Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ajiqtxES_QBnNYm3phxGcowFMEQ.roa
File: ajiqtxES_QBnNYm3phxGcowFMEQ.roa (raw, json)
Hash identifier: prHuYg/iygqFiQCALIW1dsluzLzpf8yLL7wsYCYrpX8=
Subject key identifier: 6A:38:AA:B7:11:12:FD:00:67:35:89:B7:A6:1C:46:72:8C:05:30:44
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019E9DD1261DD5FE133C615549495B5541DA
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ajiqtxES_QBnNYm3phxGcowFMEQ.roa
Signing time: Sat 06 Jun 2026 16:43:10 +0000
ROA not before: Sat 06 Jun 2026 16:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 89.251.25.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:d1:26:1d:d5:fe:13:3c:61:55:49:49:5b:55:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 6 16:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a38aab71112fd00673589b7a61c46728c053044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:f2:19:17:0f:64:40:c1:e0:1e:cc:3f:a2:
03:94:a4:5c:77:3e:74:81:8d:b4:3a:2d:85:6b:f6:
2b:f0:94:77:2c:ae:76:42:3b:31:91:95:bd:31:15:
bd:6e:01:70:fd:93:56:75:72:81:f3:2c:ec:9c:15:
2c:ab:7a:d0:c1:bb:c8:11:11:6a:9d:5f:ef:85:fe:
3b:34:f4:47:29:40:97:db:cf:45:da:ee:33:0f:97:
75:3a:b9:49:03:f4:7f:d6:83:e7:60:6d:e4:c5:97:
63:72:fb:0d:3f:af:20:84:c6:56:7a:23:46:95:8b:
3a:73:39:4c:ff:22:f6:03:bf:ed:47:a9:f1:af:b2:
b1:cd:68:57:db:d8:80:aa:e5:d1:5b:6a:85:a0:31:
c8:a8:2c:2a:c3:7b:41:52:c8:65:a7:72:b6:dd:19:
11:e3:aa:18:d3:d8:44:37:d5:cb:8d:ed:4f:33:90:
15:f2:01:78:a8:01:9a:e2:79:c4:51:40:66:79:20:
18:af:ed:33:60:30:24:f2:66:c9:33:a1:e5:9a:8e:
62:23:d0:d3:1d:f2:5a:2e:0c:a4:d4:67:76:c6:68:
0a:47:2f:09:5f:cf:07:94:9a:c9:e9:f7:61:1b:9d:
d9:04:25:ac:24:7c:52:69:42:71:45:6d:63:4d:68:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:AA:B7:11:12:FD:00:67:35:89:B7:A6:1C:46:72:8C:05:30:44
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ajiqtxES_QBnNYm3phxGcowFMEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.25.0/24
89.251.31.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a5:94:13:ae:e9:2e:af:4c:f5:59:00:9c:2e:93:fe:f5:35:
67:3f:b2:b1:71:1f:a3:53:a5:85:98:56:bc:42:be:0e:31:a9:
48:51:05:23:e2:09:85:b2:96:a2:7f:b2:00:27:c5:ac:09:ba:
c1:af:6b:4b:bb:a8:40:d0:56:eb:b4:4b:0c:91:dc:de:e6:46:
a8:da:7a:0e:eb:b4:55:7d:f3:c9:35:40:ee:68:73:95:a1:81:
cb:ca:bd:1a:99:39:71:b4:06:70:57:ea:69:89:af:d3:d9:c7:
d7:05:02:bb:aa:38:39:7d:99:2f:e7:5a:ce:ab:9e:d5:13:2a:
35:fb:10:db:4a:0f:a5:14:72:1a:8c:10:bf:a8:86:f8:09:15:
86:78:df:a8:99:0d:30:a8:1e:0d:6a:a1:02:42:1e:a6:a4:5f:
0e:02:64:c1:ac:d0:5c:d3:2c:0e:4c:70:79:c6:ca:ad:92:3f:
d2:b0:89:5b:48:92:5c:b1:a2:85:f9:b2:1f:0a:85:e4:bd:d4:
4b:4f:f0:c0:7d:ab:df:c1:6d:c9:bb:3d:e2:92:9a:1a:ef:43:
02:7b:97:1f:e6:31:b2:1d:6c:9e:95:d6:bb:c8:e4:e4:57:e7:
1c:0e:66:7c:b3:b6:10:79:f8:56:7b:6d:5d:5f:26:fe:05:45:
e4:8c:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:26:47 2026 by rpki-client