Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/AkTKpD9hNqiV_5_c6-DMcTgYskc.roa
File: AkTKpD9hNqiV_5_c6-DMcTgYskc.roa (raw, json)
Hash identifier: G2QKxBnm98oc52v99fqhnVJF48h7SOnkbCMrYYDKSd8=
Subject key identifier: 02:44:CA:A4:3F:61:36:A8:95:FF:9F:DC:EB:E0:CC:71:38:18:B2:47
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F09CCFC0FCA19AB4E453DA3AFC093BA8A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/AkTKpD9hNqiV_5_c6-DMcTgYskc.roa
Signing time: Sat 27 Jun 2026 15:57:36 +0000
ROA not before: Sat 27 Jun 2026 15:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 222.167.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:cc:fc:0f:ca:19:ab:4e:45:3d:a3:af:c0:93:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 27 15:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0244caa43f6136a895ff9fdcebe0cc713818b247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f4:95:e1:f0:a1:76:24:c6:11:b0:fb:d1:7a:
c3:62:01:1f:29:03:81:86:84:ce:a9:be:cb:c6:55:
54:06:0e:27:88:2c:06:e3:91:7f:62:be:3d:4c:b3:
81:07:30:0c:4e:3c:c6:f6:fa:63:0f:cd:e3:22:60:
7b:50:ff:53:28:1a:da:f8:0e:1b:84:91:ad:9f:c1:
c4:d8:64:0c:6c:62:bc:47:09:fe:58:80:28:5e:63:
16:62:70:ef:10:01:f6:03:3b:7a:c0:1a:04:63:21:
c1:7a:4d:0f:15:69:83:b1:7d:28:40:0c:d4:4d:9d:
8a:f8:7d:05:98:c4:54:63:94:28:f4:07:9d:ff:bf:
f8:97:85:14:f1:34:67:63:f1:61:3d:cd:f7:6b:28:
19:05:da:ce:e7:dc:e3:ba:2f:30:9c:c9:64:03:03:
05:2c:eb:99:04:ee:96:92:05:02:a3:1e:bb:15:d6:
9a:5b:93:71:9d:9b:18:4c:45:02:8a:98:08:f7:b7:
c5:e2:6a:0d:a7:0c:18:0b:d2:85:83:ae:67:9e:fe:
59:7a:ac:6c:ee:6c:ae:59:cd:ed:fd:b4:75:86:51:
19:a6:0c:ab:91:63:c4:a4:4a:2c:f3:75:33:cd:ba:
8a:2b:82:24:89:91:54:9f:05:41:4a:6e:b9:32:f2:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:CA:A4:3F:61:36:A8:95:FF:9F:DC:EB:E0:CC:71:38:18:B2:47
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/AkTKpD9hNqiV_5_c6-DMcTgYskc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:36:fb:40:d7:03:a8:cb:ce:66:9a:da:b4:b7:03:f8:95:ef:
5d:d9:f7:35:45:73:05:af:7f:04:d7:e9:aa:a1:e0:ef:1d:1a:
69:ac:7f:37:91:85:81:93:e7:35:70:ee:41:06:56:1c:10:09:
92:5c:7b:8b:f4:f0:e0:41:1a:15:5e:38:d3:b9:9c:2b:c1:2d:
e1:46:02:08:07:d0:ac:8e:f3:1d:59:b4:92:cc:17:46:34:6e:
7f:f4:a8:ba:6a:82:9f:37:dc:1b:93:ad:3d:a5:c5:61:43:a9:
dc:1c:dc:54:cd:51:fb:b1:59:8f:fc:27:f2:75:a5:92:bf:ef:
f1:86:0b:c5:c8:38:57:d0:89:18:44:11:4b:aa:dc:b8:3c:80:
e9:80:ee:c5:4c:83:c9:3e:1c:02:7a:0e:d8:51:94:40:0f:3b:
0f:5f:f2:d7:b1:0a:8c:b9:e6:8f:55:a8:d7:f5:6c:08:40:fb:
77:1e:32:f9:c1:f8:04:13:0b:69:50:dd:fe:f8:3f:c2:1d:6b:
5e:fd:15:bb:00:fe:3d:b0:d2:62:96:62:0c:4b:32:cd:74:28:
f8:c4:d6:69:83:37:8a:57:dd:5c:97:d9:07:5a:75:7a:b7:a6:
15:cc:69:ff:ba:ae:44:34:21:5f:3e:9f:7a:24:78:8e:b3:18:
76:d8:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:50:14 2026 by rpki-client