Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/9to6ElVl0M78YwXEGfSp__DpN5g.roa
File: 9to6ElVl0M78YwXEGfSp__DpN5g.roa (raw, json)
Hash identifier: pnO+6hyqf9cJybfiW0wMA34bXfeSJ706+DLhLtQr6LU=
Subject key identifier: F6:DA:3A:12:55:65:D0:CE:FC:63:05:C4:19:F4:A9:FF:F0:E9:37:98
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0D50209BA2F7BBD307DF90B245E12748F
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/9to6ElVl0M78YwXEGfSp__DpN5g.roa
Signing time: Thu 24 Sep 2026 20:01:15 +0000
ROA not before: Thu 24 Sep 2026 20:01:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 222.167.233.0/24 maxlen: 24
222.167.243.0/24 maxlen: 24
222.167.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:09:ba:2f:7b:bd:30:7d:f9:0b:24:5e:12:74:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 24 20:01:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6da3a125565d0cefc6305c419f4a9fff0e93798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:1f:fe:3c:b1:0f:6e:41:4d:7e:f3:41:59:
6e:90:30:a9:4c:47:80:04:7a:ff:37:3b:51:1a:d5:
ab:43:ea:e8:35:77:b2:4f:3f:80:e7:54:67:33:c5:
3f:04:7d:a5:cc:31:71:46:09:40:83:38:48:04:f0:
65:47:f6:ee:5a:df:8d:25:4b:a4:cc:c2:21:4c:90:
62:a2:d8:95:10:a1:1e:b8:6d:2b:ce:56:79:2d:46:
7a:60:32:7a:58:17:cc:6a:cd:16:18:65:15:ea:6c:
a9:57:f0:d0:48:1f:c7:d6:ff:63:7d:85:40:b0:a9:
93:fc:3d:55:9c:f6:49:a5:ec:fd:7e:75:ba:dd:83:
ba:9c:47:07:90:42:4a:26:ac:04:b1:92:21:00:42:
05:6a:04:4c:6b:83:39:23:ec:3c:d8:45:16:32:cf:
9c:16:57:ea:6c:28:bc:73:c6:24:9f:c6:93:f9:eb:
ab:a4:2d:9a:5b:cd:10:3e:2e:2b:68:d4:25:66:fd:
ce:6e:2e:bc:e9:89:dc:d9:9c:eb:4a:80:01:32:33:
9a:69:a4:d7:c7:64:53:57:1b:51:8e:6a:00:5f:e2:
f1:fa:74:f7:85:e8:45:ea:cb:90:7c:f6:62:c6:82:
49:fb:75:51:42:61:a2:9f:a4:5a:7f:51:a1:0f:2e:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:3A:12:55:65:D0:CE:FC:63:05:C4:19:F4:A9:FF:F0:E9:37:98
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/9to6ElVl0M78YwXEGfSp__DpN5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.233.0/24
222.167.243.0/24
222.167.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ad:92:49:92:69:f3:91:4a:69:62:40:96:7c:41:da:a1:72:
1e:99:b4:42:5b:f0:ba:84:31:e9:d7:74:7d:a4:6f:19:70:8a:
f3:8a:51:fe:d3:44:b6:91:5d:00:86:57:af:b2:9a:23:fc:15:
79:45:ad:b2:95:27:f5:5f:7d:f4:ac:01:d8:8f:04:7f:48:01:
46:da:7b:9e:b1:b5:90:04:6d:fd:23:b2:72:2c:fe:59:ca:36:
c1:15:c3:69:be:85:22:17:37:ad:f2:09:4a:02:c9:8a:dc:cb:
45:04:74:2d:53:43:ba:d8:c4:bd:ba:13:e0:d3:46:f0:2e:a4:
aa:71:94:15:20:65:a8:f2:5a:f3:b9:ef:ac:e8:9a:19:a0:f5:
e9:cd:53:bd:5e:d8:ef:f5:5e:58:d1:2a:73:bb:11:e5:cd:ad:
ea:80:19:72:64:5c:5f:9d:1e:e1:09:66:3b:92:47:ed:88:73:
21:a7:ec:6f:9b:15:fe:fe:20:ee:ea:3a:d4:6c:9e:8f:db:75:
a7:de:f8:7c:09:9e:43:fa:bb:92:cf:89:1c:2e:48:b8:7e:57:
e5:9c:f9:ab:fb:c9:b5:2e:95:e0:af:f2:70:8d:b3:92:4b:a3:
eb:07:e0:61:d1:3c:ca:85:3b:47:71:1d:70:bb:b8:ac:a1:3a:
b7:68:19:d7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDVAgm6L3u9MH35CyReEnSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwOTI0MjAwMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmRhM2ExMjU1NjVkMGNlZmM2MzA1YzQxOWY0YTlmZmYwZTkzNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gAf/jyxD25BTX7zQVlukDCpTEeA
BHr/NztRGtWrQ+roNXeyTz+A51RnM8U/BH2lzDFxRglAgzhIBPBlR/buWt+NJUuk
zMIhTJBiotiVEKEeuG0rzlZ5LUZ6YDJ6WBfMas0WGGUV6mypV/DQSB/H1v9jfYVA
sKmT/D1VnPZJpez9fnW63YO6nEcHkEJKJqwEsZIhAEIFagRMa4M5I+w82EUWMs+c
FlfqbCi8c8Ykn8aT+eurpC2aW80QPi4raNQlZv3Obi686Ync2ZzrSoABMjOaaaTX
x2RTVxtRjmoAX+Lx+nT3hehF6suQfPZixoJJ+3VRQmGin6Raf1GhDy5zrwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPbaOhJVZdDO/GMFxBn0qf/w6TeYMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvOXRvNkVsVmwwTTc4WXdYRUdmU3BfX0RwTjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA3qfpAwQA
3qfzAwQA3qf3MA0GCSqGSIb3DQEBCwUAA4IBAQAurZJJkmnzkUppYkCWfEHaoXIe
mbRCW/C6hDHp13R9pG8ZcIrzilH+00S2kV0Ahlevspoj/BV5Ra2ylSf1X330rAHY
jwR/SAFG2nuesbWQBG39I7JyLP5ZyjbBFcNpvoUiFzet8glKAsmK3MtFBHQtU0O6
2MS9uhPg00bwLqSqcZQVIGWo8lrzue+s6JoZoPXpzVO9Xtjv9V5Y0SpzuxHlza3q
gBlyZFxfnR7hCWY7kkftiHMhp+xvmxX+/iDu6jrUbJ6P23Wn3vh8CZ5D+ruSz4kc
Lki4flflnPmr+8m1LpXgr/JwjbOSS6PrB+Bh0TzKhTtHcR1wu7isoTq3aBnX
-----END CERTIFICATE-----
Generated at Fri Oct 2 13:02:15 2026 by rpki-client