Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/eGHh8Q1OkxCjMezslio9-a6n6Wk.roa
File: eGHh8Q1OkxCjMezslio9-a6n6Wk.roa (raw, json)
Hash identifier: qxvMcvhro8IfR3CQ2tVWT7zPyl5XUpoCDpOmcqYfivY=
Subject key identifier: 78:61:E1:F1:0D:4E:93:10:A3:31:EC:EC:96:2A:3D:F9:AE:A7:E9:69
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E0D2DF80509B65D1AE6FBDD17C074C49D
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/eGHh8Q1OkxCjMezslio9-a6n6Wk.roa
Signing time: Sat 09 May 2026 14:39:36 +0000
ROA not before: Sat 09 May 2026 14:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 222.167.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:2d:f8:05:09:b6:5d:1a:e6:fb:dd:17:c0:74:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 9 14:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7861e1f10d4e9310a331ecec962a3df9aea7e969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:aa:05:a0:13:25:8f:be:5a:6e:f5:cf:89:
f0:ac:09:11:86:c1:36:a4:92:af:48:26:1a:91:88:
b9:6b:97:46:8e:8e:28:2b:61:ee:a3:10:26:35:5e:
e1:83:bb:6c:6a:df:c4:58:2e:df:87:cd:af:9a:63:
48:7d:c9:66:43:39:7e:ec:2c:43:87:bf:ca:95:7a:
1d:d5:33:8a:2c:a8:ce:58:53:40:71:6e:33:6d:a9:
d7:b6:df:24:26:e3:3d:33:92:09:8f:71:e9:64:58:
42:c0:d7:5e:a2:51:64:00:60:c4:e3:df:76:7e:65:
23:6e:7d:fa:bc:46:f0:fd:fa:5e:7a:9a:a6:3e:3f:
f5:3a:d4:ec:aa:d2:7c:d2:5d:99:66:6f:4d:44:3a:
39:b8:63:b8:84:c9:a1:e1:d5:5d:9e:f0:76:8b:e5:
c1:94:ca:7c:70:78:b3:c2:0e:c1:7f:57:2d:a0:40:
b4:fd:b4:b8:6a:90:59:ca:c5:21:90:a8:7c:29:6a:
ca:eb:b2:40:06:a5:66:0f:3a:e5:f9:5a:cd:cf:d5:
63:67:45:63:b2:d1:a0:37:70:79:73:a7:0b:1d:a3:
54:fd:43:7c:ea:6b:65:6a:e8:cf:bd:61:2c:4f:22:
83:f8:6e:08:d5:85:46:2c:eb:0e:55:89:6e:d1:4d:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:E1:F1:0D:4E:93:10:A3:31:EC:EC:96:2A:3D:F9:AE:A7:E9:69
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/eGHh8Q1OkxCjMezslio9-a6n6Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.237.0/24
Signature Algorithm: sha256WithRSAEncryption
20:36:aa:8d:50:5c:b5:31:23:72:87:1f:a7:c9:cc:10:a6:1d:
fb:dc:3f:41:cf:00:91:95:41:eb:eb:09:dc:f7:47:77:d6:66:
37:51:51:dd:d5:be:2a:86:94:f2:a7:05:d8:62:8e:85:f1:2a:
61:94:aa:24:e5:3f:7a:37:10:c4:b8:19:26:88:a8:67:bd:67:
a1:99:02:78:41:4d:9e:6a:29:14:6a:6c:96:50:2c:e2:80:88:
64:22:b4:81:fa:dd:b0:01:44:19:f2:82:51:fb:5d:7d:5c:b2:
78:92:98:80:a4:da:9c:67:ce:d8:30:d1:0a:69:e3:8a:b8:00:
6f:5c:de:38:1e:01:81:89:bc:04:4f:7d:b5:59:42:61:57:10:
38:78:12:2d:21:f7:5d:a4:c9:5d:2d:04:ee:3b:5a:53:23:6b:
6c:61:5b:3c:ba:77:63:03:33:19:ac:b0:cf:7c:d2:f8:70:fd:
cb:ed:7f:dd:da:a3:ce:44:28:60:8f:2a:a3:36:f5:87:9b:54:
d2:bb:6b:d6:19:4f:81:77:37:bb:f5:d1:f6:c4:f4:a5:a3:69:
a1:64:d2:70:05:04:15:b1:84:fa:e1:e4:4b:20:e0:f6:88:35:
59:65:85:71:fd:c1:ad:2d:e8:36:5f:87:f6:85:7d:ac:01:cc:
f5:7b:8b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:45 2026 by rpki-client