Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HUi_CnIsyxzhLZq3XzoZYpxB_tw.roa
File: HUi_CnIsyxzhLZq3XzoZYpxB_tw.roa (raw, json)
Hash identifier: OtThXMNgMvyVjRFTbhu57b5YACvQDijOLonyh64tQfc=
Subject key identifier: 1D:48:BF:0A:72:2C:CB:1C:E1:2D:9A:B7:5F:3A:19:62:9C:41:FE:DC
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A1550E3D27DCB791A1ADE00DD762EF3A60
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HUi_CnIsyxzhLZq3XzoZYpxB_tw.roa
Signing time: Mon 19 Oct 2026 16:45:58 +0000
ROA not before: Mon 19 Oct 2026 16:45:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 222.167.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:0e:3d:27:dc:b7:91:a1:ad:e0:0d:d7:62:ef:3a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 19 16:45:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d48bf0a722ccb1ce12d9ab75f3a19629c41fedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:fd:4c:35:3a:11:2a:6b:25:2d:fa:8c:f2:
7f:ad:e9:93:e2:47:b3:35:83:d0:c2:d7:31:d0:8d:
05:96:6b:7c:b4:90:0f:2e:1b:94:7a:27:aa:bf:5e:
19:10:8f:ee:25:53:d1:e8:34:17:f3:24:d7:17:8b:
be:ab:bb:cb:a4:79:a2:bd:a6:ed:a1:75:fa:14:31:
65:45:c6:a0:26:2b:10:e9:8f:2a:07:d1:a3:e3:d0:
61:93:2a:a5:aa:0a:6d:4e:92:1c:78:e0:79:8b:94:
b8:51:8a:5f:b5:62:45:46:5b:7c:05:5e:13:85:d0:
bd:3e:7a:25:4b:d1:fe:2a:95:74:ad:db:b7:1e:48:
c0:7c:57:83:4f:4c:b9:51:7f:7b:af:b2:c1:16:7a:
3f:42:0a:36:e9:26:0b:ef:a5:e3:da:1c:3c:02:bb:
2e:06:12:25:d5:73:64:99:35:a6:e1:c4:07:bb:ac:
5f:25:77:1c:15:8e:4a:7d:71:9a:47:4a:9b:5b:36:
ec:17:4c:54:fd:31:6a:4c:3b:d8:68:0c:dc:5e:84:
f2:db:28:6d:02:48:e2:77:3f:eb:34:19:16:9e:27:
a0:22:30:d2:49:0d:a3:1c:a6:d6:7a:11:42:4f:5f:
e9:bc:78:c2:2d:9d:38:f3:5b:2a:5a:8f:3c:11:06:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:BF:0A:72:2C:CB:1C:E1:2D:9A:B7:5F:3A:19:62:9C:41:FE:DC
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HUi_CnIsyxzhLZq3XzoZYpxB_tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.254.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7a:e0:23:c2:a9:e9:69:d0:1e:11:75:11:fb:c7:33:fe:33:
75:d8:61:7f:86:2a:cd:b6:98:18:0b:59:ff:79:23:90:50:ff:
b7:f9:8c:f4:c5:ac:62:b2:52:e3:0d:30:1b:ed:dd:de:59:50:
30:90:0b:a3:5d:dc:10:10:1b:a6:42:e0:92:3f:86:87:6e:40:
91:81:e9:9f:8e:12:07:3d:e8:a8:09:7b:22:4b:a1:48:90:70:
8a:39:2d:fe:8c:0f:fb:a3:81:73:f5:cb:62:db:25:8a:d2:1b:
e7:f9:76:cf:b3:0b:01:22:2e:de:cb:03:f2:c1:8c:5b:8a:87:
51:6e:13:fc:d0:41:4d:42:04:c8:db:70:f4:ee:ba:ee:6e:44:
95:6c:35:2e:96:ab:01:e9:d4:05:48:6d:08:ce:99:ca:1d:69:
45:be:a9:b9:c2:9c:8c:99:a3:23:14:7c:ea:a1:b5:71:67:2f:
ed:da:86:9a:3d:7a:4e:1c:87:0d:49:79:57:e3:25:e4:4b:44:
79:b5:55:b9:0b:b6:82:bf:45:ef:d9:54:81:09:f2:43:61:61:
24:03:ab:70:32:50:0e:f3:5f:85:96:d4:21:31:9d:2e:62:a1:
3a:36:bf:3b:3a:a7:ca:8d:a4:32:e1:f2:f8:3d:5b:86:ce:ca:
c3:02:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:38 2026 by rpki-client