892c328a5cefdf4fdf78404c9561621bf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:5b:e5:d4:98:cd:62:67:c0:35:1d:48:bf:
aa:c3:ca:ac:51:43:42:78:a0:5a:7b:1b:de:33:12:
47:55:7f:f6:b0:5c:ac:43:a3:f8:05:1c:f8:02:bd:
9f:65:b4:01:a5:ef:d4:d1:b8:3c:f4:bb:1b:ab:f5:
da:21:ba:14:84:d0:2e:90:a1:f0:3e:ac:e5:cb:5e:
b9:1e:56:75:0c:f9:83:c3:1f:e0:89:fd:19:51:89:
fd:bc:46:ec:4b:88:ae:ae:17:ca:f3:c2:33:b5:27:
c3:88:a9:ca:f6:5f:b3:fe:d9:9a:f4:29:20:9c:d6:
23:1c:45:c3:4f:b2:05:79:c2:99:66:56:09:70:ba:
6c:ba:d7:b2:64:77:c3:0a:bc:5f:83:6f:89:a9:2a:
d8:40:dd:9d:ce:4f:3d:ac:ce:67:38:c3:2d:83:20:
34:9c:19:07:80:2e:03:87:dd:04:b3:23:8c:e7:f9:
78:d0:66:b5:47:f5:cd:f7:68:4a:e0:7b:d6:96:96:
50:fe:1a:fa:51:f4:ea:02:fd:23:1c:09:1f:28:51:
dd:33:c5:31:25:7d:e0:5a:ec:3e:d6:6e:8d:5e:83:
49:03:18:65:21:85:bf:ba:bc:3e:24:c1:a2:b2:ba:
ba:ff:45:3c:28:e1:c9:80:db:a9:0f:aa:d3:88:8b:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:08:92:C3:28:A5:CE:FD:F4:FD:F7:84:04:C9:56:16:21:BF:9D
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/aagIksMopc799P33hATJVhYhv50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
188.191.100.0/24
188.191.106.0/24
Signature Algorithm: sha256WithRSAEncryption
21:57:d9:db:30:9b:c2:59:5c:38:f6:da:3d:2c:c4:0b:0f:7c:
53:e0:b7:8d:9e:99:23:7f:4c:e1:9e:24:29:02:82:3d:9b:bf:
06:eb:de:71:d6:2b:e6:0b:20:d4:a8:63:17:b7:04:06:9b:cf:
23:9f:7c:e1:ed:65:64:05:f5:7e:79:f0:2d:38:49:a7:f4:4a:
5a:e4:91:f8:d0:7d:b7:4a:6f:b2:82:63:c0:b0:0c:5d:7a:af:
03:05:90:eb:67:15:e7:1b:20:e1:ec:dd:e4:aa:50:be:68:05:
ce:f8:60:8f:27:6c:e9:80:56:06:a5:b8:eb:76:d6:11:c2:72:
d7:3f:9e:38:61:f5:9d:bf:34:cb:ff:b4:0f:ee:7e:d8:a6:d6:
15:6f:75:40:42:3a:c9:38:79:e2:d1:f0:2b:2f:5e:64:69:f1:
53:98:b9:dc:00:d4:de:76:0d:ba:53:40:69:8f:12:81:02:bd:
a7:16:2c:76:da:82:6b:24:67:f7:3a:04:80:2c:9f:0a:cb:a2:
68:ad:08:6e:4c:58:be:4e:6e:60:6d:b4:54:e0:cf:21:62:e0:
58:ee:87:43:ad:cb:5d:a1:cb:1e:89:6e:11:f6:a6:b2:3c:7f:
8f:1c:ec:00:30:5f:f0:79:fa:8c:29:8b:74:00:3b:9d:30:1a:
c6:3e:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:44 2026 by rpki-client