Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/f9qu7-XroBlUleKDIHIPa7f_kn0.roa
File: f9qu7-XroBlUleKDIHIPa7f_kn0.roa (raw, json)
Hash identifier: 0aWF9oheRQqFqcEdbQwzwfDbaBp2PnTquGLHZC+Ljjs=
Subject key identifier: 7F:DA:AE:EF:E5:EB:A0:19:54:95:E2:83:20:72:0F:6B:B7:FF:92:7D
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A00FB5E7D7B43F800F91A173B5B1B11C77
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/f9qu7-XroBlUleKDIHIPa7f_kn0.roa
Signing time: Mon 17 Aug 2026 12:32:54 +0000
ROA not before: Mon 17 Aug 2026 12:32:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204244
IP address blocks: 222.167.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:b5:e7:d7:b4:3f:80:0f:91:a1:73:b5:b1:b1:1c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 17 12:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fdaaeefe5eba0195495e28320720f6bb7ff927d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:ff:7e:61:95:dd:c1:e8:69:57:3e:e2:a5:
81:73:f1:37:23:56:63:3f:c5:40:ae:69:02:fd:87:
d5:2b:c4:8e:69:5f:95:dc:43:c5:61:f7:04:d4:96:
5d:e6:a2:44:86:3d:c7:f4:67:c9:32:ce:81:27:b6:
51:e6:97:e5:62:a7:95:37:46:4b:53:76:5d:5a:d4:
e5:66:1d:d5:59:e2:c7:4f:3c:24:69:8d:4c:63:8d:
5c:07:ca:71:01:c3:62:ac:cb:82:40:6b:c8:c2:66:
86:32:a9:09:7f:2a:5c:47:5e:1c:95:97:9e:81:18:
73:dc:98:29:8d:59:a9:e5:69:db:dc:cb:d0:53:12:
bd:0f:a8:e9:8f:ac:24:34:cd:b7:d2:fe:1e:7b:59:
5f:3a:fb:da:8e:76:66:13:7f:e4:30:1f:cc:1e:84:
9b:cf:1b:2f:5e:8e:59:2c:19:f5:df:93:0b:da:16:
bc:4f:94:fa:48:de:dd:e4:54:59:c3:94:06:b3:50:
ce:e8:9c:db:7a:fd:53:3e:89:b3:3a:3c:cd:50:65:
c1:8e:13:7d:f0:e7:57:41:c0:d8:80:9d:2f:f6:6e:
a1:6d:55:37:3e:ec:fc:f8:72:21:90:1f:ed:31:8c:
4b:c2:ef:eb:cc:2f:8c:68:42:e1:22:8c:47:85:46:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DA:AE:EF:E5:EB:A0:19:54:95:E2:83:20:72:0F:6B:B7:FF:92:7D
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/f9qu7-XroBlUleKDIHIPa7f_kn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ae:46:0c:79:e7:65:30:74:f4:61:a0:6b:1e:f4:3d:9c:33:
c7:b5:17:3d:4b:58:a4:79:9b:0d:fe:7d:04:b5:74:58:cf:26:
ef:5e:2e:28:33:83:85:9d:56:52:bb:f1:31:ea:35:05:76:30:
60:23:02:0f:8c:58:b7:a4:84:b0:25:ad:7f:81:b3:35:6f:08:
d4:7f:a0:92:f8:54:3b:05:9d:62:b7:86:2c:8c:eb:23:b0:35:
5c:a5:c7:05:0f:cb:d4:50:ed:c5:5a:cb:bf:aa:93:cf:33:2d:
a0:fc:07:7a:57:44:ae:3b:93:c0:9f:e0:bf:a5:89:76:f0:bd:
18:3b:4c:07:28:81:e1:21:5d:65:76:05:26:8f:0b:6c:44:94:
a2:20:6a:2e:d2:9d:94:4e:f7:e7:1e:ef:c4:46:15:45:99:2b:
2f:0d:d9:44:29:79:18:b1:87:a9:64:c9:93:e6:e3:19:d4:4e:
cc:fe:10:0a:b8:73:ac:72:26:39:a8:a5:a3:eb:2c:0f:97:76:
17:f9:e7:c7:c3:20:8a:fa:bc:87:87:ad:9d:5f:5f:8e:df:9f:
4e:a1:c6:8a:d0:7d:98:f1:e6:83:fb:e2:20:c9:7f:4a:ba:48:
a6:e4:2e:97:9d:ae:74:67:c0:0c:ca:6a:a9:27:ad:5f:81:76:
15:ec:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:19 2026 by rpki-client