Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aiqiBGaz1SySvP5vdQWagC19fBQ.roa
File: aiqiBGaz1SySvP5vdQWagC19fBQ.roa (raw, json)
Hash identifier: uAQ7sAdtEK+IB7ypn+r6gDMxcrIJR7o2YRIAP11wxr4=
Subject key identifier: 6A:2A:A2:04:66:B3:D5:2C:92:BC:FE:6F:75:05:9A:80:2D:7D:7C:14
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019E5053233A24CC0D3455A5F117C508C385
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aiqiBGaz1SySvP5vdQWagC19fBQ.roa
Signing time: Fri 22 May 2026 15:34:46 +0000
ROA not before: Fri 22 May 2026 15:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401881
IP address blocks: 87.232.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:53:23:3a:24:cc:0d:34:55:a5:f1:17:c5:08:c3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: May 22 15:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a2aa20466b3d52c92bcfe6f75059a802d7d7c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:5e:a0:97:f8:ba:6c:67:19:f1:7c:bd:62:
33:b5:17:12:4d:da:3a:a4:ed:5a:c8:e6:11:30:f5:
0e:7b:88:37:d4:af:7a:a9:ca:2c:0b:03:5e:24:3d:
af:90:5b:65:fc:19:bc:c8:71:38:8b:c1:09:91:a0:
df:3f:38:96:74:30:f7:86:c9:2b:7f:c0:d5:2d:31:
16:3d:89:59:16:fb:0d:1a:9b:21:8b:8b:73:42:79:
cf:ac:17:94:96:a3:ee:5e:2b:71:2c:14:f0:e3:c7:
a4:07:2b:d0:47:b2:da:05:a3:0c:9e:ac:09:b1:e3:
14:bd:2c:fe:29:11:3c:ef:08:0c:e9:57:8d:28:c6:
47:85:05:7a:ea:61:4a:f1:54:e2:19:3a:86:7f:62:
88:21:39:21:b6:c4:98:d0:77:5b:97:55:06:2f:86:
3f:7a:14:93:34:97:98:41:fd:16:20:33:fd:71:76:
79:60:aa:d7:8c:84:b8:9f:3c:f3:1c:ba:dc:9a:d6:
16:5d:0c:d2:4b:65:83:a7:4c:53:d9:d2:94:82:86:
81:ae:22:a0:52:ad:62:14:ac:93:1c:1c:e6:f1:7b:
3b:ea:0d:cd:f2:9a:9a:23:ea:58:24:0a:46:0c:bb:
f6:b8:52:cf:65:56:60:86:81:58:77:aa:6b:62:7f:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2A:A2:04:66:B3:D5:2C:92:BC:FE:6F:75:05:9A:80:2D:7D:7C:14
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/aiqiBGaz1SySvP5vdQWagC19fBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:23:7d:38:15:2a:b9:04:49:6b:d8:08:aa:e1:7b:ce:a1:43:
eb:10:76:49:0d:5f:86:d3:b3:64:ba:98:67:80:f4:42:ee:dc:
d5:b2:76:45:9f:74:11:0f:13:56:16:55:a4:51:ef:c7:7f:8d:
4c:fc:da:d4:04:e1:84:7b:91:88:fa:02:7e:05:c2:b3:77:18:
39:e4:ff:6a:b8:1a:c2:86:b7:19:a0:5d:af:65:7a:be:a6:5a:
29:cf:8e:dd:a2:84:63:6e:27:3a:0c:40:49:a8:4a:89:cc:e6:
ba:57:cc:d3:74:cc:c4:ab:1a:b9:59:15:f2:d4:ab:86:42:8b:
0d:d8:80:86:5a:99:a4:f4:fe:c7:e5:b2:1b:63:8f:3a:1f:5a:
2c:0c:eb:5c:35:bd:a0:41:58:66:82:c7:73:ec:03:a7:2d:84:
fd:5e:22:3c:f6:73:14:c3:9d:9d:b4:48:d4:30:55:8d:73:67:
0f:e4:4b:41:1d:ae:05:f0:71:d6:6d:f1:eb:bc:0b:73:23:1a:
3f:6d:1d:4e:bb:61:b0:9f:5d:e5:37:54:c5:bd:76:0a:c9:d1:
79:2a:fa:b7:3f:ae:d3:85:7c:63:47:67:0f:1c:bf:f0:e8:6f:
bc:d9:87:fb:4c:4a:61:3f:2f:f6:b4:67:0d:9d:76:c7:39:22:
c1:d6:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 06:27:59 2026 by rpki-client