Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TI5iSboBSb34nvWw9YkvdmtfqTQ.roa
File: TI5iSboBSb34nvWw9YkvdmtfqTQ.roa (raw, json)
Hash identifier: KNRYvE/OPg2DjdlYs3zFozRnYM1t7S8Ks/ErR9B5Qyg=
Subject key identifier: 4C:8E:62:49:BA:01:49:BD:F8:9E:F5:B0:F5:89:2F:76:6B:5F:A9:34
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F09CDE569CE9D8D82730FA6257B000A1A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TI5iSboBSb34nvWw9YkvdmtfqTQ.roa
Signing time: Sat 27 Jun 2026 15:58:36 +0000
ROA not before: Sat 27 Jun 2026 15:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 150.107.49.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:cd:e5:69:ce:9d:8d:82:73:0f:a6:25:7b:00:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 27 15:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c8e6249ba0149bdf89ef5b0f5892f766b5fa934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:fa:2c:be:4a:3e:b4:90:e4:ac:5a:06:a1:
45:27:d7:6d:aa:8c:63:50:46:5b:ec:5a:be:ae:f6:
b2:de:9b:29:3a:41:ab:a1:65:d1:8b:82:a4:15:a6:
8f:17:43:ad:a8:1e:67:53:6d:4d:40:1a:b8:1a:e6:
6f:d9:c7:a8:ba:02:7b:a6:08:da:93:d0:ca:f1:7d:
88:72:66:27:7d:6e:e7:45:72:a2:14:9e:65:01:26:
3e:01:a7:b9:fd:fd:3c:3e:eb:00:87:fd:34:6e:c8:
b9:cb:97:da:84:22:76:ba:ca:5e:fb:97:a3:b3:7d:
19:01:35:e5:39:6d:ce:aa:ac:42:14:ea:f6:70:38:
df:a9:2a:b3:21:c0:c4:0e:83:ae:e7:26:9f:b2:3a:
1b:f9:30:b0:9b:0c:ca:c9:56:3f:c9:5a:68:fc:73:
70:75:86:9c:2f:e3:f8:04:ee:5a:a2:00:82:1e:de:
70:62:66:4e:99:aa:10:a4:1b:7b:b6:39:b9:7a:cb:
26:10:e5:38:f7:e1:82:25:10:2f:52:ab:92:7d:8d:
29:3f:70:85:25:8f:28:07:6e:d2:1d:f3:10:fa:63:
30:df:3e:a7:72:8b:ed:33:04:81:80:c2:05:59:d6:
5a:fc:96:9a:93:31:fe:1a:1d:f4:1a:6e:69:d5:2b:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8E:62:49:BA:01:49:BD:F8:9E:F5:B0:F5:89:2F:76:6B:5F:A9:34
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TI5iSboBSb34nvWw9YkvdmtfqTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.49.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:11:ae:6f:f2:85:f3:8d:42:89:bd:88:06:89:05:22:a2:4b:
8a:5e:ff:b4:99:2f:a9:7d:54:04:2e:f9:f0:c5:5b:7b:51:d9:
6f:0a:54:e5:48:08:e1:d4:ea:79:e5:a0:7a:3e:a6:60:3a:a4:
96:9b:5b:8a:b8:43:14:8c:b3:a6:a8:fe:79:6f:d4:31:4e:8b:
32:07:c6:cc:38:35:d3:22:01:c1:17:80:93:bf:d5:28:13:30:
06:71:f9:e2:1e:d5:3a:a1:9e:cf:ed:69:1a:50:3d:2c:d8:63:
0d:81:91:d7:32:5a:09:f7:84:8e:75:30:0b:ca:70:8a:81:f2:
7e:59:57:38:00:f0:5d:fc:a7:c0:0f:57:3a:a2:9d:af:a6:2f:
fc:44:e8:39:bd:75:bd:59:42:1b:99:7b:5d:f0:88:b5:4a:68:
c0:a7:9b:89:9c:89:41:c9:e9:c4:68:59:5e:9d:8a:72:2a:f0:
18:f6:a4:fa:c1:96:a7:3f:f7:d9:99:44:3f:e2:41:fc:f8:24:
2a:ca:47:0e:b3:84:c7:0b:ed:aa:34:03:ad:8f:b2:ee:85:26:
20:c2:5c:cc:fb:8a:cc:24:d7:3a:ef:0b:7d:5c:01:2a:6e:74:
1d:f2:85:ed:61:87:30:bf:95:dc:d1:90:0b:10:36:6c:d6:02:
89:7a:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:49:34 2026 by rpki-client