Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AyGx2TCajgOH96bMkShPbA3aArY.roa
File: AyGx2TCajgOH96bMkShPbA3aArY.roa (raw, json)
Hash identifier: tmZmrw7PUdfbeYbtB1gTpeB/ummMTghdIbcqHgq47Sw=
Subject key identifier: 03:21:B1:D9:30:9A:8E:03:87:F7:A6:CC:91:28:4F:6C:0D:DA:02:B6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DBEB033159CD1879341C8130D90C9828C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AyGx2TCajgOH96bMkShPbA3aArY.roa
Signing time: Fri 24 Apr 2026 08:51:51 +0000
ROA not before: Fri 24 Apr 2026 08:51:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 82.153.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:b0:33:15:9c:d1:87:93:41:c8:13:0d:90:c9:82:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 24 08:51:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0321b1d9309a8e0387f7a6cc91284f6c0dda02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:9e:ea:3d:31:ac:a9:55:cc:47:5a:50:b1:
bd:24:58:46:07:84:aa:81:bf:68:ed:cf:df:a4:1e:
76:2d:1b:e4:35:2c:34:59:ea:15:dd:87:3a:b2:d2:
19:5a:5a:f3:56:1a:48:a0:4f:31:44:7c:ba:5a:d9:
55:b1:ea:d7:a0:93:fe:5c:27:21:9c:96:34:71:2e:
57:e0:9f:86:f6:4c:c0:05:63:83:a2:f1:56:ce:d5:
43:55:4b:4d:f4:2d:0f:4a:df:a7:76:24:b8:b9:f8:
ea:47:bd:8f:0c:c5:8e:7f:a8:db:b8:99:58:ed:e5:
de:7c:67:dd:e1:1e:3a:ca:89:3d:f0:f6:83:14:29:
51:10:b6:10:5d:df:95:d3:70:11:1b:d8:f3:78:0d:
ef:d5:9e:90:46:16:63:4c:db:c0:d9:3b:6b:88:e7:
20:ed:d1:23:f6:72:b7:2c:0c:cb:2a:8e:14:84:af:
68:ba:10:ee:17:fe:e5:a9:44:f6:67:81:69:a6:3f:
e8:3e:77:be:90:0d:f5:c2:15:81:9b:ab:dc:c4:48:
26:37:47:af:a5:81:e0:ce:a9:a7:ea:92:5b:83:ea:
59:73:d2:70:ed:bb:64:79:00:ab:d9:c7:15:53:46:
64:73:bd:07:4f:4e:85:a6:0f:06:5f:20:ac:47:e5:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:B1:D9:30:9A:8E:03:87:F7:A6:CC:91:28:4F:6C:0D:DA:02:B6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AyGx2TCajgOH96bMkShPbA3aArY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.54.0/24
Signature Algorithm: sha256WithRSAEncryption
77:09:85:b1:9d:2a:16:63:a3:fa:c8:18:c1:5a:fa:62:c4:16:
63:9d:77:b7:d8:4e:d6:d2:79:24:d9:f7:39:fa:7b:cf:fd:dd:
ea:b5:ea:e9:a8:72:79:37:27:94:70:5d:bb:4d:c2:46:cb:a7:
ee:e9:dc:1b:62:c5:4e:a1:4a:06:6c:ef:ea:ee:32:f9:5b:d8:
fa:f0:c0:fb:8a:b1:4d:17:7f:99:69:a7:ad:b9:79:7e:9d:99:
1d:f0:79:f7:b5:15:99:c7:58:7f:c7:c6:58:97:44:09:8c:51:
8e:58:db:74:01:d6:08:02:df:8b:04:fe:88:f0:ed:4e:ea:14:
f2:b5:f6:1a:30:37:46:fb:22:b3:25:b5:7c:d0:e0:b3:df:e1:
e2:ab:33:4c:99:05:0a:29:fe:41:37:aa:a0:2f:98:8c:6f:d2:
1b:27:76:4c:96:9a:d2:00:42:b6:ed:42:cb:8f:2f:3f:a3:db:
ab:08:eb:48:29:70:7d:f4:39:8f:90:a4:29:50:55:bb:b5:2f:
3f:aa:8f:93:41:ef:83:38:58:16:8b:ab:9d:69:1a:8a:85:9c:
fc:53:3f:68:a4:01:a1:47:22:7b:12:ef:08:f9:48:d9:c4:8b:
fc:47:c0:9a:b9:b0:1a:79:5e:5c:89:c5:3b:02:ab:d1:8a:4b:
e4:be:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:20 2026 by rpki-client