Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/g59SgjrttjzQNtgpqXxT0XFOHsw.roa
File: g59SgjrttjzQNtgpqXxT0XFOHsw.roa (raw, json)
Hash identifier: lbcRL5TvkIseTe9sK3dItNCLwRSGToN0WWy3uwJ/vM8=
Subject key identifier: 83:9F:52:82:3A:ED:B6:3C:D0:36:D8:29:A9:7C:53:D1:71:4E:1E:CC
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FE6C13CF13ACC8B2B03E3F1063A6CB972
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/g59SgjrttjzQNtgpqXxT0XFOHsw.roa
Signing time: Sun 09 Aug 2026 13:40:51 +0000
ROA not before: Sun 09 Aug 2026 13:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 222.167.236.0/24 maxlen: 24
222.167.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:c1:3c:f1:3a:cc:8b:2b:03:e3:f1:06:3a:6c:b9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 9 13:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=839f52823aedb63cd036d829a97c53d1714e1ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:32:c1:37:18:16:95:1f:8e:d0:dc:33:2f:
35:9d:53:45:f3:a2:b6:2a:8c:23:6f:4b:8d:f8:d7:
97:16:5f:e7:0f:6d:6f:dc:e7:3b:d5:46:ec:04:e4:
b6:63:17:c8:da:a1:d1:33:bd:5d:e7:b2:3c:ff:ee:
9d:55:85:66:ec:2c:68:a5:0d:26:7e:fd:f3:ad:5b:
ed:b3:8f:bd:1b:c4:01:99:26:24:bd:57:14:c4:2b:
97:9b:64:52:7b:f3:2f:3a:55:aa:e6:8d:76:e3:b3:
8f:e8:32:8c:39:40:68:4f:fd:10:8a:79:24:00:25:
f9:42:6c:24:3d:ae:0d:91:2f:c7:47:3b:ce:9d:ba:
bb:a0:b1:da:41:87:e4:5a:86:c9:1e:74:93:ae:03:
66:27:32:be:15:e0:7d:d7:6f:05:5b:bf:a5:0a:0d:
df:6e:4e:93:d4:23:0f:6c:b2:e1:f6:63:10:c5:93:
c4:5b:04:d2:90:04:e7:76:8e:ca:a2:cd:9a:a0:6f:
67:8f:d8:92:3d:eb:f3:4e:2c:3e:9b:2c:2a:03:2a:
cd:4b:66:21:de:60:dd:94:a9:f6:e5:dc:a1:8e:7d:
21:61:36:a6:5d:35:94:b1:41:6e:a7:3e:fc:79:df:
5e:16:89:8e:7d:17:ab:c0:48:8d:fc:5e:68:c7:4a:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:52:82:3A:ED:B6:3C:D0:36:D8:29:A9:7C:53:D1:71:4E:1E:CC
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/g59SgjrttjzQNtgpqXxT0XFOHsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.236.0/24
222.167.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2c:ce:4f:26:09:ac:40:fb:55:6c:ea:7e:cf:4d:19:b3:a9:
4d:34:45:3f:2a:80:b6:19:1a:e9:f8:f1:04:54:f6:e0:4d:ec:
20:c6:4e:c8:ba:d3:40:97:eb:e4:56:2c:41:50:b5:60:6b:bb:
bb:22:6f:24:72:eb:71:df:dd:01:d5:ef:43:42:ad:0f:37:84:
47:d7:d7:7e:da:87:df:d4:27:3b:64:fa:c8:1b:cf:3f:88:bd:
be:d1:b9:be:d6:dc:25:f1:ed:7b:27:d1:20:0b:1a:97:2d:7e:
d6:24:58:14:64:b7:4c:94:62:9d:3c:d1:b4:c6:f1:f5:d3:68:
28:47:1a:89:db:44:09:dc:76:93:17:44:0b:cb:53:c6:04:f3:
76:97:96:35:3b:c2:ee:86:b6:94:80:ba:d0:67:62:8f:7a:9a:
6d:c5:9d:b6:fe:8b:12:47:ba:c5:d7:12:c6:9f:94:65:7d:60:
b0:2c:38:28:ad:95:56:09:21:11:ad:d3:52:31:ca:f3:82:e2:
e1:51:e8:dc:be:ec:af:07:0c:48:fd:58:ce:74:d3:c2:85:59:
bc:01:1e:06:c3:0d:da:db:74:0d:38:e8:53:d8:2a:da:25:85:
86:33:d3:26:e7:7c:a8:fc:b2:22:3c:1f:77:87:57:05:e0:88:
45:cb:c0:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/mwTzxOsyLKwPj8QY6bLlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwODA5MTM0MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzlmNTI4MjNhZWRiNjNjZDAzNmQ4MjlhOTdjNTNkMTcxNGUxZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleYywTcYFpUfjtDcMy81nVNF86K2
Kowjb0uN+NeXFl/nD21v3Oc71UbsBOS2YxfI2qHRM71d57I8/+6dVYVm7CxopQ0m
fv3zrVvts4+9G8QBmSYkvVcUxCuXm2RSe/MvOlWq5o1247OP6DKMOUBoT/0Qinkk
ACX5QmwkPa4NkS/HRzvOnbq7oLHaQYfkWobJHnSTrgNmJzK+FeB9128FW7+lCg3f
bk6T1CMPbLLh9mMQxZPEWwTSkATndo7Kos2aoG9nj9iSPevzTiw+mywqAyrNS2Yh
3mDdlKn25dyhjn0hYTamXTWUsUFupz78ed9eFomOfRerwEiN/F5ox0r2kwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIOfUoI67bY80DbYKal8U9FxTh7MMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvZzU5U2dqcnR0anpRTnRncHFYeFQwWEZPSHN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA3qfsAwQA
3qf+MA0GCSqGSIb3DQEBCwUAA4IBAQB6LM5PJgmsQPtVbOp+z00Zs6lNNEU/KoC2
GRrp+PEEVPbgTewgxk7IutNAl+vkVixBULVga7u7Im8kcutx390B1e9DQq0PN4RH
19d+2off1Cc7ZPrIG88/iL2+0bm+1twl8e17J9EgCxqXLX7WJFgUZLdMlGKdPNG0
xvH102goRxqJ20QJ3HaTF0QLy1PGBPN2l5Y1O8LuhraUgLrQZ2KPepptxZ22/osS
R7rF1xLGn5RlfWCwLDgorZVWCSERrdNSMcrzguLhUejcvuyvBwxI/VjOdNPChVm8
AR4Gww3a23QNOOhT2CraJYWGM9Mm53yo/LIiPB93h1cF4IhFy8BH
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:23 2026 by rpki-client