Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/AYkWJ2EzQ38eprzb4Om54W15fWI.roa
File: AYkWJ2EzQ38eprzb4Om54W15fWI.roa (raw, json)
Hash identifier: SEH9hhcS7jqHlKMNVxwzcAf2Fo3jV98mT68L1vDpun8=
Subject key identifier: 01:89:16:27:61:33:43:7F:1E:A6:BC:DB:E0:E9:B9:E1:6D:79:7D:62
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019EDFEC565022F1B522344C11F168C44F7E
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/AYkWJ2EzQ38eprzb4Om54W15fWI.roa
Signing time: Fri 19 Jun 2026 12:47:48 +0000
ROA not before: Fri 19 Jun 2026 12:47:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141520
IP address blocks: 222.167.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:ec:56:50:22:f1:b5:22:34:4c:11:f1:68:c4:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 19 12:47:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=018916276133437f1ea6bcdbe0e9b9e16d797d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:c1:e2:75:99:a3:08:8b:a2:3f:dc:47:b6:
8a:e6:52:bb:c6:83:6b:9f:b8:1f:fa:88:87:ff:60:
a4:8c:06:c5:4d:5c:0d:63:dc:a5:9c:b3:d9:21:d2:
15:ef:09:4c:47:29:48:b5:ff:e9:b7:7e:90:b7:20:
57:e2:63:df:85:46:b9:7e:d1:3d:dd:ba:4c:b0:9e:
80:5a:c1:6a:22:51:6b:92:02:99:32:fd:bd:c9:3f:
75:0d:78:c4:4e:ee:b7:c3:89:37:23:e1:5a:9d:42:
36:04:31:9e:0a:78:a8:a4:60:2a:df:7c:a6:2e:f7:
6c:3b:9d:0c:0b:9c:87:43:21:b5:7d:25:33:c1:c3:
c8:ec:c6:9c:e1:2e:28:1d:61:2b:6c:e2:59:16:e2:
11:14:92:0e:0b:7c:32:e6:7e:ee:4f:ac:17:1d:a2:
3a:da:04:3d:e2:55:57:82:a0:9e:08:58:81:4e:f4:
6c:f0:15:cf:df:a1:84:b7:59:2c:3e:41:30:d5:87:
1d:83:7f:70:a1:20:68:9a:5f:32:b2:9f:69:a7:56:
1e:55:92:ee:03:24:1d:1a:d8:63:b8:76:33:88:10:
0a:18:4e:6e:61:9d:7c:5c:d5:04:dc:72:5e:49:b4:
c7:ed:d5:dd:59:d2:8d:a4:59:46:ca:35:ef:35:5e:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:89:16:27:61:33:43:7F:1E:A6:BC:DB:E0:E9:B9:E1:6D:79:7D:62
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/AYkWJ2EzQ38eprzb4Om54W15fWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:16:ef:16:c7:d7:8d:22:18:d1:8f:1f:63:1e:39:0b:c3:44:
b6:dd:2f:9a:dc:7e:d8:77:56:6a:25:94:7d:e3:94:98:49:2a:
b3:cc:f0:97:08:99:9b:31:7b:cc:a0:8b:08:14:43:62:3c:ea:
89:bb:a0:f1:0f:b1:01:67:8a:93:15:ce:5f:f8:23:95:11:0b:
14:ac:f8:21:ef:df:06:d8:82:2b:59:71:c1:0c:c1:35:07:2d:
a5:7a:8c:79:2c:4a:59:e7:d5:81:95:e2:74:69:80:65:a1:2d:
ea:d6:56:04:88:40:e5:68:4d:cb:88:db:77:ed:60:82:12:23:
f6:59:fc:57:90:7b:4b:0a:64:03:9e:7d:61:51:b4:4c:2c:c6:
4f:a1:04:0d:b6:10:01:24:b9:55:64:10:2d:8b:26:8e:5b:b1:
6f:a2:1a:0b:38:cb:7f:a0:2c:78:e0:51:25:a6:17:96:d6:07:
1d:60:fe:a9:29:7a:8f:83:d8:c2:f7:52:b2:07:fd:03:1a:21:
5c:d9:3a:48:2a:0f:54:ae:c6:42:bf:ba:b0:07:da:9b:d2:b1:
10:c6:f4:bb:f6:8e:04:fc:c5:ef:20:fc:8a:27:59:f3:c4:fa:
5f:34:18:63:e9:b7:a6:31:76:a8:14:fa:91:46:5c:8b:b0:5f:
3c:fd:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:49:36 2026 by rpki-client