Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Ql9OHsZY3se1g1vvUH1wbW5S1qA.roa
File: Ql9OHsZY3se1g1vvUH1wbW5S1qA.roa (raw, json)
Hash identifier: BX5RRsqmh87FsNyQRiTV5w4eJ1PzrfrvFTFXvcfPqPo=
Subject key identifier: 42:5F:4E:1E:C6:58:DE:C7:B5:83:5B:EF:50:7D:70:6D:6E:52:D6:A0
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F4731090CA8140246D05A311A8B01A056
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Ql9OHsZY3se1g1vvUH1wbW5S1qA.roa
Signing time: Thu 09 Jul 2026 14:03:43 +0000
ROA not before: Thu 09 Jul 2026 14:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 222.167.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:31:09:0c:a8:14:02:46:d0:5a:31:1a:8b:01:a0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 9 14:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=425f4e1ec658dec7b5835bef507d706d6e52d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ee:a6:a0:2d:0c:27:65:8c:1d:ff:16:47:b7:
1c:42:c6:19:17:49:f2:e5:ee:33:7a:a3:00:45:5a:
1f:96:e3:07:f0:92:20:c3:5f:44:43:10:86:43:ec:
18:d9:e2:bd:68:b8:cc:08:a5:84:6a:d7:e8:21:fb:
63:69:8c:b3:51:8f:32:22:e5:91:a3:fe:7f:47:62:
c5:bd:dc:cb:3d:70:35:80:aa:00:80:e3:a3:32:ff:
13:7a:ea:cb:15:f7:d4:f9:a6:4f:35:9b:62:33:f0:
7b:1e:de:19:cf:82:20:84:71:92:ee:49:47:04:73:
1e:35:ea:06:bf:09:bb:72:5f:34:4d:9d:1b:f0:01:
19:71:93:c0:41:21:1a:a9:e0:20:73:b4:dd:e7:12:
33:5d:63:7b:41:e3:19:08:c0:ae:4d:b1:e1:66:4d:
eb:6a:9f:2c:2f:98:5e:5c:cf:b3:0f:86:89:6d:2e:
8e:a1:d4:51:48:08:27:da:73:41:76:bd:d8:e5:fe:
b2:89:f0:84:42:9f:00:67:ec:8f:23:98:1f:cc:8a:
91:cd:1a:6d:db:fc:49:13:f0:16:92:3d:fe:3e:53:
de:ac:c3:9b:ae:b3:e4:11:66:c7:8f:86:93:6e:2e:
df:45:c6:f2:60:06:b3:07:ac:4e:59:c2:c6:e8:1d:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:4E:1E:C6:58:DE:C7:B5:83:5B:EF:50:7D:70:6D:6E:52:D6:A0
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Ql9OHsZY3se1g1vvUH1wbW5S1qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.201.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0f:3c:3d:d3:07:01:88:75:4c:f3:fa:cf:02:2e:45:c8:ea:
46:c8:91:5d:e8:a0:2e:2d:f4:46:41:02:87:c2:5a:d4:fc:d1:
96:65:92:87:a8:af:02:cf:e2:9b:45:d5:a7:d8:d6:c2:8a:5f:
eb:08:24:e0:88:40:5d:0c:bd:43:e9:a9:a3:e9:6a:d9:46:7f:
8d:13:c2:b1:cd:e8:1f:57:7f:b7:13:0c:27:fe:20:6d:69:96:
2a:52:ac:32:9b:4d:95:78:2b:4e:7a:f2:84:7b:c7:31:d7:c3:
4f:b4:6d:fd:b0:b4:15:7e:f8:58:1f:e3:a9:4c:57:6e:79:56:
66:09:48:6a:cd:96:16:ef:96:3a:38:d3:bc:90:de:70:4c:52:
9a:29:38:98:8b:aa:48:5f:bd:35:5f:c1:f4:c9:11:f9:a1:6e:
97:7f:36:46:25:b6:36:8f:7b:04:3d:64:e7:7f:75:d9:fd:eb:
bd:90:6c:7d:80:0c:41:72:f0:0d:c5:f8:b7:b9:97:1e:23:a1:
de:cf:07:2d:c0:0b:3d:ae:28:3f:77:07:9f:d5:2f:0d:29:9a:
3c:68:6c:fc:e1:0f:0d:e7:55:b5:28:71:ce:ff:0c:e1:b1:25:
ec:f8:bc:fa:f9:09:57:29:5b:f3:43:11:45:2e:4f:78:18:c4:
28:3b:44:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:52 2026 by rpki-client