Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Fllda1GGof6P303TUTHwPCCAtQQ.roa
File: Fllda1GGof6P303TUTHwPCCAtQQ.roa (raw, json)
Hash identifier: u5lb6y8q8DLuHPCyQSXlgICKuvOtLLt+dBcu770N0Q4=
Subject key identifier: 16:59:5D:6B:51:86:A1:FE:8F:DF:4D:D3:51:31:F0:3C:20:80:B5:04
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FF67E4A5FA15DB62821AAC43E9EE6F409
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Fllda1GGof6P303TUTHwPCCAtQQ.roa
Signing time: Wed 12 Aug 2026 15:01:39 +0000
ROA not before: Wed 12 Aug 2026 15:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 222.167.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:7e:4a:5f:a1:5d:b6:28:21:aa:c4:3e:9e:e6:f4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 12 15:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16595d6b5186a1fe8fdf4dd35131f03c2080b504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:26:ef:f1:e3:48:e1:e7:85:74:38:90:f7:
d0:fd:4c:4e:cd:3c:fd:8d:72:38:7b:f6:74:4d:88:
43:70:f7:38:f0:06:11:bf:d3:b2:78:f7:20:73:9b:
8f:e9:97:a1:1d:e1:9a:66:6d:e7:d9:98:67:f0:ca:
1f:21:87:b2:c6:de:78:b6:e9:bc:ad:ee:d0:20:c5:
09:be:c0:bb:f9:63:a5:04:d2:06:c8:9b:c6:ec:63:
f0:a0:b9:56:1d:13:7c:45:b1:ed:54:c2:02:8f:d4:
8b:8a:11:24:f4:40:da:82:0b:d0:78:a9:60:b4:39:
bb:d0:fb:ea:78:2a:4d:77:35:ca:8f:42:eb:21:42:
1f:ad:df:18:a5:65:24:08:dc:d7:4d:77:41:55:3e:
b0:dd:75:2b:10:e5:af:19:55:fd:f8:a8:f0:72:50:
62:a1:d8:fb:ec:b4:18:ab:ef:c1:41:26:ac:73:04:
3c:e7:28:ca:35:60:65:96:42:2f:66:64:73:2e:51:
6d:55:b0:2f:6a:dc:39:43:3c:a5:34:e4:2c:6c:7d:
34:59:de:e7:08:71:9e:56:98:94:2c:69:f5:a7:84:
c1:9d:67:fc:62:c9:51:5b:4d:ea:a8:22:14:05:0c:
63:e9:3d:bc:30:77:9a:cb:1a:fb:3f:7d:94:d3:7e:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:59:5D:6B:51:86:A1:FE:8F:DF:4D:D3:51:31:F0:3C:20:80:B5:04
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Fllda1GGof6P303TUTHwPCCAtQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.242.0/24
Signature Algorithm: sha256WithRSAEncryption
40:22:67:57:a4:e2:37:ef:f6:5f:0b:b2:26:b4:46:ff:f5:7c:
ae:46:1e:d3:e5:89:4f:0c:28:5d:61:6c:85:30:7c:30:d1:96:
b7:f2:11:e9:e9:07:a7:c8:f4:87:ec:30:a5:69:3e:94:77:02:
35:d9:f9:e3:bd:6d:55:39:19:ac:e1:5f:fc:a3:f3:b3:9b:72:
5b:38:db:db:df:72:06:24:d1:72:6b:de:a7:85:66:d3:f3:af:
1a:6e:91:b3:9b:72:59:96:ea:5a:f9:29:08:50:7e:2c:b8:45:
02:82:25:e7:f3:78:e1:0f:12:6c:63:9d:3a:ff:a7:bf:f4:2c:
58:9b:a0:9e:e4:5a:57:cc:5f:e9:6b:74:b6:0a:4b:c2:a7:24:
db:43:30:ea:a3:42:4e:0c:4e:2d:c2:8d:d2:eb:4b:63:28:6d:
54:b5:4a:12:14:66:a8:6d:e6:bd:65:99:f8:3c:93:d8:e5:45:
1c:6a:5b:6f:a1:7d:0d:5d:12:67:08:cf:a1:59:2c:bb:71:c3:
6a:5d:29:b0:74:6f:8f:19:69:43:44:de:df:25:b7:20:d5:c5:
13:5c:df:08:65:f5:ac:16:78:cd:23:98:95:d9:fb:e4:f2:51:
ab:7c:2a:b5:cf:78:ef:87:a0:29:5a:75:ba:f8:ff:5f:42:e7:
33:cb:94:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/2fkpfoV22KCGqxD6e5vQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwODEyMTUwMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjU5NWQ2YjUxODZhMWZlOGZkZjRkZDM1MTMxZjAzYzIwODBiNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmUm7/HjSOHnhXQ4kPfQ/UxOzTz9
jXI4e/Z0TYhDcPc48AYRv9OyePcgc5uP6ZehHeGaZm3n2Zhn8MofIYeyxt54tum8
re7QIMUJvsC7+WOlBNIGyJvG7GPwoLlWHRN8RbHtVMICj9SLihEk9EDaggvQeKlg
tDm70PvqeCpNdzXKj0LrIUIfrd8YpWUkCNzXTXdBVT6w3XUrEOWvGVX9+KjwclBi
odj77LQYq+/BQSascwQ85yjKNWBllkIvZmRzLlFtVbAvatw5QzylNOQsbH00Wd7n
CHGeVpiULGn1p4TBnWf8YslRW03qqCIUBQxj6T28MHeayxr7P32U034YeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZZXWtRhqH+j99N01Ex8DwggLUEMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvRmxsZGExR0dvZjZQMzAzVFVUSHdQQ0NBdFFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfyMA0G
CSqGSIb3DQEBCwUAA4IBAQBAImdXpOI37/ZfC7ImtEb/9XyuRh7T5YlPDChdYWyF
MHww0Za38hHp6QenyPSH7DClaT6UdwI12fnjvW1VORms4V/8o/Ozm3JbONvb33IG
JNFya96nhWbT868abpGzm3JZlupa+SkIUH4suEUCgiXn83jhDxJsY506/6e/9CxY
m6Ce5FpXzF/pa3S2CkvCpyTbQzDqo0JODE4two3S60tjKG1UtUoSFGaobea9ZZn4
PJPY5UUcaltvoX0NXRJnCM+hWSy7ccNqXSmwdG+PGWlDRN7fJbcg1cUTXN8IZfWs
FnjNI5iV2fvk8lGrfCq1z3jvh6ApWnW6+P9fQuczy5Rb
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:18:39 2026 by rpki-client