Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/7PfHmGf-ptLWTY-0uujQDxN_ctU.roa
File: 7PfHmGf-ptLWTY-0uujQDxN_ctU.roa (raw, json)
Hash identifier: EYVd45QCLI1r9t+cnOTNwN8m8g9VMZQQuSIZh8MozB4=
Subject key identifier: EC:F7:C7:98:67:FE:A6:D2:D6:4D:8F:B4:BA:E8:D0:0F:13:7F:72:D5
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FB58710E58E2977F3FB3B199D29218AC1
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/7PfHmGf-ptLWTY-0uujQDxN_ctU.roa
Signing time: Fri 31 Jul 2026 00:15:55 +0000
ROA not before: Fri 31 Jul 2026 00:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 222.167.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b5:87:10:e5:8e:29:77:f3:fb:3b:19:9d:29:21:8a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 31 00:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecf7c79867fea6d2d64d8fb4bae8d00f137f72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:2f:9c:24:b9:f3:a1:68:db:95:0c:57:ad:
67:2f:58:06:d8:93:32:fb:5b:6c:99:b5:a1:81:8c:
45:82:9a:80:34:42:45:54:f7:bf:43:de:6e:da:25:
8f:e3:8b:5e:6e:ca:84:4e:8b:73:d0:74:14:88:41:
bd:e8:b0:da:82:2b:2f:39:d1:78:a5:46:fb:2c:18:
9f:d2:7c:2a:7e:22:e5:e9:9e:ff:3e:0c:23:57:7d:
6c:4c:63:90:69:0a:2b:f9:75:37:b0:06:9d:b1:aa:
c7:0c:5e:28:2a:f1:2e:35:68:da:9c:26:94:03:f0:
89:53:19:15:82:36:96:92:88:49:0c:d8:71:70:fb:
e2:9a:83:c1:ca:14:1d:fd:c1:27:29:cc:a6:2e:b8:
da:f0:bf:9c:b3:46:82:40:ee:6b:2c:36:12:0a:89:
91:0a:94:ad:ec:27:1b:f3:ca:01:d2:61:de:ba:e0:
69:da:5e:b6:f7:a9:57:7f:98:7b:ed:fe:52:3a:5c:
b4:35:39:e7:75:8f:44:2d:b1:ca:cd:8d:6e:b7:f7:
c0:da:65:eb:4f:fa:8f:75:0b:d1:a6:c1:0f:2d:a3:
9b:65:45:d0:69:df:07:54:32:ed:05:02:4b:67:f5:
88:5d:eb:b4:3c:55:1f:4c:5d:77:7a:ed:58:46:81:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:C7:98:67:FE:A6:D2:D6:4D:8F:B4:BA:E8:D0:0F:13:7F:72:D5
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/7PfHmGf-ptLWTY-0uujQDxN_ctU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.242.0/24
Signature Algorithm: sha256WithRSAEncryption
79:db:72:5d:c3:da:4a:df:d6:e4:51:ee:37:b7:09:70:3f:aa:
23:5d:85:94:f5:60:5b:41:eb:c5:89:84:ff:76:f4:46:cc:78:
12:75:33:e7:2f:a9:b8:c9:61:52:48:f5:72:f2:69:87:9f:65:
f7:6a:54:5d:f4:28:82:62:d8:88:08:0a:e6:f3:bf:2c:e3:b6:
9d:55:1f:72:e7:9c:76:0a:dd:ff:51:4f:7d:7e:8f:3e:e4:3b:
cb:be:e7:c5:c5:e8:d4:0e:57:f6:30:9e:ad:d7:48:e4:44:38:
59:2c:f1:af:f5:6f:ad:3e:7d:6d:8e:9d:4f:2e:81:ac:84:5e:
98:7b:15:6a:bb:fa:55:1a:13:cf:b2:70:6e:0d:19:18:dd:d6:
06:a7:4f:22:eb:88:c6:f9:29:a1:9f:c8:59:f4:ab:dc:68:69:
94:da:16:f1:b7:6e:c5:68:8b:fa:2c:99:ed:e3:2a:1b:a7:24:
5a:72:36:e0:53:6e:2b:b7:ab:8f:22:b2:92:f8:c2:1c:16:11:
e9:73:89:ff:71:a2:f7:ab:6d:38:09:4f:9d:37:11:54:7f:55:
09:36:2f:2c:6a:49:b8:96:c2:23:3e:ba:40:09:60:15:d9:47:
6f:84:0d:cb:8f:0b:b8:17:4a:b3:7a:2e:39:7e:af:33:e9:c7:
5d:78:6b:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+1hxDljil38/s7GZ0pIYrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNzMxMDAxNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Y3Yzc5ODY3ZmVhNmQyZDY0ZDhmYjRiYWU4ZDAwZjEzN2Y3MmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUAvnCS586Fo25UMV61nL1gG2JMy
+1tsmbWhgYxFgpqANEJFVPe/Q95u2iWP44tebsqETotz0HQUiEG96LDagisvOdF4
pUb7LBif0nwqfiLl6Z7/PgwjV31sTGOQaQor+XU3sAadsarHDF4oKvEuNWjanCaU
A/CJUxkVgjaWkohJDNhxcPvimoPByhQd/cEnKcymLrja8L+cs0aCQO5rLDYSComR
CpSt7Ccb88oB0mHeuuBp2l6296lXf5h77f5SOly0NTnndY9ELbHKzY1ut/fA2mXr
T/qPdQvRpsEPLaObZUXQad8HVDLtBQJLZ/WIXeu0PFUfTF13eu1YRoFpmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOz3x5hn/qbS1k2PtLro0A8Tf3LVMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvN1BmSG1HZi1wdExXVFktMHV1alFEeE5fY3RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfyMA0G
CSqGSIb3DQEBCwUAA4IBAQB523Jdw9pK39bkUe43twlwP6ojXYWU9WBbQevFiYT/
dvRGzHgSdTPnL6m4yWFSSPVy8mmHn2X3alRd9CiCYtiICArm878s47adVR9y55x2
Ct3/UU99fo8+5DvLvufFxejUDlf2MJ6t10jkRDhZLPGv9W+tPn1tjp1PLoGshF6Y
exVqu/pVGhPPsnBuDRkY3dYGp08i64jG+Smhn8hZ9KvcaGmU2hbxt27FaIv6LJnt
4yobpyRacjbgU24rt6uPIrKS+MIcFhHpc4n/caL3q204CU+dNxFUf1UJNi8sakm4
lsIjPrpACWAV2UdvhA3Ljwu4F0qzei45fq8z6cddeGsc
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:18:37 2026 by rpki-client