Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6XK4DVRmfCb6KYGbwN9HohYBekU.roa
File: 6XK4DVRmfCb6KYGbwN9HohYBekU.roa (raw, json)
Hash identifier: YVXXeMi2qbSyEA2YuenX6m5XcwL9N+QvL8sF83n3IlA=
Subject key identifier: E9:72:B8:0D:54:66:7C:26:FA:29:81:9B:C0:DF:47:A2:16:01:7A:45
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A04A89B0488BCCB71BD277CDA8318F540F
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6XK4DVRmfCb6KYGbwN9HohYBekU.roa
Signing time: Fri 28 Aug 2026 22:42:12 +0000
ROA not before: Fri 28 Aug 2026 22:42:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 222.167.195.0/24 maxlen: 24
222.167.228.0/24 maxlen: 24
222.167.233.0/24 maxlen: 24
222.167.243.0/24 maxlen: 24
222.167.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:89:b0:48:8b:cc:b7:1b:d2:77:cd:a8:31:8f:54:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 28 22:42:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e972b80d54667c26fa29819bc0df47a216017a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5c:73:67:b0:ac:bb:47:e6:8a:e0:dc:5b:5f:
f1:73:ce:85:55:dc:b1:60:0f:ed:75:8e:f2:24:fd:
43:de:e5:2d:d4:2e:2b:31:00:69:68:40:41:42:b9:
41:bf:eb:5a:b3:1f:81:2d:e5:00:13:1c:16:11:71:
9e:00:6f:1a:21:5b:a0:c9:7c:77:a0:cd:b4:6d:f0:
76:df:f9:53:29:ca:13:a0:4a:23:02:33:b5:41:5c:
c5:ab:b4:d6:4f:2d:b0:8f:b9:34:62:65:18:81:69:
79:21:82:93:df:09:5e:d4:7a:52:04:84:9e:b5:41:
8c:f7:06:04:59:51:fb:1b:f3:6f:cc:73:1a:fa:0a:
34:85:95:59:04:dd:c3:76:8a:d3:d0:60:50:4e:05:
ce:66:37:05:c6:16:ed:8f:a5:0a:96:59:c7:29:57:
cf:0c:f4:bc:13:3a:79:35:40:44:4a:20:84:50:61:
85:ca:3d:23:c3:aa:03:56:dd:de:91:53:a9:82:cb:
82:c6:0c:67:eb:b6:d9:14:57:43:11:7f:9d:68:cb:
70:fd:8c:38:ed:76:f1:2c:7c:29:4f:c0:d3:26:8d:
d4:8f:3d:94:08:72:bb:3d:ba:38:b2:88:87:e5:cb:
56:c1:f9:1f:99:96:3c:16:c1:c4:86:e9:74:57:c5:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:B8:0D:54:66:7C:26:FA:29:81:9B:C0:DF:47:A2:16:01:7A:45
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6XK4DVRmfCb6KYGbwN9HohYBekU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.195.0/24
222.167.228.0/24
222.167.233.0/24
222.167.243.0/24
222.167.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ef:eb:2d:c2:f1:c5:d8:e9:8b:d2:d4:e9:01:c2:b0:ab:c3:
3f:39:e4:70:a0:0f:7e:a8:03:73:1f:3d:2d:3a:c4:ef:2d:e0:
8e:dc:35:15:a0:8a:59:d7:eb:39:f3:54:43:15:f6:8a:e9:23:
e8:b6:52:c9:f2:c9:75:d8:67:1f:65:c5:6a:12:a9:c1:89:35:
f7:03:d4:a7:02:b8:08:a1:22:52:a1:e6:1e:e0:69:75:92:c0:
86:0b:1d:14:da:9b:f0:1f:37:fb:e4:77:42:8b:1f:d7:0b:4d:
96:69:9a:2e:63:83:fc:af:63:cb:8c:57:81:c0:bf:9d:71:1f:
c0:ca:96:ba:56:9c:86:eb:61:0f:3e:03:92:6c:d8:f1:6d:1e:
56:52:cc:71:eb:e2:08:08:23:ac:cb:b0:1c:69:2d:42:6a:b6:
fd:9d:5b:d5:8b:d8:ab:6d:f9:69:13:a7:12:31:3e:dc:65:87:
cf:1f:99:ad:e2:35:92:e9:39:3c:fa:e7:cb:dd:78:f5:03:0e:
e5:12:90:9a:59:73:5a:57:1c:72:71:b3:2a:75:a5:c4:7c:eb:
64:55:ca:5f:f2:23:cd:99:77:33:d5:e9:65:de:c2:85:43:43:
db:79:d1:39:4d:8b:a2:60:b1:1d:97:ca:d7:a1:fa:4c:96:32:
7c:48:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:04:22 2026 by rpki-client