Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6THlI6Y79BPk4H8O90tPHXSSrb0.roa
File: 6THlI6Y79BPk4H8O90tPHXSSrb0.roa (raw, json)
Hash identifier: pROTVAwfpEbozop42cKefcXAzCmQwwtjm/X8CP6YtU4=
Subject key identifier: E9:31:E5:23:A6:3B:F4:13:E4:E0:7F:0E:F7:4B:4F:1D:74:92:AD:BD
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FB0F37C9058AEB3AE3AAACFBEBAE29211
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6THlI6Y79BPk4H8O90tPHXSSrb0.roa
Signing time: Thu 30 Jul 2026 02:56:14 +0000
ROA not before: Thu 30 Jul 2026 02:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 222.167.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:f3:7c:90:58:ae:b3:ae:3a:aa:cf:be:ba:e2:92:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 30 02:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e931e523a63bf413e4e07f0ef74b4f1d7492adbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:52:60:fc:b4:08:76:6f:9c:80:0a:3f:3c:
8b:2c:ab:07:f9:d2:0c:0f:94:b1:9f:f9:c9:76:0d:
0c:a4:62:31:a9:b6:23:ba:b6:50:4d:b4:01:21:c8:
43:5c:fe:06:80:2b:18:6f:24:e1:7c:49:26:d8:64:
72:9c:6a:ad:37:df:89:81:15:b1:a0:68:f4:8e:2a:
b3:c6:1c:08:2e:ed:de:c2:1f:b3:d5:ff:9a:d1:18:
3d:84:a9:46:e8:92:10:e2:28:48:19:75:c7:19:b1:
9a:22:0a:89:86:fb:cf:10:6a:60:5a:d6:b2:50:4c:
45:21:06:c0:0f:af:7c:2e:0a:64:58:bf:94:1f:04:
9b:57:7c:fb:cf:c1:6f:f4:64:a4:77:82:bc:ed:20:
9b:6c:ed:04:f5:38:92:33:a8:08:aa:07:f4:3a:64:
ce:e9:84:92:18:be:84:4b:bb:2d:24:71:db:55:56:
88:6e:86:ec:20:ec:e3:44:f4:1f:21:85:1d:c5:f4:
06:0d:f3:f4:07:45:15:1f:f7:cf:9d:e4:91:3b:a0:
d4:1f:a2:f5:94:09:33:02:22:8b:c7:27:5e:6f:89:
5a:8e:2b:d7:3c:11:15:99:89:b9:5d:ff:0b:b4:9d:
46:4c:23:5f:6b:4b:bd:8a:a3:72:80:5b:3e:68:af:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:E5:23:A6:3B:F4:13:E4:E0:7F:0E:F7:4B:4F:1D:74:92:AD:BD
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6THlI6Y79BPk4H8O90tPHXSSrb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:df:bb:99:96:a6:a9:29:a9:66:40:25:bf:cc:36:10:24:f0:
9c:eb:96:a9:37:2b:2b:20:30:6c:b4:32:45:b8:8f:c0:2c:53:
c0:9b:19:28:af:9c:34:76:7e:3a:e5:e3:99:43:7a:4d:58:67:
b0:8e:1c:59:02:aa:ec:53:12:ba:00:c4:0f:15:da:3f:c5:14:
ce:9a:f1:c2:9d:5a:cd:35:38:76:2e:7d:7a:ba:1a:a7:54:06:
f5:32:53:70:5e:b0:c7:4b:5b:11:ab:a9:2b:f2:a9:1b:9f:14:
f6:a1:c8:ac:34:2c:84:a7:ef:8b:4f:39:0c:32:7e:8a:0a:8d:
77:71:5c:12:52:6d:b7:37:87:69:11:a4:a3:55:61:15:3d:31:
f7:81:e5:c5:61:eb:84:f5:ac:81:7b:bb:4a:49:08:dc:97:2b:
ad:a7:fc:0f:0d:fc:39:03:d6:74:eb:cd:a3:88:9f:a8:12:f8:
51:d4:48:fb:16:8c:20:c0:70:a3:cb:4f:70:42:d2:ea:3f:60:
75:fe:f4:be:cb:45:62:e4:2e:17:b5:dc:db:10:6a:08:58:02:
ea:50:3e:f6:96:0f:7f:b0:57:d9:ae:98:b4:73:1b:a8:1f:ab:
05:44:6d:7e:22:a6:19:c4:e2:33:09:ba:2b:40:fe:ca:f4:88:
58:e8:62:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+w83yQWK6zrjqqz7664pIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNzMwMDI1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTMxZTUyM2E2M2JmNDEzZTRlMDdmMGVmNzRiNGYxZDc0OTJhZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr5SYPy0CHZvnIAKPzyLLKsH+dIM
D5Sxn/nJdg0MpGIxqbYjurZQTbQBIchDXP4GgCsYbyThfEkm2GRynGqtN9+JgRWx
oGj0jiqzxhwILu3ewh+z1f+a0Rg9hKlG6JIQ4ihIGXXHGbGaIgqJhvvPEGpgWtay
UExFIQbAD698LgpkWL+UHwSbV3z7z8Fv9GSkd4K87SCbbO0E9TiSM6gIqgf0OmTO
6YSSGL6ES7stJHHbVVaIbobsIOzjRPQfIYUdxfQGDfP0B0UVH/fPneSRO6DUH6L1
lAkzAiKLxydeb4lajivXPBEVmYm5Xf8LtJ1GTCNfa0u9iqNygFs+aK8lyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOkx5SOmO/QT5OB/DvdLTx10kq29MB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvNlRIbEk2WTc5QlBrNEg4TzkwdFBIWFNTcmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfAMA0G
CSqGSIb3DQEBCwUAA4IBAQCu37uZlqapKalmQCW/zDYQJPCc65apNysrIDBstDJF
uI/ALFPAmxkor5w0dn465eOZQ3pNWGewjhxZAqrsUxK6AMQPFdo/xRTOmvHCnVrN
NTh2Ln16uhqnVAb1MlNwXrDHS1sRq6kr8qkbnxT2ocisNCyEp++LTzkMMn6KCo13
cVwSUm23N4dpEaSjVWEVPTH3geXFYeuE9ayBe7tKSQjclyutp/wPDfw5A9Z0682j
iJ+oEvhR1Ej7FowgwHCjy09wQtLqP2B1/vS+y0Vi5C4XtdzbEGoIWALqUD72lg9/
sFfZrpi0cxuoH6sFRG1+IqYZxOIzCborQP7K9IhY6GJ2
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:18:37 2026 by rpki-client