Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6yfl5wriHlRWRW3gXIPTed6SZBw.roa
File: 6yfl5wriHlRWRW3gXIPTed6SZBw.roa (raw, json)
Hash identifier: qw+/ZNQKL/+QGpUMyzcUV5EsmEJeLyy2giX16sQEEV4=
Subject key identifier: EB:27:E5:E7:0A:E2:1E:54:56:45:6D:E0:5C:83:D3:79:DE:92:64:1C
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FE6C13DC2B68AA8BC54F73F95D944ECC5
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6yfl5wriHlRWRW3gXIPTed6SZBw.roa
Signing time: Sun 09 Aug 2026 13:40:51 +0000
ROA not before: Sun 09 Aug 2026 13:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:c1:3d:c2:b6:8a:a8:bc:54:f7:3f:95:d9:44:ec:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 9 13:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb27e5e70ae21e5456456de05c83d379de92641c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:0e:ac:4f:31:ae:07:bd:cf:73:c2:56:98:
90:6c:67:99:dd:9d:56:d5:6e:6d:79:ce:dc:22:3c:
a3:6d:58:76:a3:f0:11:a9:7e:99:67:3c:48:8b:34:
14:bf:c0:4a:3b:5d:7d:4e:bc:39:3c:bb:7f:a9:7b:
71:83:b5:9a:58:21:5e:86:8c:6c:55:8a:b3:4d:9c:
38:0b:d5:48:4e:4c:35:bf:ce:87:a2:d3:f0:78:bc:
03:dd:61:53:09:a3:55:7c:71:87:c0:13:8c:a4:30:
c5:ac:ae:a9:27:db:29:43:3d:12:99:f9:6f:d8:4b:
8f:27:4a:aa:25:ac:dc:bb:c8:81:5e:c2:96:d9:35:
58:81:ab:cf:56:14:24:59:be:42:bf:26:47:e2:c4:
60:a5:0e:ab:6b:bd:f6:1d:77:6d:62:98:61:a3:0f:
38:37:d9:4c:14:86:20:ee:b2:7a:8d:f0:f3:f2:39:
61:76:57:d9:67:7f:34:7b:9e:44:49:e1:f6:28:b8:
ed:59:d7:e9:70:5f:b8:a6:eb:8e:8d:e7:d8:25:db:
24:9d:05:39:e5:09:33:bd:1d:a9:40:95:a8:ae:91:
d2:eb:0c:bc:7c:19:98:c8:5e:4f:f6:7c:58:c9:84:
32:9f:65:d3:3c:18:ff:cd:92:1c:43:41:c7:8f:2b:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:27:E5:E7:0A:E2:1E:54:56:45:6D:E0:5C:83:D3:79:DE:92:64:1C
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6yfl5wriHlRWRW3gXIPTed6SZBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.210.0/24
222.167.224.0/24
222.167.232.0/24
222.167.234.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
90:86:34:30:31:75:b7:57:ba:1d:7e:db:17:2f:5b:7c:82:63:
c1:8c:db:e5:e9:df:d4:20:b5:34:90:f7:39:e8:13:40:e6:ae:
d7:02:87:aa:df:69:b1:01:6b:e3:86:1e:d9:ac:c2:84:d9:cc:
36:c0:fe:42:5c:a9:bd:cc:fb:7b:c4:dc:0b:c5:1b:93:89:56:
5f:d3:aa:f9:fb:41:d0:f3:7c:64:33:92:d7:71:09:06:76:c1:
50:2a:eb:5e:f6:45:10:77:25:fb:c2:10:d2:3e:5e:af:d5:0d:
cf:7f:20:e7:2a:8a:62:1e:52:84:55:5f:dc:fa:5a:d0:da:10:
75:c9:49:fb:7a:2c:08:ae:77:36:38:c7:b2:34:83:6c:98:87:
65:db:f7:eb:11:b8:48:e5:19:0c:73:8e:e1:02:20:d4:f2:dc:
6c:96:fa:72:71:2e:ed:7a:ca:d5:97:e3:0a:d1:76:b1:42:bd:
1e:a5:6a:52:86:8c:9d:33:7c:ae:b0:4e:5f:fa:2b:d7:bf:47:
85:b0:89:d7:f6:ad:7f:6c:53:7a:93:f0:69:7f:07:ee:34:92:
83:c4:38:77:6d:08:ed:91:1f:c4:c0:c8:b7:1f:db:0d:10:7d:
56:54:0f:33:af:76:49:9f:d9:51:bd:aa:23:d6:ab:64:a6:c8:
6c:94:fb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:20 2026 by rpki-client