Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X8i9J58_ThC0Mj7eqSqJMQj4v-s.roa
File: X8i9J58_ThC0Mj7eqSqJMQj4v-s.roa (raw, json)
Hash identifier: OMLzVnErANW2DCbY7lo8hbX+X2anfgc7ZLaNfl8lBss=
Subject key identifier: 5F:C8:BD:27:9F:3F:4E:10:B4:32:3E:DE:A9:2A:89:31:08:F8:BF:EB
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019EFEF6EF8023EACBD769E77B2DF2FC6D77
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X8i9J58_ThC0Mj7eqSqJMQj4v-s.roa
Signing time: Thu 25 Jun 2026 13:27:36 +0000
ROA not before: Thu 25 Jun 2026 13:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 222.167.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:f6:ef:80:23:ea:cb:d7:69:e7:7b:2d:f2:fc:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 25 13:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fc8bd279f3f4e10b4323edea92a893108f8bfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:43:e7:b0:cd:eb:36:37:de:30:f5:45:8d:
98:94:76:bb:09:aa:06:bb:e1:a7:43:7d:38:a5:16:
cd:73:08:f0:a2:58:9f:de:91:5f:c6:52:e5:a0:1c:
b5:99:f5:11:8a:8a:4a:a7:98:14:c6:66:aa:ce:a2:
f8:0a:a4:f3:9e:b4:f2:20:59:37:db:79:fd:33:ec:
c0:c9:3b:92:7c:01:d8:26:04:30:09:e8:dd:55:53:
fb:87:9d:7b:f4:1d:32:ce:d7:63:27:fd:c4:6a:71:
b0:14:b7:50:7c:d3:8d:19:b0:11:da:8f:00:4f:78:
fd:b3:14:a8:59:d7:c4:4f:03:20:25:74:1f:6b:14:
e2:0b:43:05:5a:5e:34:0b:74:f1:fb:9f:62:a6:03:
d1:ca:10:9f:e8:d5:cf:98:86:5e:11:8a:bc:14:83:
c5:87:b4:00:81:db:26:f6:69:ee:2d:76:df:63:2d:
a1:7d:b1:50:84:4f:0c:70:b1:10:a0:72:36:19:ab:
f2:c3:51:6f:1c:e0:77:19:62:11:b1:42:ce:93:e7:
56:2f:d6:02:6a:e1:a1:80:3b:4d:3c:73:45:63:f8:
06:8e:32:b4:77:a6:71:46:0c:80:b4:02:43:29:81:
fd:9d:d1:da:84:da:09:62:da:9a:6d:3b:6e:e1:9d:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C8:BD:27:9F:3F:4E:10:B4:32:3E:DE:A9:2A:89:31:08:F8:BF:EB
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X8i9J58_ThC0Mj7eqSqJMQj4v-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.214.0/24
Signature Algorithm: sha256WithRSAEncryption
af:dd:64:38:a3:35:c4:93:ee:b5:ea:0d:da:60:e6:a6:6c:5a:
b4:03:9c:f6:87:25:59:40:d2:05:ac:51:d1:8b:71:df:7f:b8:
a8:23:64:7a:37:bf:e7:92:f4:c3:c4:f1:98:a0:99:c9:c5:a5:
51:75:16:ad:2e:39:32:ee:4c:da:89:48:e1:1b:66:9b:9c:61:
ea:7a:6e:76:fa:79:7f:b4:1d:92:e4:d4:39:99:dc:d5:9b:37:
ef:bc:68:b4:a8:d0:70:16:81:ae:5d:83:3e:dc:b1:29:8f:4a:
9e:6e:52:9b:10:1e:57:37:05:0c:80:ad:c8:3a:10:3c:7c:a2:
09:0b:8b:11:0b:db:86:39:1d:95:bc:65:d8:50:a5:9e:2b:0d:
6d:85:63:9e:15:8b:1a:7b:e6:46:ee:dd:8e:23:ce:b1:d1:8f:
d1:14:9c:32:d7:0f:3e:7e:87:8f:1f:10:44:7a:1c:2d:a9:f0:
9b:f6:62:f8:e2:f4:fe:23:82:88:7b:3c:b6:d5:6f:15:bb:e4:
6a:4b:84:8d:fb:3e:9b:0b:4b:45:6e:5a:89:0a:61:af:2a:f2:
8f:a9:a9:df:ac:66:e8:10:e7:03:f3:48:1c:d9:ed:8b:f5:c2:
19:5c:2a:63:e5:1c:f0:2d:18:6d:e4:1d:05:95:37:1a:72:9c:
7e:75:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:49:36 2026 by rpki-client