Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Q_BKX6t84HGUXg0e0q8WSsPRJYc.roa
File: Q_BKX6t84HGUXg0e0q8WSsPRJYc.roa (raw, json)
Hash identifier: W3yU5Z0q/qMh486pEaOpBK3CzEWI95dYFtSjBBJI6Q8=
Subject key identifier: 43:F0:4A:5F:AB:7C:E0:71:94:5E:0D:1E:D2:AF:16:4A:C3:D1:25:87
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019CD92E879F2F9A04485D3FC79450808305
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Q_BKX6t84HGUXg0e0q8WSsPRJYc.roa
Signing time: Tue 10 Mar 2026 19:17:10 +0000
ROA not before: Tue 10 Mar 2026 19:17:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 222.167.228.0/24 maxlen: 24
222.167.229.0/24 maxlen: 24
222.167.230.0/24 maxlen: 24
222.167.233.0/24 maxlen: 24
222.167.235.0/24 maxlen: 24
222.167.240.0/24 maxlen: 24
222.167.241.0/24 maxlen: 24
222.167.242.0/24 maxlen: 24
222.167.243.0/24 maxlen: 24
222.167.245.0/24 maxlen: 24
222.167.247.0/24 maxlen: 24
222.167.248.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:2e:87:9f:2f:9a:04:48:5d:3f:c7:94:50:80:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 10 19:17:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43f04a5fab7ce071945e0d1ed2af164ac3d12587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:e4:bb:4c:3f:c9:a1:7f:69:26:a6:4c:1e:
36:e8:f9:57:0c:2f:1f:60:cc:ed:79:58:47:36:c5:
2b:5d:9d:4e:0a:e2:e3:53:8b:58:54:7e:e7:18:49:
b1:e2:1d:7d:f5:70:37:d2:db:52:0b:7c:52:fb:0c:
51:fe:b2:04:73:9c:13:5f:dc:59:0f:6f:cc:85:e0:
d3:43:15:cc:3e:b4:b0:44:bd:a4:4a:ec:7f:9d:f3:
9e:01:2b:d6:0f:cd:f3:bd:a8:cb:dd:03:ab:5f:bc:
6d:05:93:1b:d7:81:99:a0:36:94:0d:cf:01:ae:27:
32:dc:aa:bd:fe:f4:7b:4b:59:20:a7:49:bf:09:fd:
ea:48:bf:39:01:4d:58:f1:6b:5c:ee:1e:d5:2a:ad:
ed:ec:08:69:24:28:ad:b9:26:2e:09:eb:3d:1c:86:
be:d7:02:9b:76:fb:87:c1:0e:06:72:0a:2a:c7:40:
6e:47:81:32:1f:35:5c:6c:d7:da:a1:83:de:55:8a:
49:1c:98:b1:8e:b9:45:8f:ca:af:43:48:20:a2:aa:
c9:f8:20:0d:62:6d:eb:65:59:a3:af:20:9c:2b:8a:
25:b3:f7:c6:04:bd:f7:27:97:f1:00:80:ff:4f:22:
b8:9b:2e:3e:09:b9:d2:38:e9:16:23:55:31:41:56:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:4A:5F:AB:7C:E0:71:94:5E:0D:1E:D2:AF:16:4A:C3:D1:25:87
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Q_BKX6t84HGUXg0e0q8WSsPRJYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.228.0-222.167.230.255
222.167.233.0/24
222.167.235.0/24
222.167.240.0/22
222.167.245.0/24
222.167.247.0-222.167.248.255
222.167.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7d:55:06:1b:43:b4:77:34:fb:77:29:05:4b:06:af:71:75:
47:fc:c7:92:6b:6d:9f:ba:9b:80:03:d5:8e:9e:05:af:ca:a7:
87:6b:b6:ad:ef:96:91:8f:60:c7:42:9b:ae:42:b9:0a:5b:a5:
43:f0:a1:c7:26:6c:b8:26:0a:57:c2:04:0b:b8:54:b7:d1:0b:
38:e5:9f:59:ba:b3:5f:5e:d8:21:7f:f7:46:e8:6b:a1:0c:b1:
f5:82:43:78:39:16:30:43:6e:81:58:f1:7c:a9:13:e2:1e:19:
7a:d1:18:17:62:03:2d:8c:28:c1:c6:cf:c2:c2:ea:cf:06:9b:
f9:b3:f2:13:50:64:96:1f:77:58:62:ea:82:c3:49:80:b0:2d:
8b:20:db:dd:04:74:49:14:73:2b:d7:56:e2:e2:be:df:26:fe:
85:77:e4:c5:85:a3:ff:da:52:96:3f:c9:f2:31:7d:fc:20:97:
4c:0b:a7:5e:28:47:30:26:30:12:ce:7d:71:13:39:f8:c8:ab:
93:ff:4c:7b:fa:f6:25:49:3a:53:ac:d6:d7:2a:15:f1:b8:10:
a8:b8:ae:3e:55:a9:b8:de:9c:6a:10:15:ab:9a:7d:55:73:95:
ad:4e:36:5a:f0:45:03:89:c0:a3:dd:03:e8:b0:d1:8e:78:8c:
a6:15:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 13:13:59 2026 by rpki-client