Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/jKm9lNOrS355C904c39ZQD7XN9M.roa
File: jKm9lNOrS355C904c39ZQD7XN9M.roa (raw, json)
Hash identifier: lc3dtAfGntV9NXoLNQ6r5TBDbFZtiRixahILZAap0Q4=
Subject key identifier: 8C:A9:BD:94:D3:AB:4B:7E:79:0B:DD:38:73:7F:59:40:3E:D7:37:D3
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E55359B9922126EA75E26AB4F6A45FAC3
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/jKm9lNOrS355C904c39ZQD7XN9M.roa
Signing time: Sat 23 May 2026 14:20:36 +0000
ROA not before: Sat 23 May 2026 14:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 222.167.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:55:35:9b:99:22:12:6e:a7:5e:26:ab:4f:6a:45:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 23 14:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ca9bd94d3ab4b7e790bdd38737f59403ed737d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:fa:31:8c:6f:68:cf:a7:eb:2d:f2:d7:4b:
f4:e7:46:95:f9:52:ff:f1:3c:88:50:cd:44:ab:a5:
b7:bd:aa:98:02:d5:7e:05:8a:bb:b4:4b:16:e7:e0:
d3:42:be:73:e7:35:da:ac:8f:94:e9:e9:e5:d4:52:
60:fa:6f:3a:4a:0b:38:e7:c1:de:20:37:21:b0:94:
82:b5:8f:f3:01:2d:f8:bc:4a:4b:77:57:e7:f9:55:
9b:32:7a:1a:17:5e:47:e1:9c:c9:b3:7a:0f:5e:62:
fd:18:30:df:8f:08:9b:88:b9:22:f6:de:12:c6:7e:
7c:5f:f3:29:71:15:a2:b9:04:98:ed:6a:77:39:b1:
3d:52:b5:32:13:87:a6:9b:fc:14:7c:8f:23:be:25:
a8:62:53:44:36:f6:5d:8a:3e:ad:94:17:9d:58:af:
20:0d:7b:e8:05:cc:20:5c:41:b5:94:0c:4a:4f:40:
e0:cd:d6:78:1c:34:53:eb:ea:46:33:11:2d:d4:ea:
ad:03:08:67:6c:13:33:16:03:e4:44:c2:3b:f6:67:
ef:51:79:2c:88:88:45:a8:c2:73:65:c3:5d:26:84:
7e:ad:05:65:f6:65:f2:60:c9:14:58:e3:59:05:d5:
38:5c:0d:45:69:bd:93:4f:1b:14:d0:56:0e:c8:b8:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A9:BD:94:D3:AB:4B:7E:79:0B:DD:38:73:7F:59:40:3E:D7:37:D3
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/jKm9lNOrS355C904c39ZQD7XN9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c7:72:ef:7a:f4:d3:96:bb:ea:c0:42:56:8b:13:6a:71:8e:
eb:1c:25:3d:0d:0e:32:c4:4d:d7:2d:03:85:31:cf:a3:ae:09:
65:09:8a:3a:f1:0f:09:65:b4:89:1b:28:af:bb:b2:eb:7f:10:
e7:87:8f:cf:8e:bb:38:7a:89:77:4a:6c:38:4b:1f:64:99:c4:
0e:10:b3:d5:10:91:2f:c5:fc:31:d5:6e:25:55:88:e1:d1:92:
e6:25:4d:94:ec:41:de:b7:43:b6:45:c2:48:81:aa:3a:8b:6f:
8b:37:81:c4:94:80:60:37:c9:51:8d:0d:ad:67:68:f7:ea:9c:
a2:b5:a3:78:5a:a4:84:17:e7:c4:ff:94:b8:e0:73:6d:bf:04:
4f:45:bc:0d:4c:14:6b:0b:1c:f7:c5:d8:51:95:db:d9:e3:42:
3e:a6:43:91:b1:2b:71:fc:ef:0b:0b:d1:1b:28:97:7c:42:5e:
92:fe:c5:fd:7c:7c:92:48:27:60:82:47:34:03:b1:d0:83:27:
d0:54:20:c8:71:b8:d9:b7:39:5f:26:7f:06:cb:c1:10:08:aa:
bd:1b:2d:fb:a1:e6:cd:10:eb:b5:de:f6:e2:68:09:a6:a8:1a:
e3:fe:e1:75:4b:5b:da:83:f2:dc:49:ca:c6:0a:37:d7:fe:8a:
fb:bf:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:36 2026 by rpki-client