Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/T3CGjfK93JB4yv3aSmt2hZVJ5-k.roa
File: T3CGjfK93JB4yv3aSmt2hZVJ5-k.roa (raw, json)
Hash identifier: 5/8YsK2cfD8hBwYS8trgRORWrt/LLjKKpPwdSNrbCbY=
Subject key identifier: 4F:70:86:8D:F2:BD:DC:90:78:CA:FD:DA:4A:6B:76:85:95:49:E7:E9
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019EF61ED24F6362E483533BBFD6C88B42FD
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/T3CGjfK93JB4yv3aSmt2hZVJ5-k.roa
Signing time: Tue 23 Jun 2026 20:14:35 +0000
ROA not before: Tue 23 Jun 2026 20:14:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 222.167.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:1e:d2:4f:63:62:e4:83:53:3b:bf:d6:c8:8b:42:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 23 20:14:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f70868df2bddc9078cafdda4a6b76859549e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:4f:82:09:89:3f:ce:bf:8b:0c:70:c0:5f:
6e:90:64:74:39:31:dd:5e:e1:46:a8:f8:86:82:17:
e8:76:af:8f:c9:c5:57:e2:85:05:18:83:c0:c5:44:
55:11:0d:52:5c:08:4e:f7:db:1d:31:bc:e8:4a:95:
6b:4d:aa:35:80:dc:5e:8d:e3:b9:26:d5:64:e2:f7:
8e:88:d8:6a:9a:43:73:4d:78:84:97:36:ae:60:49:
8f:94:17:ed:e2:8e:bb:1e:74:8a:b2:12:91:2f:2a:
1a:7f:87:9b:27:cc:f5:a5:7a:4f:b9:b7:1f:a3:f2:
ef:f1:4e:6f:b2:4c:4b:ca:85:78:9c:7c:ad:d6:53:
c3:56:74:db:a9:c8:08:57:ca:44:40:8d:e5:60:59:
55:2e:02:12:55:e2:92:74:55:f1:31:60:a9:c6:ff:
0d:49:e6:7c:c3:55:d0:24:0d:a9:8d:f5:d9:e1:a7:
3d:97:f0:b6:b7:6b:f9:ad:62:46:87:4b:1e:53:92:
b6:bf:9f:bb:39:ed:33:98:f2:23:f7:bd:bc:dd:14:
a1:9e:24:82:95:ba:0f:b6:b5:a7:49:68:8c:fc:fe:
0d:81:40:26:96:a0:91:bc:f1:f5:12:b7:b1:dd:e6:
d2:71:77:28:fe:fe:4d:cb:51:39:0a:84:d2:80:70:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:86:8D:F2:BD:DC:90:78:CA:FD:DA:4A:6B:76:85:95:49:E7:E9
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/T3CGjfK93JB4yv3aSmt2hZVJ5-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b0:3b:5c:7f:b1:f0:20:9b:71:ae:ec:a5:a1:65:20:3e:fb:
43:0a:47:73:b3:c0:5f:01:cc:3e:06:a1:4a:e8:42:80:b1:1a:
14:cc:52:63:1e:b5:fd:68:31:64:b0:1d:74:e3:cd:d6:09:4e:
ff:44:30:00:d2:1d:bd:7d:35:6b:30:3d:89:10:2e:aa:04:68:
4c:ca:ae:f7:ef:63:2f:b4:aa:4c:a7:25:91:60:21:c9:02:2e:
2b:c3:02:df:ca:86:88:c9:2c:0e:54:9a:46:ac:8e:84:8d:b3:
0d:58:4c:1b:e8:bc:d1:0f:f0:5c:e6:e5:6b:09:6c:a4:66:61:
ec:1f:62:c7:e1:39:c6:a8:79:bb:c2:85:1a:0a:3d:16:ef:35:
2d:a8:3c:94:17:12:1d:f7:e4:bd:2d:91:48:30:28:62:07:9d:
69:37:4b:0a:15:26:71:15:8e:0f:98:30:5e:4f:94:8a:46:e6:
27:fc:2d:57:ba:c0:7b:e6:3d:1d:10:4c:d8:bf:8c:d5:c6:92:
6e:0e:8a:02:ab:77:32:7b:85:d4:b4:12:66:7a:98:37:92:af:
8a:e5:ad:02:a8:3b:7d:23:c9:54:a7:35:78:0e:09:c9:fa:cb:
34:0f:e5:7a:04:0a:6c:30:ae:54:18:09:79:97:f7:c0:3b:6a:
63:5c:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:48:36 2026 by rpki-client