Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RnmvYxiGrKIhWJ-yuCle47RUTQY.roa
File: RnmvYxiGrKIhWJ-yuCle47RUTQY.roa (raw, json)
Hash identifier: e8umUrfX7GKk5aUFcyfA7QCw21eEaIr29lgRkWbLUa8=
Subject key identifier: 46:79:AF:63:18:86:AC:A2:21:58:9F:B2:B8:29:5E:E3:B4:54:4D:06
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E515183A5765503C14EA3A76C3A0B15F0
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RnmvYxiGrKIhWJ-yuCle47RUTQY.roa
Signing time: Fri 22 May 2026 20:12:36 +0000
ROA not before: Fri 22 May 2026 20:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401881
IP address blocks: 222.167.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:51:83:a5:76:55:03:c1:4e:a3:a7:6c:3a:0b:15:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 22 20:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4679af631886aca221589fb2b8295ee3b4544d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:f3:34:23:61:5c:53:0c:bd:f7:ec:4c:cf:
91:57:dd:ec:c1:6c:e5:8e:17:de:75:70:0e:52:c1:
7d:62:8f:df:43:8d:ea:9e:a9:98:a3:e5:e9:a7:b9:
31:5b:13:4d:65:5c:bf:1f:49:71:24:0c:78:55:50:
f4:cb:d4:ea:e5:b6:d8:35:3b:9c:e6:73:ce:de:78:
8f:09:1f:e8:c3:08:66:1a:da:73:34:4c:30:f5:6b:
0d:83:1e:a9:ea:26:d1:15:2d:34:21:1e:8a:6c:b0:
7b:fe:6f:72:42:4a:9b:08:27:a1:94:0e:1a:fe:28:
5a:3f:af:93:ee:60:e4:f8:30:bf:cb:6c:4e:9f:fe:
07:10:8e:cb:15:bb:da:ea:de:04:f6:b5:e2:0b:f0:
cc:fc:59:40:16:55:b8:c7:4f:6e:35:8e:b8:ac:32:
a3:2b:ca:93:d4:6d:04:6c:9a:8c:45:b6:46:20:1e:
b1:b4:48:ea:03:7e:ab:1b:56:16:34:64:09:5b:16:
db:78:6f:10:73:ca:60:f4:4a:6a:3a:56:9c:68:97:
c6:f6:cd:3f:3e:2b:89:d7:3e:d1:3f:38:ad:d5:90:
4e:d7:fd:6b:86:14:e1:09:a3:d4:25:8d:56:97:36:
24:6e:9c:68:5d:87:6a:b9:f4:45:b2:43:4d:be:da:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:AF:63:18:86:AC:A2:21:58:9F:B2:B8:29:5E:E3:B4:54:4D:06
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RnmvYxiGrKIhWJ-yuCle47RUTQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.214.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a9:1e:ec:3c:b8:65:65:68:9b:4a:65:e3:73:71:e1:d0:38:
79:1b:4d:ff:3c:cd:68:bf:9d:c4:85:c6:cc:6f:d4:9c:5e:8f:
dd:65:7c:a9:76:c5:20:7f:76:fb:29:38:4b:74:e3:4e:d8:cd:
bc:13:c2:a1:99:cb:36:a2:6e:c3:8f:75:9b:d7:64:62:eb:cc:
6d:bb:fb:22:cf:f5:74:cb:de:84:d3:23:96:fa:6e:74:20:d5:
c6:8f:5b:09:55:29:27:94:8b:a1:55:0c:57:4b:c0:ef:e7:45:
c0:6c:21:47:84:75:f9:d9:7b:b5:39:8a:fe:a6:c7:ea:28:3c:
9c:c3:88:f0:39:c6:bb:38:66:87:db:e1:b9:af:c3:8c:bc:d8:
38:53:35:1f:32:27:a3:3c:29:a8:c1:97:06:b1:28:99:cc:57:
97:93:a8:7e:08:dc:dd:01:3f:1b:3e:50:5c:db:8d:bf:11:40:
f2:67:34:31:4a:e0:ca:2c:44:1f:20:6e:ca:ca:d2:ae:79:c8:
c6:cb:bb:4e:63:77:aa:bc:22:01:a6:20:99:bf:c3:a0:8f:92:
47:93:59:fb:cf:97:eb:25:6e:a1:94:33:22:b9:b3:ed:00:ae:
57:a1:e6:40:be:6d:6c:65:3f:8b:3f:16:2a:49:8d:0c:97:eb:
f8:88:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:07 2026 by rpki-client