Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/5Q-0Ds-Zu0tGGR5la9VbTln4GyI.roa
File: 5Q-0Ds-Zu0tGGR5la9VbTln4GyI.roa (raw, json)
Hash identifier: +kqgyFT0ZTr5AvGL2NOataqhR3pzitz5p8nxs4ELbTE=
Subject key identifier: E5:0F:B4:0E:CF:99:BB:4B:46:19:1E:65:6B:D5:5B:4E:59:F8:1B:22
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A16471930A28D2CB6C90DB55B145FB9731
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/5Q-0Ds-Zu0tGGR5la9VbTln4GyI.roa
Signing time: Thu 22 Oct 2026 16:28:47 +0000
ROA not before: Thu 22 Oct 2026 16:28:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218701
IP address blocks: 222.167.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:71:93:0a:28:d2:cb:6c:90:db:55:b1:45:fb:97:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 22 16:28:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e50fb40ecf99bb4b46191e656bd55b4e59f81b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:b3:90:c9:64:7f:35:4b:c2:54:8c:7d:0e:
58:81:2e:58:8a:7e:c4:d6:93:bb:5f:74:98:61:b9:
24:eb:8e:24:81:83:56:dc:27:80:c0:b4:a5:a2:4a:
d5:ce:74:f6:17:e0:21:4d:ab:fd:ad:50:6a:ef:0a:
6f:45:f5:c2:54:d7:fb:af:0b:96:ab:a2:c9:a6:1e:
ab:d8:2b:99:c3:62:90:25:0b:27:91:20:7b:b1:e9:
43:63:24:73:84:7e:dc:14:ee:4c:af:66:09:fc:20:
af:38:61:f5:8c:d6:28:eb:1f:31:40:ca:71:f0:39:
85:c4:28:c4:ff:50:bb:79:03:03:f1:09:44:c6:72:
e6:49:58:b9:1f:bf:6d:e5:d6:ed:8d:bf:bf:30:8c:
35:35:e0:1d:95:9b:a8:d4:9e:2f:cc:72:38:4b:51:
5d:cf:9c:9f:c5:5e:2c:4a:13:ad:5a:a6:d3:90:c8:
aa:bd:e4:6a:9b:87:08:0b:50:8e:a1:7e:5b:31:02:
d2:a4:49:80:46:17:77:0d:11:a8:3c:26:76:70:32:
35:66:23:43:ad:28:1b:0a:59:66:51:b1:9b:b9:39:
e5:b1:64:10:e4:52:54:67:da:44:9a:98:7f:b8:e8:
ec:36:b8:93:40:ff:8c:1c:c2:ef:c8:75:46:d9:fb:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:B4:0E:CF:99:BB:4B:46:19:1E:65:6B:D5:5B:4E:59:F8:1B:22
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/5Q-0Ds-Zu0tGGR5la9VbTln4GyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.198.0/24
Signature Algorithm: sha256WithRSAEncryption
75:45:fb:53:5c:8d:2b:c8:00:1b:19:76:33:b5:38:30:2b:7d:
3a:31:74:69:0e:91:7d:4e:aa:35:b5:4f:75:dc:bb:f8:42:a2:
ac:56:83:76:19:db:4d:98:84:8b:68:53:22:3a:22:88:b1:fc:
b3:0b:9c:42:2e:ef:b1:50:66:95:d6:2b:2f:0d:c8:8c:e7:89:
02:c9:2e:0d:4f:77:41:fe:47:49:ce:7c:b5:b3:39:31:77:3b:
d3:d2:d5:e3:e8:b6:68:87:ef:ed:12:02:61:d4:89:4b:a4:02:
2a:03:7a:6f:33:2a:ac:35:45:c5:26:b0:a6:f1:89:27:39:e1:
98:1a:39:24:66:0a:10:f2:b8:9a:ca:db:eb:a5:aa:11:cc:a6:
6e:cf:2f:03:3e:b6:0d:0a:ea:15:74:73:3d:de:ed:31:ac:50:
3d:28:bb:10:55:5c:57:2a:a9:67:ba:85:e4:1f:df:09:e3:ed:
13:9f:88:73:dc:96:89:d1:7f:e0:03:11:33:a3:7d:22:02:be:
50:c5:c3:5b:65:5e:3d:bc:10:1a:24:3d:07:9f:bc:28:16:b6:
77:ac:f4:48:01:a1:e5:7c:70:18:38:0f:38:96:ef:a2:65:f4:
b7:70:42:bf:16:45:5b:f4:cc:65:93:3d:71:0b:fa:fe:c8:d3:
2b:b1:66:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:54 2026 by rpki-client