Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/AieLJXAymktRfmukFlACfHWkYRE.roa
File: AieLJXAymktRfmukFlACfHWkYRE.roa (raw, json)
Hash identifier: /oLmGMPt55iKvBJWcIwKY+SjbZghe8alLWfm6etoAFc=
Subject key identifier: 02:27:8B:25:70:32:9A:4B:51:7E:6B:A4:16:50:02:7C:75:A4:61:11
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A0D3F288C0F000F74B9047401EE50A8A33
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/AieLJXAymktRfmukFlACfHWkYRE.roa
Signing time: Thu 24 Sep 2026 15:04:42 +0000
ROA not before: Thu 24 Sep 2026 15:04:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 80.86.216.0/24 maxlen: 24
80.86.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f2:88:c0:f0:00:f7:4b:90:47:40:1e:e5:0a:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Sep 24 15:04:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02278b2570329a4b517e6ba41650027c75a46111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:34:33:f1:14:9b:94:be:57:8a:39:22:24:
ca:79:db:9b:70:81:75:41:c5:95:da:50:af:e4:af:
3c:c5:bd:1c:60:12:f7:62:24:8f:d0:ce:a5:37:0a:
2b:0c:f5:0a:67:8a:89:4c:ff:87:94:2e:6f:fc:65:
b9:95:9e:f1:24:d9:00:d5:55:2e:11:56:5b:bb:bb:
5e:5d:4b:c4:e6:2c:fa:db:e7:3d:9d:4f:c3:3b:fb:
75:ee:d2:e9:f0:83:33:2c:6e:dd:b9:06:b6:1e:79:
10:e1:49:ff:c1:ec:1a:72:f5:cb:e4:12:ec:90:72:
0b:23:16:fb:2c:c6:6f:43:98:a9:52:ed:84:0d:8c:
93:e4:ae:02:49:bf:4a:f9:30:08:89:6d:85:7e:d4:
f9:47:a0:2c:3f:1b:4b:06:41:04:ea:d2:d2:f3:92:
e0:50:de:58:41:8c:81:d9:c7:7b:66:34:c4:54:27:
56:d4:fe:eb:2c:2c:28:8e:23:fb:c8:d2:ae:34:63:
4d:95:3d:fb:05:04:6d:15:1c:7f:a6:fc:29:d3:71:
a3:20:5a:36:44:d4:48:a5:7b:df:36:b4:ac:7c:f2:
ca:c3:a9:b3:29:43:b4:7b:2a:65:5e:fb:ea:ac:af:
bf:1b:25:90:8b:1f:b0:87:4a:8a:c8:cd:3d:99:73:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:8B:25:70:32:9A:4B:51:7E:6B:A4:16:50:02:7C:75:A4:61:11
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/AieLJXAymktRfmukFlACfHWkYRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.216.0/23
Signature Algorithm: sha256WithRSAEncryption
89:7b:7a:b6:1a:51:aa:21:59:c9:51:43:5b:f6:80:7a:c2:46:
94:b4:05:8e:b9:a8:9f:fd:8d:98:da:f3:29:7f:0e:df:ec:5c:
a2:d2:7e:f9:29:88:b8:08:78:3a:4e:d2:2e:c5:56:b6:8a:59:
95:d9:4e:fc:5a:79:10:67:ad:78:54:41:33:5d:69:ea:b8:d2:
27:b2:8a:7e:8e:a4:ce:f7:de:2d:e2:c2:a0:ff:98:e1:ff:d0:
fd:6b:33:7e:27:d4:1b:27:17:f9:c4:fb:72:a9:d9:b1:f7:c2:
0b:8b:71:13:b4:26:fc:65:e0:46:24:d1:ed:65:41:b0:89:c3:
2a:71:ba:e9:25:7e:ff:eb:f8:3b:45:ab:87:fa:4a:dd:f5:f9:
7e:9a:5e:66:aa:0b:c5:9a:69:cd:40:e6:a1:fb:7c:2b:c7:be:
ff:71:fa:61:90:49:fd:30:68:7f:23:01:c3:16:d5:8d:52:5d:
ee:be:e9:25:6e:eb:fc:e8:de:25:02:63:1f:f4:5a:8b:d4:2e:
d9:6e:27:aa:86:5f:34:e4:55:86:ad:39:5f:f4:5a:af:a2:41:
ef:9b:0f:22:63:f4:2b:5d:1c:ec:30:a9:4b:ad:36:cd:f0:06:
e7:1e:ec:1e:8b:8b:10:02:68:3d:eb:a8:19:b1:75:67:08:48:
ec:a6:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:06:32 2026 by rpki-client