Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AiLnsQpKE9JmQfcAKeMVvKZrm28.roa
File: AiLnsQpKE9JmQfcAKeMVvKZrm28.roa (raw, json)
Hash identifier: zoF9MQmkzdC4nuDxJl0cqScH/6UTDD4cYsxEL02TZ+k=
Subject key identifier: 02:22:E7:B1:0A:4A:13:D2:66:41:F7:00:29:E3:15:BC:A6:6B:9B:6F
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01A181E79351FBBED7E68917D92702F5A827
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AiLnsQpKE9JmQfcAKeMVvKZrm28.roa
Signing time: Wed 28 Oct 2026 09:46:39 +0000
ROA not before: Wed 28 Oct 2026 09:46:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24964
IP address blocks: 82.103.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:e7:93:51:fb:be:d7:e6:89:17:d9:27:02:f5:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Oct 28 09:46:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0222e7b10a4a13d26641f70029e315bca66b9b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:05:4f:04:95:0d:7a:cd:cc:75:17:ad:9c:
51:79:5b:08:04:ed:dc:57:92:82:55:3e:9f:67:d3:
33:52:fc:ad:76:8b:2a:48:00:7c:66:f1:fb:8f:12:
9c:cb:fd:12:51:05:e7:88:82:12:3a:64:c0:9a:4f:
92:ff:29:fe:12:fb:b7:01:ae:e4:21:b9:da:99:77:
c4:e2:ed:49:21:06:2e:3f:bf:df:10:c3:7d:eb:fd:
b9:d6:10:b3:2f:d7:64:f0:d7:12:2b:13:8c:9c:4d:
30:13:34:a8:2f:cf:3a:4c:83:84:02:f8:54:08:d0:
7b:65:3b:f6:7d:50:7e:84:3e:58:75:cc:86:71:c5:
8a:c7:1d:c6:96:2f:d5:fe:5e:86:28:b5:46:13:2a:
aa:53:b1:fc:5a:d4:4d:31:ac:35:c9:6b:45:eb:25:
8d:5a:9b:0a:6c:e2:57:70:be:55:f1:8d:41:f1:32:
90:34:3c:66:9a:c4:68:96:ed:f1:e3:5e:19:c9:75:
f5:2d:bb:15:a1:f7:20:85:c0:ab:76:08:43:21:62:
b4:a7:bd:81:09:40:e0:06:8b:0d:6b:04:56:7a:5a:
b8:1f:7d:a6:b9:2d:17:e9:18:3f:38:a9:e7:e7:88:
d0:05:f9:ec:a9:7d:7b:43:73:e4:e7:5b:be:6b:a2:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:E7:B1:0A:4A:13:D2:66:41:F7:00:29:E3:15:BC:A6:6B:9B:6F
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/AiLnsQpKE9JmQfcAKeMVvKZrm28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:68:9b:ed:90:41:c6:31:8e:64:a0:e2:4f:8f:54:ca:26:73:
86:39:76:cc:80:80:52:32:82:a4:d9:db:e1:51:de:49:d3:38:
fd:63:27:57:e6:3f:19:6a:50:01:62:68:78:1b:f7:38:58:aa:
21:d8:00:47:09:88:26:2b:a1:49:d4:d4:79:e6:12:ac:b3:a9:
5f:34:b8:ae:7a:fc:9b:68:c8:ee:dc:08:60:08:25:9e:fd:00:
9a:21:e9:72:f3:5d:92:63:f1:99:97:8e:98:d9:0a:ce:73:60:
e8:53:53:d0:5f:8d:9d:54:32:81:cd:12:1a:93:77:b4:47:68:
0f:0c:59:e8:76:92:f2:e6:be:df:7e:67:be:c8:6c:15:22:72:
e9:c7:56:71:00:18:e6:41:61:60:5c:4c:2f:ba:f3:03:50:4b:
eb:c3:03:a6:84:55:32:16:37:cf:ff:bc:eb:78:a7:7d:0a:fc:
16:dd:2f:f4:6c:c0:83:6f:10:3b:29:a9:e4:4f:fc:9a:96:09:
ee:a8:de:30:7e:27:77:63:a5:e1:c6:fa:f6:2f:0f:a0:69:39:
ec:b9:26:5f:d1:25:d1:09:31:48:37:e2:19:32:68:a9:34:d6:
3b:77:76:a7:f0:55:33:3c:5a:5f:9c:74:52:89:d2:73:d6:6c:
0b:82:e9:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGB55NR+77X5okX2ScC9agnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjYxMDI4MDk0NjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjIyZTdiMTBhNGExM2QyNjY0MWY3MDAyOWUzMTViY2E2NmI5YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWAFTwSVDXrNzHUXrZxReVsIBO3c
V5KCVT6fZ9MzUvytdosqSAB8ZvH7jxKcy/0SUQXniIISOmTAmk+S/yn+Evu3Aa7k
IbnamXfE4u1JIQYuP7/fEMN96/251hCzL9dk8NcSKxOMnE0wEzSoL886TIOEAvhU
CNB7ZTv2fVB+hD5YdcyGccWKxx3Gli/V/l6GKLVGEyqqU7H8WtRNMaw1yWtF6yWN
WpsKbOJXcL5V8Y1B8TKQNDxmmsRolu3x414ZyXX1LbsVofcghcCrdghDIWK0p72B
CUDgBosNawRWelq4H32muS0X6Rg/OKnn54jQBfnsqX17Q3Pk51u+a6L8sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIi57EKShPSZkH3ACnjFbyma5tvMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvQWlMbnNRcEtFOUptUWZjQUtlTVZ2S1pybTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmd+MA0G
CSqGSIb3DQEBCwUAA4IBAQB7aJvtkEHGMY5koOJPj1TKJnOGOXbMgIBSMoKk2dvh
Ud5J0zj9YydX5j8ZalABYmh4G/c4WKoh2ABHCYgmK6FJ1NR55hKss6lfNLiuevyb
aMju3AhgCCWe/QCaIely812SY/GZl46Y2QrOc2DoU1PQX42dVDKBzRIak3e0R2gP
DFnodpLy5r7ffme+yGwVInLpx1ZxABjmQWFgXEwvuvMDUEvrwwOmhFUyFjfP/7zr
eKd9CvwW3S/0bMCDbxA7KankT/yalgnuqN4wfid3Y6Xhxvr2Lw+gaTnsuSZf0SXR
CTFIN+IZMmipNNY7d3an8FUzPFpfnHRSidJz1mwLgukS
-----END CERTIFICATE-----
Generated at Thu Oct 29 06:09:49 2026 by rpki-client