Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/aJE-N8XrZPq5jSOvU59Z2wJzXNU.roa
File: aJE-N8XrZPq5jSOvU59Z2wJzXNU.roa (raw, json)
Hash identifier: UfTHGBjQ2zBZbaFR7hvw5/SPevdqWF43OgeNjM2xfIM=
Subject key identifier: 68:91:3E:37:C5:EB:64:FA:B9:8D:23:AF:53:9F:59:DB:02:73:5C:D5
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 019DDCF7040024EF37E3B4BB7EF01B26FE72
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/aJE-N8XrZPq5jSOvU59Z2wJzXNU.roa
Signing time: Thu 30 Apr 2026 05:57:49 +0000
ROA not before: Thu 30 Apr 2026 05:57:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213648
IP address blocks: 5.182.232.0/22 maxlen: 22
94.142.164.0/22 maxlen: 22
194.93.78.0/24 maxlen: 24
2a14:8700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:f7:04:00:24:ef:37:e3:b4:bb:7e:f0:1b:26:fe:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Apr 30 05:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68913e37c5eb64fab98d23af539f59db02735cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:1e:b2:d4:75:2d:37:f6:c4:16:3c:fc:da:
2d:0f:2c:9d:53:12:7b:f9:ea:8b:22:2f:84:ec:6e:
f5:2c:36:64:c5:d5:6d:71:a5:ef:ea:53:bf:e2:4a:
cb:3e:37:8a:4d:06:e1:b5:79:2e:d3:6f:10:25:ab:
28:6b:ec:39:49:23:84:cd:3d:a3:31:37:bd:4d:88:
c6:11:5d:5d:71:2f:96:4c:e7:92:d8:fc:a7:e4:22:
42:a1:b6:91:22:dc:59:df:55:7a:45:f4:8b:54:4f:
8b:cb:2c:06:3e:1f:69:40:b2:c8:da:2a:50:fd:1e:
f1:81:82:9a:6a:72:8a:25:73:0b:a5:a8:fc:d4:4a:
4c:be:f7:a8:4f:0f:7f:4e:86:4d:f1:7c:cd:a3:6f:
3b:c6:f8:3a:93:61:20:8c:ee:1a:0f:70:d3:75:61:
1b:ee:10:0a:04:07:0b:f3:75:b7:1e:fe:03:14:bb:
9a:d5:68:a8:f2:5d:bc:08:77:ac:58:e8:4e:2b:b0:
fb:ec:47:7c:5c:1f:c3:23:82:d9:23:0d:03:42:d4:
62:ab:dc:c2:7b:7f:2b:eb:e5:f9:da:92:d9:d6:82:
63:e4:50:3b:02:ab:45:88:32:2f:cb:02:54:25:98:
a4:f7:f7:14:7e:d5:9b:ed:64:e8:da:9c:06:14:0a:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:91:3E:37:C5:EB:64:FA:B9:8D:23:AF:53:9F:59:DB:02:73:5C:D5
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/aJE-N8XrZPq5jSOvU59Z2wJzXNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.232.0/22
94.142.164.0/22
194.93.78.0/24
IPv6:
2a14:8700::/29
Signature Algorithm: sha256WithRSAEncryption
8f:79:34:e8:c9:53:c8:72:fa:86:f0:c3:65:15:cf:d3:df:de:
fb:1b:2f:8b:15:3c:e6:16:5e:aa:60:d1:d2:e3:70:03:7e:30:
a8:32:d9:e6:e8:da:06:53:92:1f:9b:06:aa:fd:ff:cd:26:4d:
76:f1:99:bc:d3:df:c0:25:23:7b:23:a7:35:72:1b:6c:f5:b8:
70:f3:f1:a1:07:82:07:c6:aa:53:49:b7:52:dd:9d:1c:4e:66:
52:64:8a:da:dc:10:2c:a1:c6:11:73:19:85:ad:61:7b:b1:13:
4c:ad:3a:34:24:22:0c:c8:00:1d:a3:b3:3f:8f:d9:7e:35:a2:
b2:47:49:39:40:cc:5c:37:76:72:d5:74:b7:cf:d0:c4:e2:0f:
05:3d:08:b5:e4:c8:7b:2d:02:02:e7:80:9d:43:f6:fb:f3:8d:
72:c8:45:4e:69:8a:66:7a:a7:90:7e:49:ab:3b:41:17:3d:0a:
c5:f1:4a:3c:42:dd:d5:26:d3:ee:c8:2c:61:3b:fc:a4:30:4c:
2e:6c:5c:d6:af:bc:bc:00:72:76:57:12:4a:fb:06:47:94:cd:
95:24:bd:c8:6f:b2:57:f8:fd:5a:48:47:f3:bb:ce:56:dc:34:
eb:11:66:7c:cf:e4:bd:81:05:d2:36:52:92:00:97:95:2a:ba:
3f:30:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:22 2026 by rpki-client