Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/8oZmjbIZAPEGH0t8E9k0nB22KnM.roa
File: 8oZmjbIZAPEGH0t8E9k0nB22KnM.roa (raw, json)
Hash identifier: SppA4xfaD6zNs1DbDENaG9kgCCNrbqPsjSmL48wedw4=
Subject key identifier: F2:86:66:8D:B2:19:00:F1:06:1F:4B:7C:13:D9:34:9C:1D:B6:2A:73
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F60E5D9A2FBD8471EBCEB2AE35B58FE61
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/8oZmjbIZAPEGH0t8E9k0nB22KnM.roa
Signing time: Tue 14 Jul 2026 13:51:43 +0000
ROA not before: Tue 14 Jul 2026 13:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.221.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.226.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:e5:d9:a2:fb:d8:47:1e:bc:eb:2a:e3:5b:58:fe:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 14 13:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f286668db21900f1061f4b7c13d9349c1db62a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:35:a8:01:74:fd:1f:cd:d9:34:43:2d:8f:
2b:c5:18:be:91:49:2a:e7:57:d7:7b:c8:69:39:27:
e2:1c:f7:41:04:5f:50:6c:fd:0a:16:ca:9f:8b:30:
f6:48:30:a5:82:0f:34:8d:3d:dd:4a:fd:64:a9:41:
97:b1:b6:88:16:a6:1e:78:50:0f:26:51:09:5d:a0:
6b:ce:6d:45:f3:2e:89:ec:35:20:5e:85:cf:ea:ac:
5b:ff:79:37:71:dd:23:13:8b:3b:01:a5:dd:df:f0:
10:8e:c5:57:51:2a:36:a6:b5:17:8b:be:0f:0c:b4:
2f:5f:47:fa:9e:2f:14:a1:f7:77:14:bc:de:88:5e:
80:28:69:0b:57:5b:3c:e5:e7:b8:8c:03:12:08:52:
85:b1:ca:3f:87:db:65:46:fa:8e:d2:2b:42:a3:7f:
ea:ca:d6:56:1e:f2:5f:e8:62:62:74:75:dd:1a:a1:
9d:c2:ce:69:f1:57:7e:23:c9:94:e9:0f:69:ac:a3:
9a:54:f0:f3:47:54:c5:79:1b:e5:74:c2:5a:05:f9:
15:04:7a:7d:82:82:63:fe:be:4d:65:9a:56:77:70:
13:80:ef:86:72:15:44:b6:be:33:4f:c7:ce:f2:d0:
d8:bb:50:30:00:76:2f:a9:d6:81:3f:bb:d7:bd:eb:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:66:8D:B2:19:00:F1:06:1F:4B:7C:13:D9:34:9C:1D:B6:2A:73
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/8oZmjbIZAPEGH0t8E9k0nB22KnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.210.0/24
222.167.221.0/24
222.167.224.0/24
222.167.226.0/24
222.167.232.0/24
222.167.234.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
04:db:e3:2b:c5:c2:5f:58:c1:85:cc:0e:6a:55:83:c8:74:e4:
05:bc:d2:10:db:4b:f7:32:1f:7b:b8:df:20:b6:a3:82:cc:79:
ed:9f:83:fc:0c:2f:3d:c9:f5:a2:6c:6e:13:95:1f:c5:3b:93:
dd:0a:a5:53:20:2c:d3:6f:72:7e:a2:80:62:56:e6:21:55:af:
f1:22:68:6d:62:90:59:f4:15:36:e7:1a:f1:58:3c:57:45:74:
3c:80:38:9b:72:fb:50:8f:40:9a:20:88:30:9e:ea:7c:f4:52:
7d:d6:f0:f4:67:34:fc:f7:8c:82:68:d8:4c:b4:8e:fb:23:4c:
a6:01:8c:46:6f:e4:31:0f:c2:d1:b7:c7:1d:68:97:8c:6f:46:
da:7e:f3:91:ab:ab:18:0d:49:cc:58:2b:1e:34:79:4c:80:d4:
0b:a4:b2:d0:6f:5d:9b:78:a0:10:58:be:53:c2:84:50:4a:76:
80:74:44:c3:8d:19:36:a1:a5:51:d5:6a:60:22:0a:71:3d:d8:
24:fc:7e:6b:0a:6e:60:9c:df:68:53:f7:0a:e3:13:b5:e0:4c:
7f:c2:f6:e7:e3:84:2b:8a:08:5f:5e:87:da:3a:bf:c3:eb:7c:
7e:a2:94:1e:32:cc:a5:e7:7e:8c:b1:68:af:9f:d1:4c:bd:e1:
09:f9:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:51 2026 by rpki-client