Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IsVAlyo8puKJzUYXR4GMdWCXH0c.roa
File: IsVAlyo8puKJzUYXR4GMdWCXH0c.roa (raw, json)
Hash identifier: KvcwPQIpZSw3wovgqUjWO3wsjv70FH3I1+PjiZPmw8U=
Subject key identifier: 22:C5:40:97:2A:3C:A6:E2:89:CD:46:17:47:81:8C:75:60:97:1F:47
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F3D1C2A923B09134BBCAD7AC7D035A205
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IsVAlyo8puKJzUYXR4GMdWCXH0c.roa
Signing time: Tue 07 Jul 2026 15:04:43 +0000
ROA not before: Tue 07 Jul 2026 15:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139535
IP address blocks: 222.167.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:1c:2a:92:3b:09:13:4b:bc:ad:7a:c7:d0:35:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 7 15:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22c540972a3ca6e289cd461747818c7560971f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:a2:b5:e7:9e:97:60:b8:fc:2b:ce:40:bb:
60:d4:5b:89:1d:c9:38:bc:43:8c:0a:d1:63:81:b4:
dc:05:42:e4:fe:c1:a7:93:5d:3c:17:1d:3d:8c:ab:
45:40:45:17:2c:0c:26:3d:a1:50:05:b2:80:4a:c3:
02:f6:20:99:18:96:02:a6:1a:f5:43:06:e4:d8:dd:
79:e6:7b:4b:d5:bd:8a:64:fb:d8:a7:27:66:dd:ca:
a9:2e:29:f8:ca:7c:d2:bb:10:c5:c9:f5:72:c3:8a:
6f:bf:94:b5:15:8b:a6:1e:6e:56:4c:c2:18:d2:8f:
4e:e7:b6:94:8b:58:7f:9f:b2:28:17:5c:d9:02:d4:
aa:5c:7e:bf:dc:1c:0f:66:da:67:8c:24:02:8e:d5:
91:a4:e3:63:f0:3a:2f:1b:40:21:c8:f4:f7:05:23:
b0:37:97:ae:4a:d3:e0:ee:06:f1:5a:ed:cc:e1:8a:
3e:08:53:bc:71:4f:4d:66:fb:4e:ab:46:a3:58:1f:
72:c3:4d:d2:68:fa:4b:78:d2:6e:04:51:ba:70:0a:
a6:36:61:41:a8:fa:d2:aa:1a:ec:f8:77:2e:04:f2:
23:c2:bb:f0:ac:10:d5:67:49:6a:03:42:62:73:97:
b2:82:ec:70:7d:ff:d3:30:0b:2f:76:87:15:a9:e2:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:40:97:2A:3C:A6:E2:89:CD:46:17:47:81:8C:75:60:97:1F:47
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IsVAlyo8puKJzUYXR4GMdWCXH0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.215.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a5:54:56:76:73:34:56:3d:f0:c0:8d:ea:7b:2d:0f:14:1a:
77:f3:f3:01:ef:75:a3:08:7d:d8:ce:86:ae:67:7c:a4:4b:00:
3e:66:a9:3d:89:e7:df:d4:b0:00:dd:44:0e:ec:b8:66:20:72:
b9:d3:7f:e7:3c:9b:22:98:56:e3:47:69:55:99:81:85:00:6f:
12:f6:10:52:92:ac:54:43:0a:28:c6:43:ce:ce:d3:4b:32:1a:
9a:1a:2c:d2:85:7d:2a:e8:e3:8c:06:92:9d:71:73:b1:96:28:
08:5f:c7:ee:18:07:b1:9d:34:02:2d:e8:bf:79:96:b8:f5:5b:
ec:a2:d5:6e:f9:14:b4:83:f1:11:3c:68:36:d0:c1:6f:03:30:
e8:1e:1f:1f:37:92:27:59:75:c2:af:0f:29:9e:e5:2b:e9:78:
54:ab:68:68:ec:76:80:6c:32:53:17:bc:13:f6:81:dd:08:e9:
f9:49:31:d4:a4:f5:f3:45:37:0c:9d:e1:94:7e:21:f9:16:15:
02:40:c5:1e:78:c3:74:1b:61:91:30:d6:65:a2:df:fc:9f:94:
dd:5b:59:58:0b:93:cf:3a:d0:ae:37:97:36:cc:c7:e8:09:39:
47:20:0f:07:e9:65:97:d1:73:cc:67:36:39:69:4c:ef:c5:c7:
b6:c0:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:07 2026 by rpki-client