Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/geYucN89dE_8N45rFtHtv0_WrLE.roa
File: geYucN89dE_8N45rFtHtv0_WrLE.roa (raw, json)
Hash identifier: Fuuvzg+nR2JOMfBrvJyFi7iKajRSiSbK/z622QSWlC8=
Subject key identifier: 81:E6:2E:70:DF:3D:74:4F:FC:37:8E:6B:16:D1:ED:BF:4F:D6:AC:B1
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F1DD5971FB93717A83359837E75405DC6
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/geYucN89dE_8N45rFtHtv0_WrLE.roa
Signing time: Wed 01 Jul 2026 13:19:24 +0000
ROA not before: Wed 01 Jul 2026 13:19:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 222.167.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:d5:97:1f:b9:37:17:a8:33:59:83:7e:75:40:5d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 1 13:19:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81e62e70df3d744ffc378e6b16d1edbf4fd6acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:05:25:da:f9:26:e1:14:da:7e:3d:c7:13:
b5:13:21:5b:71:04:77:d7:1a:4b:1b:5a:1f:e8:1e:
6f:a2:e5:f7:ae:b3:4a:42:c6:96:03:8c:f3:7e:fc:
da:4d:72:10:67:80:df:b9:ee:77:6e:e0:ad:42:bd:
48:fc:8e:05:71:44:3c:52:49:e9:e3:86:47:1e:5f:
12:e9:e2:26:4f:27:69:5f:34:7d:7c:07:9b:24:75:
73:0f:47:83:31:3e:db:ec:9a:3d:9b:0f:96:c9:cc:
8e:89:e6:8f:a3:93:a4:c9:9c:b2:d8:a5:e5:e2:c3:
41:1a:f6:01:5c:8b:83:64:98:6a:c2:1a:3c:2c:8c:
12:a2:e9:51:11:4d:53:6f:85:6d:53:d9:c8:d5:ee:
ee:df:f1:bf:9e:68:d3:f9:d6:88:39:9c:3f:40:ab:
a0:88:d6:65:10:a9:a8:17:a8:94:ff:f8:1f:c9:bf:
26:86:11:b9:71:25:96:6f:b3:49:20:8c:da:85:14:
5a:77:16:c7:99:88:4a:94:84:0d:29:b5:5d:99:1c:
c0:02:b6:04:b9:04:c3:0e:78:fe:76:2c:7e:3f:73:
68:86:cc:85:f7:f7:72:e0:66:4d:e2:42:9d:40:4f:
d2:c7:04:b0:a8:33:68:4f:b9:2f:53:16:53:28:70:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:2E:70:DF:3D:74:4F:FC:37:8E:6B:16:D1:ED:BF:4F:D6:AC:B1
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/geYucN89dE_8N45rFtHtv0_WrLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:06:da:0d:72:cb:bc:b3:6a:6b:87:95:4e:b3:81:79:8d:23:
80:b0:c0:a8:9e:3f:d5:6a:dc:18:ce:e4:ee:5f:b5:70:4e:20:
b2:93:d2:d6:5b:91:b3:3b:8b:f9:01:fa:ab:1e:fb:49:a2:7a:
8d:ce:19:35:89:0e:90:dc:4b:c3:c5:f1:8a:eb:8b:60:17:67:
80:7b:20:bf:76:c6:8d:64:5a:19:26:12:cf:1f:26:d6:bf:a8:
c2:61:22:bd:c7:fb:2d:81:8d:3b:be:83:ea:ab:18:5e:9e:53:
be:82:13:88:f1:69:f5:42:59:fb:a5:b6:30:30:df:81:24:77:
a2:a8:4b:33:85:76:0b:d4:3c:b1:13:c6:a1:41:4b:40:be:c2:
6f:2a:d8:e2:f4:29:59:e2:f1:8b:9d:df:58:28:df:a7:e8:06:
82:b5:4c:79:6d:d6:35:38:b1:77:00:8c:25:b3:88:81:fa:64:
ae:5f:63:dd:1b:19:df:f7:69:b1:6d:15:e4:a1:2a:a0:b2:94:
37:52:6b:2c:a7:b8:94:ad:dc:cc:7f:53:50:36:e8:5d:d2:c5:
19:7d:80:63:d7:bd:1d:c3:01:40:ba:b1:16:3c:00:fd:ea:56:
74:53:4f:63:a4:be:bf:d5:c0:6c:88:f7:f3:34:75:da:9c:3a:
b8:20:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:50 2026 by rpki-client