Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/aiWvgSfnwbnLlzyTpx8toxkUKEw.roa
File: aiWvgSfnwbnLlzyTpx8toxkUKEw.roa (raw, json)
Hash identifier: yBRys49Mvvm6+/VlItOHtileiNejv8QSbeDxO1U1PhI=
Subject key identifier: 6A:25:AF:81:27:E7:C1:B9:CB:97:3C:93:A7:1F:2D:A3:19:14:28:4C
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019DFC95DA3E80B977A0F9CA3F31B80AA25A
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/aiWvgSfnwbnLlzyTpx8toxkUKEw.roa
Signing time: Wed 06 May 2026 09:19:32 +0000
ROA not before: Wed 06 May 2026 09:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209042
IP address blocks: 5.182.248.0/22 maxlen: 25
5.182.249.0/24 maxlen: 24
5.182.250.0/24 maxlen: 24
5.182.251.0/24 maxlen: 24
2a0e:a400::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:95:da:3e:80:b9:77:a0:f9:ca:3f:31:b8:0a:a2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: May 6 09:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a25af8127e7c1b9cb973c93a71f2da31914284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:6d:fb:c1:09:61:7c:10:5c:92:c4:11:ae:
15:08:df:7e:6f:97:22:8e:35:c0:ab:81:b5:51:e2:
8c:57:bd:52:a1:07:14:18:80:4b:62:69:18:c2:1e:
59:2e:70:2b:d1:35:00:c7:d3:2c:46:f0:82:83:1d:
7a:84:c3:db:e7:b2:62:1c:ce:b8:71:a9:7d:93:75:
bd:fa:15:02:b6:1a:a4:3d:f8:e2:64:ee:5d:4e:8f:
8a:1d:0c:4d:69:9b:25:25:1a:39:a4:59:8c:ff:86:
fb:b5:f2:72:58:3c:3f:d4:2e:38:40:53:39:65:12:
10:53:2e:8d:36:15:e1:59:54:58:07:67:d2:3e:bd:
f0:07:40:fd:43:c3:03:ad:db:78:4f:11:b1:02:88:
94:fe:fa:1f:08:40:b5:6b:47:d2:c7:d3:38:c5:fd:
ef:30:fd:ce:be:45:5e:b8:bd:6d:15:00:52:a4:b5:
7e:02:30:d2:97:41:96:43:dc:3b:16:30:ba:b2:f1:
6d:c0:10:fe:6a:94:25:15:3b:50:1f:07:a1:90:fa:
33:b1:b3:4a:04:a0:10:38:f5:b6:d6:09:71:e5:29:
31:78:77:56:9f:a1:6d:14:24:11:fa:6e:bf:a6:e9:
d0:b6:f5:99:86:7e:70:28:fe:65:ee:59:67:d8:c2:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:25:AF:81:27:E7:C1:B9:CB:97:3C:93:A7:1F:2D:A3:19:14:28:4C
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/aiWvgSfnwbnLlzyTpx8toxkUKEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.248.0/22
IPv6:
2a0e:a400::/29
Signature Algorithm: sha256WithRSAEncryption
6e:39:13:cb:e8:8c:70:7b:59:b5:8f:08:93:3a:c4:35:ac:df:
cd:e2:46:05:04:56:cb:95:67:6e:4a:3e:1a:53:e2:dc:9b:ce:
9e:04:f9:15:c6:2c:e9:a8:48:3b:46:54:0f:20:67:a2:ae:0a:
a5:bc:a8:db:a7:01:82:63:4f:7d:19:6b:9f:b4:f3:46:9f:32:
f6:45:28:b4:c4:37:1a:80:e4:39:4d:dd:a3:85:dd:c4:45:10:
f2:71:04:ff:fe:cc:9d:95:0a:be:29:47:24:3d:82:c6:87:ce:
9d:ab:19:ba:f2:f1:20:67:0c:76:d6:a0:7b:e2:50:2e:fb:ae:
96:dc:3c:cb:71:8b:08:74:da:01:66:30:52:65:00:d5:d5:8f:
9c:ad:55:2b:cd:1b:1e:db:f7:44:d7:fc:e3:6e:f5:b4:2b:b4:
46:48:9f:36:7e:69:7e:15:6d:45:df:60:74:18:c2:95:eb:94:
0d:a6:b2:4c:43:96:f9:05:d2:16:e6:29:a3:3c:b8:98:ef:3a:
87:bd:05:6f:50:f9:68:88:3a:6d:59:d5:b8:23:1d:d9:ed:7e:
46:dd:ff:7f:bb:2a:9f:bb:4b:07:62:f4:a8:7c:b5:d3:b1:79:
a9:41:f2:be:5f:3d:f5:c9:45:11:0a:c2:62:0a:f0:db:31:41:
6f:65:84:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:24 2026 by rpki-client