Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa
File: XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa (raw, json)
Hash identifier: 5KFbFF9jJpeEzZqgnXb4J0jAscVydeWpilyaP+Yf3mo=
Subject key identifier: 5E:C2:BB:73:DA:59:8D:49:46:06:E1:CC:C4:0C:12:12:0E:3F:74:B7
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019DCCA1763F6BA7DF5D1F7142CBA586BEC6
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa
Signing time: Mon 27 Apr 2026 01:50:26 +0000
ROA not before: Mon 27 Apr 2026 01:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9318
IP address blocks: 222.167.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:a1:76:3f:6b:a7:df:5d:1f:71:42:cb:a5:86:be:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 27 01:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ec2bb73da598d494606e1ccc40c12120e3f74b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:1d:54:41:ee:4b:9a:20:18:3c:19:70:3e:
f4:9f:e2:2a:66:cb:97:ec:ef:3d:6e:d0:ec:f3:38:
e0:48:e1:12:67:88:29:be:00:46:47:c3:4e:7b:1a:
ad:c1:6d:f6:54:28:84:7c:13:ca:af:80:7f:91:8c:
07:58:fe:91:b9:bb:05:d4:39:34:d3:39:7c:7e:2e:
1c:02:ec:fb:b0:6e:25:3a:1e:d0:86:dc:3e:e5:e1:
94:16:a3:2b:4a:70:a4:b1:d2:bf:fe:51:d3:1a:e4:
1a:73:53:bc:2b:09:8c:6d:2b:2c:3c:54:d2:ab:17:
4b:2a:e8:f4:e4:06:60:ef:12:e2:a7:9c:0e:26:c8:
c4:a5:87:8c:1a:bf:eb:6c:41:9d:1f:2e:19:e7:07:
61:fe:dd:e6:3c:6d:43:52:5b:0b:aa:80:63:5e:74:
30:74:f4:ed:ca:d6:c2:9c:77:71:01:1b:6a:48:81:
da:ba:9f:2b:39:14:0c:b5:11:d7:56:ff:2c:5c:52:
f6:a8:2b:38:70:f4:90:32:e3:9b:c3:91:b5:8b:7c:
6b:69:33:e6:62:47:35:b4:0b:99:5e:90:84:9d:cb:
9d:b9:be:0d:f6:bc:fe:cc:91:a0:3f:5e:1a:dc:cd:
d7:60:ec:a1:9b:e9:10:79:cb:b5:52:a9:5a:9b:db:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C2:BB:73:DA:59:8D:49:46:06:E1:CC:C4:0C:12:12:0E:3F:74:B7
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1f:f3:bb:c7:55:fd:cd:c1:0f:b2:bc:73:24:cf:a3:0b:86:
0c:ac:1b:42:90:2a:dd:ae:d1:01:0a:4c:3e:6c:79:7e:be:d3:
1f:bb:14:d8:bb:c8:68:b6:ff:e6:b1:b1:ed:87:17:30:5a:ee:
ea:8d:b9:c4:bd:f6:d4:f6:4b:e6:a2:88:ab:f5:e9:5a:11:7e:
0c:5d:28:f1:b9:d1:c4:69:c7:fa:6b:52:61:72:20:0a:bb:f8:
71:8c:74:af:d5:9f:7d:37:4e:4a:6b:5b:1e:c5:b1:c1:37:7b:
a5:fb:eb:58:1d:80:d6:01:fb:f9:d5:c3:c9:b1:2d:2c:e5:a6:
21:91:68:7a:b0:50:1e:5e:28:dc:43:41:be:b4:8f:82:1e:cd:
ce:0e:29:f0:11:2e:e8:a9:13:14:02:39:d5:55:a4:b9:22:a8:
5f:d1:3b:af:1d:ec:52:a0:4a:cc:13:86:54:b5:fd:04:20:51:
fa:e3:fb:af:8e:85:b7:43:63:60:e5:d7:15:f1:41:bc:89:91:
cb:10:06:76:e4:da:f9:c4:01:df:79:a4:59:6e:12:06:9b:b0:
67:90:df:65:7f:04:2a:03:32:16:9e:bb:f1:b0:29:87:25:bc:
e1:f5:f5:28:ba:53:4a:1c:73:dc:85:44:dd:ce:4c:4a:fd:7b:
5c:fa:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:09 2026 by rpki-client