Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/aazjLAlpT8w7lymF0XaSr7VAyys.roa
File: aazjLAlpT8w7lymF0XaSr7VAyys.roa (raw, json)
Hash identifier: dyVxbW9dZhgc81G7dZ26320CmErNfxA5t/7LraZ5v4s=
Subject key identifier: 69:AC:E3:2C:09:69:4F:CC:3B:97:29:85:D1:76:92:AF:B5:40:CB:2B
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019D482B3AD949619881593260B9B7491B8C
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/aazjLAlpT8w7lymF0XaSr7VAyys.roa
Signing time: Wed 01 Apr 2026 08:31:25 +0000
ROA not before: Wed 01 Apr 2026 08:31:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.232.75.0/24 maxlen: 24
87.232.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:2b:3a:d9:49:61:98:81:59:32:60:b9:b7:49:1b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Apr 1 08:31:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ace32c09694fcc3b972985d17692afb540cb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:d0:71:96:24:be:d9:c2:c7:f2:ff:86:93:
d4:8c:5c:38:4d:4b:35:6b:6c:97:93:17:a8:ee:91:
13:0a:bc:b9:b2:ca:89:00:c4:bb:ef:0d:47:3c:f3:
99:78:57:d6:7e:60:ee:7d:00:30:7c:85:e0:13:9a:
7e:00:64:b9:38:dd:4d:b7:6e:95:ff:7d:fc:c5:65:
fd:1d:b8:fe:6e:35:9c:49:15:f2:16:23:16:08:a6:
52:79:c4:aa:f3:25:27:24:a3:fa:76:4d:b0:41:0f:
af:cb:20:a9:27:12:9b:66:1f:87:51:f6:7c:d4:7c:
df:7a:03:45:c9:c2:c0:d5:a7:a7:70:74:42:9a:5f:
0d:1c:b4:a0:07:b1:e3:c4:b9:bb:89:b8:23:94:23:
37:81:01:06:86:29:f2:f3:16:6e:d5:a2:b7:57:a9:
2a:91:88:69:53:b5:fe:9c:5b:2a:0f:3a:2e:fe:8d:
d9:b5:c3:1a:8e:9c:5c:57:68:43:40:f7:87:ea:75:
71:50:6f:fc:6f:03:fd:02:d7:ae:35:9a:34:60:fa:
e5:4d:42:5b:5e:a9:2d:a7:ea:0e:7e:69:77:45:e9:
1e:fc:15:c7:6d:73:c1:a9:61:a3:ab:0f:04:b9:a1:
23:da:a9:59:48:85:eb:04:ef:6d:97:47:1c:06:7f:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:E3:2C:09:69:4F:CC:3B:97:29:85:D1:76:92:AF:B5:40:CB:2B
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/aazjLAlpT8w7lymF0XaSr7VAyys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.75.0/24
87.232.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:07:55:cc:9b:1a:d6:86:4b:2f:b8:5b:ef:b0:cc:2a:8c:07:
90:00:8b:6c:68:6b:e7:8b:26:a4:df:55:4e:1c:4c:7f:7f:8a:
d4:c3:a8:7c:ad:23:b9:29:be:46:19:c1:63:f7:7a:54:57:b9:
5f:c0:ed:e0:1c:59:4c:17:f2:5b:7a:d7:8b:d9:15:8b:7c:2a:
ad:af:89:8c:48:da:a2:53:44:16:4e:b8:0d:75:c1:2f:cc:5a:
ae:f2:35:8f:b7:c0:d8:86:fe:b4:b9:8f:d1:b1:76:ea:0d:4a:
72:c2:42:a5:72:cd:bb:12:c1:aa:03:a9:78:96:7f:3f:f1:8d:
f9:c2:b2:16:5d:9b:6a:c1:6f:93:2a:68:15:61:cc:bc:43:7d:
69:c5:c6:2d:fa:18:6d:f8:43:fa:49:fa:43:05:c1:3e:a1:76:
db:43:97:cf:07:5e:58:06:88:c9:53:32:1c:8a:fa:44:fc:87:
8b:98:a0:0a:d4:4d:e5:97:65:cb:46:b3:bd:21:c4:45:1e:bf:
46:ec:7e:63:96:ee:06:be:2f:55:ff:71:f2:91:96:b5:71:5c:
26:ea:f2:3c:80:ef:b6:08:a4:65:70:48:75:e8:00:da:63:51:
97:b7:f2:e3:ba:57:3a:0e:f1:78:13:a6:fb:d4:52:51:9c:b9:
5d:38:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:30:58 2026 by rpki-client