Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0_1oTwb26iqlk1evouqHycgHgJM.roa
File: 0_1oTwb26iqlk1evouqHycgHgJM.roa (raw, json)
Hash identifier: aH3EF1c3lmFp6v9C6gFfA5WGdfEeQREfgLepxEwPjC8=
Subject key identifier: D3:FD:68:4F:06:F6:EA:2A:A5:93:57:AF:A2:EA:87:C9:C8:07:80:93
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A17610F8C1A44C5D871CC8B6621073B0AF
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0_1oTwb26iqlk1evouqHycgHgJM.roa
Signing time: Mon 26 Oct 2026 02:36:25 +0000
ROA not before: Mon 26 Oct 2026 02:36:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 222.167.214.0/24 maxlen: 24
222.167.233.0/24 maxlen: 24
222.167.243.0/24 maxlen: 24
222.167.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:10:f8:c1:a4:4c:5d:87:1c:c8:b6:62:10:73:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 26 02:36:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3fd684f06f6ea2aa59357afa2ea87c9c8078093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:ae:24:ae:08:d0:91:74:26:62:8f:82:97:
5c:c6:a2:2a:e9:57:dd:46:ca:0d:a8:6b:54:77:b2:
ff:a5:20:89:fd:f6:46:0c:09:80:8f:b5:37:49:8d:
c3:32:1c:dc:3a:d1:06:3b:da:f4:79:5a:73:e6:76:
18:bd:15:a2:81:ae:91:65:49:bb:11:a6:84:c0:8e:
6a:46:13:c9:d5:40:17:fc:81:d5:14:e0:b9:58:9c:
c5:a6:c4:2f:95:db:03:bf:a7:05:02:07:e0:1f:dc:
0b:43:fc:7d:1a:49:3f:7d:3b:f8:67:71:53:a1:c2:
50:5c:c0:a5:97:ba:29:38:67:27:8f:e2:ff:7b:b1:
0b:3b:f9:35:72:7f:88:00:79:6f:55:11:0c:5b:da:
47:41:0e:cc:53:72:12:e3:ea:60:0c:0e:eb:de:29:
f4:f7:e8:42:9e:d2:9f:63:b4:36:47:60:c0:42:9d:
ed:5c:c3:1d:b5:c1:93:f8:14:a1:e7:95:ff:73:07:
10:94:80:b4:e2:bd:dd:f6:50:1c:91:59:bb:cf:a4:
bd:0e:3f:fe:3d:2d:88:e9:59:03:0a:0b:08:de:98:
69:06:d5:6a:7f:5b:c0:d7:0c:1f:fa:f3:97:42:35:
ad:78:4e:f9:da:5f:58:45:6e:59:2b:a7:07:df:80:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:68:4F:06:F6:EA:2A:A5:93:57:AF:A2:EA:87:C9:C8:07:80:93
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0_1oTwb26iqlk1evouqHycgHgJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.214.0/24
222.167.233.0/24
222.167.243.0/24
222.167.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d1:a2:17:b4:6a:53:06:d3:b1:28:45:9d:9b:24:3f:17:d6:
fe:17:4e:8a:45:1a:6b:3f:d3:7c:fc:77:54:70:4a:24:45:ee:
0c:14:b4:fe:e7:84:b6:f0:15:e2:3f:fc:de:d1:5a:88:d5:1b:
a6:55:58:e2:66:ed:b2:62:e6:97:d0:4a:82:72:57:ec:a5:49:
fc:7a:7c:02:b3:a6:e0:58:74:03:5f:5b:fe:80:ef:a7:80:0d:
f6:81:3d:f9:87:a7:58:a3:73:2f:c0:45:a7:27:78:73:a5:77:
78:21:8e:f2:17:4e:91:e0:49:2a:06:bf:fe:67:af:3b:f9:e0:
1a:d4:6d:4c:f7:c0:67:c8:76:51:bb:a1:e6:dc:dc:fd:83:43:
ee:0a:9d:2e:b7:39:9a:4c:99:d4:cd:2f:78:16:4a:a1:87:cb:
06:3f:a6:92:44:ac:f7:c5:5a:14:28:7e:43:d7:ac:98:c8:36:
f9:64:0e:23:c0:c1:76:9f:ab:47:85:08:03:23:11:57:9b:be:
47:f4:d3:49:4a:c8:4b:79:87:0f:6a:5d:fe:e9:1a:d8:60:62:
9c:71:79:93:aa:36:9a:c5:20:85:36:ed:af:03:c1:d7:6e:04:
18:9a:b5:a5:25:bf:be:75:c0:cb:98:99:43:a2:43:ad:84:e9:
ab:f0:01:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:13 2026 by rpki-client