Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/MSFQP6LsDapqlbgN6paVxIgW5mU.roa
File: MSFQP6LsDapqlbgN6paVxIgW5mU.roa (raw, json)
Hash identifier: ObQOJAEw5di5JXnoDXezMNTSIibEVES/qFNUoinGlNk=
Subject key identifier: 31:21:50:3F:A2:EC:0D:AA:6A:95:B8:0D:EA:96:95:C4:88:16:E6:65
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F49CF33D90C1F0C44BFB66D116479EE37
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/MSFQP6LsDapqlbgN6paVxIgW5mU.roa
Signing time: Fri 10 Jul 2026 02:15:43 +0000
ROA not before: Fri 10 Jul 2026 02:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 192.144.78.0/24 maxlen: 24
222.167.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:49:cf:33:d9:0c:1f:0c:44:bf:b6:6d:11:64:79:ee:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 10 02:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3121503fa2ec0daa6a95b80dea9695c48816e665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:5a:e5:bc:23:31:6a:9d:e8:05:a8:fa:64:
c7:c9:fd:e5:bc:59:69:3f:28:8c:b5:b5:33:68:ed:
ff:cc:a9:77:65:20:f8:88:41:32:2a:47:ce:98:e6:
f7:ff:32:97:d5:6e:4a:27:57:29:34:7f:69:e3:4d:
92:a5:cd:43:47:09:7d:15:c5:8f:de:94:40:e2:38:
f3:6c:28:d7:dd:38:39:4d:c9:b7:fb:cf:8e:f1:02:
06:f2:82:ff:22:f3:d8:9d:ad:ad:27:a2:25:e1:67:
bc:19:41:17:3c:b0:e0:e5:1f:04:36:75:11:79:36:
ca:c6:c9:86:29:2b:6e:04:86:8d:56:0d:17:c2:48:
f7:f7:6b:38:b9:e6:4b:a0:15:82:b8:77:f5:50:de:
32:4d:00:72:09:08:c0:56:18:6a:9b:77:46:9a:c0:
e7:00:0d:9c:5d:7a:2d:e9:8a:c7:83:2c:e5:c3:7e:
9f:ee:4c:f8:50:56:3f:c4:cb:9c:af:69:db:24:97:
39:dc:6e:ea:fb:84:f7:c3:65:db:2e:5f:ac:e5:99:
29:fa:92:0e:38:a6:50:d9:0c:0a:a4:46:3c:40:c2:
82:8c:78:fc:e4:99:0a:fe:fa:72:aa:3b:9f:c4:87:
f3:ba:c7:86:06:3b:bb:31:87:a5:45:9d:c7:b7:0d:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:50:3F:A2:EC:0D:AA:6A:95:B8:0D:EA:96:95:C4:88:16:E6:65
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/MSFQP6LsDapqlbgN6paVxIgW5mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
222.167.230.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0d:b4:b9:b0:39:a2:8f:4b:6e:03:57:c7:88:29:c4:04:76:
d1:0d:d1:9c:38:76:cb:8a:e4:c2:50:08:dc:eb:69:ad:ec:f8:
5b:03:6f:9b:d9:2b:8d:86:69:f6:b6:6e:f0:65:f2:aa:ee:d0:
c7:21:78:a5:b9:b3:d3:ac:33:1e:3f:07:9b:11:8b:ec:7a:78:
77:67:b2:2d:a1:49:0a:df:45:12:f8:18:ef:98:a5:4d:30:1b:
5f:bf:18:9f:27:13:bf:b5:d7:f1:cd:4f:f8:35:c2:7e:60:28:
8a:be:bd:1a:fd:58:12:c3:d8:fb:8d:df:fb:90:36:e1:d2:20:
47:ed:9d:e3:22:2f:a3:41:65:93:dc:97:82:a3:b3:63:32:51:
0d:36:3f:e5:7d:f0:3d:a7:5d:87:32:c8:89:a3:3d:a8:16:32:
2a:e4:22:d5:2a:24:04:19:d1:2a:27:0b:bf:b2:f7:b2:4c:46:
eb:a3:95:53:af:c7:87:d8:05:06:e3:05:8d:26:de:24:91:63:
5e:8c:2b:d2:bd:ca:76:f0:6b:95:ae:f0:0a:75:39:45:01:99:
29:73:3e:e1:39:4a:17:8c:bb:7d:6b:a5:df:3c:69:d5:bb:c0:
e3:d7:f1:86:5d:b7:1b:e9:d3:5e:0c:27:1f:9e:c2:59:75:50:
46:f0:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:23 2026 by rpki-client