Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/KPp6E0TVL9rqQX-h8ZywlIyooFw.roa
File: KPp6E0TVL9rqQX-h8ZywlIyooFw.roa (raw, json)
Hash identifier: t8Z/YP8B5zSBi6k7HogSqWjAnVdpFTjn42hE4dcRvhw=
Subject key identifier: 28:FA:7A:13:44:D5:2F:DA:EA:41:7F:A1:F1:9C:B0:94:8C:A8:A0:5C
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E0D011C1D7F343ADDE08FCDFEE565BFF1
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/KPp6E0TVL9rqQX-h8ZywlIyooFw.roa
Signing time: Sat 09 May 2026 13:50:36 +0000
ROA not before: Sat 09 May 2026 13:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398993
IP address blocks: 222.167.210.0/24 maxlen: 24
222.167.218.0/24 maxlen: 24
222.167.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:01:1c:1d:7f:34:3a:dd:e0:8f:cd:fe:e5:65:bf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 9 13:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28fa7a1344d52fdaea417fa1f19cb0948ca8a05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:9e:85:db:93:17:98:9d:42:38:fd:13:f9:
26:bb:a0:8f:f0:cd:4f:3c:ae:42:3c:ab:cd:22:95:
e0:9d:6e:90:1c:fd:55:92:f1:08:f8:1a:70:11:0d:
93:2a:33:72:e6:c4:4a:ca:4b:c4:12:f2:05:e8:58:
36:c7:e3:b8:8b:8f:fa:d5:75:e9:0e:1a:2c:60:32:
db:87:7c:21:a3:08:1f:5d:5a:9d:2a:49:b3:46:4b:
cf:9d:16:ad:49:9a:a9:6f:d8:65:7a:70:c5:5b:87:
f9:29:19:dc:68:82:e8:24:b1:04:73:ea:bd:fb:ce:
84:62:e5:2d:ec:0a:41:56:f1:da:59:da:5e:21:92:
be:39:03:f7:51:fa:79:10:dc:36:bf:25:47:61:4f:
c6:15:6f:2a:58:8c:5e:75:6b:3f:86:85:c4:65:16:
4b:9a:1c:29:20:56:3d:78:32:c2:7f:48:3e:9f:7d:
87:fd:9b:40:d5:1f:48:e0:e8:e9:b2:a8:94:08:d3:
0a:ef:3a:68:16:48:7c:d5:df:cc:ed:c8:8f:ec:4b:
25:eb:46:2a:97:c8:6a:24:b7:ab:52:95:d9:57:6e:
e8:64:be:a8:cd:bb:a2:f7:d4:9b:d0:2c:88:89:f4:
91:d8:68:49:a4:16:9e:5e:b6:f4:01:47:e6:1d:54:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:7A:13:44:D5:2F:DA:EA:41:7F:A1:F1:9C:B0:94:8C:A8:A0:5C
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/KPp6E0TVL9rqQX-h8ZywlIyooFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.210.0/24
222.167.218.0/23
Signature Algorithm: sha256WithRSAEncryption
54:05:05:f6:92:bd:f8:4e:54:00:49:82:3a:80:27:2e:bb:50:
e4:84:ff:d4:37:75:d4:48:2b:9f:39:55:74:73:66:68:9b:2c:
df:f6:fd:4c:c6:f0:1d:23:3c:a7:32:8d:f8:47:42:67:e8:21:
95:c1:eb:60:05:47:da:7a:0b:07:fa:f5:3a:76:53:77:55:24:
ef:61:e3:70:f6:a7:f9:77:81:08:b8:87:a2:8c:98:bb:2c:1b:
64:a1:39:e3:68:d5:c6:3a:44:bd:e0:f5:32:04:f8:73:29:f9:
25:fd:0a:3d:07:76:59:1c:f6:27:85:fd:e0:d0:87:e0:2b:b5:
cf:86:12:70:ba:fd:0d:09:a6:9e:26:f7:cf:a0:2b:bf:bf:92:
ea:22:1e:1e:4b:6c:62:66:9a:b8:94:f0:7e:e4:f7:67:3f:50:
c9:35:1a:1e:65:4f:fe:55:3f:9c:1e:1b:c1:06:17:e5:ee:30:
a4:69:00:1f:4e:62:1e:67:22:2b:75:5e:f2:db:04:0f:d1:a0:
11:4a:b9:69:e1:22:ab:0a:c4:87:4b:31:79:98:fd:30:28:8c:
14:47:c0:e4:96:38:72:eb:38:26:7a:3b:16:86:20:d9:33:f4:
5f:87:8b:bf:66:f6:e8:f2:d4:d3:2d:0d:e3:36:4f:df:02:98:
7d:58:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:42 2026 by rpki-client