Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kJ4OAD2Svd5bJYqmvYEji53-_z4.roa
File: kJ4OAD2Svd5bJYqmvYEji53-_z4.roa (raw, json)
Hash identifier: t8SioCeXtK9DLdCYfNYnzqNqAYLRXhIt2Q9QBJ+7cUw=
Subject key identifier: 90:9E:0E:00:3D:92:BD:DE:5B:25:8A:A6:BD:81:23:8B:9D:FE:FF:3E
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019DB0B15CD58EC65840C8E18CC832F0D1C6
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kJ4OAD2Svd5bJYqmvYEji53-_z4.roa
Signing time: Tue 21 Apr 2026 15:38:26 +0000
ROA not before: Tue 21 Apr 2026 15:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 222.167.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:b1:5c:d5:8e:c6:58:40:c8:e1:8c:c8:32:f0:d1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 21 15:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=909e0e003d92bdde5b258aa6bd81238b9dfeff3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:cd:cd:8c:7b:ca:09:77:45:f2:64:72:5e:
3c:b8:50:8a:61:b8:c8:ec:23:19:86:4f:d3:61:5f:
98:28:9b:66:a7:4f:71:da:1b:4c:1b:e3:4f:e8:55:
bb:93:2a:52:c1:26:73:32:be:31:ac:aa:b7:ec:fa:
91:c7:91:7a:b5:14:69:3e:6e:40:2d:d2:fa:c6:f9:
7d:d3:23:f9:ad:20:d7:fc:57:98:9c:85:ec:eb:2f:
5c:7b:0c:6c:c1:8b:fa:e2:f9:41:1a:22:3b:16:79:
76:ea:80:e9:dd:fd:a1:c5:3b:5b:6f:1d:c9:88:43:
c1:4a:f4:18:1b:74:12:4c:1e:32:f2:1e:68:fd:d1:
10:e7:86:02:07:8f:f8:61:02:90:1c:a2:82:f3:05:
6c:a3:d5:b5:df:e9:58:73:f8:99:d4:89:1e:c8:aa:
eb:e6:20:73:19:1d:e2:6d:d8:d2:47:9e:c8:23:9e:
a4:e2:56:4f:c2:47:22:0a:06:74:f1:41:09:85:d9:
8a:73:c7:d3:0c:dd:b2:1d:33:b3:1e:9b:84:36:20:
ea:69:5f:ba:e2:d5:1a:df:86:24:f3:e9:af:f0:79:
d8:9e:04:c1:c1:ed:7c:ee:b1:9f:aa:52:33:d8:c8:
00:61:82:7c:a2:67:28:7e:7a:fa:98:e8:90:18:e8:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:0E:00:3D:92:BD:DE:5B:25:8A:A6:BD:81:23:8B:9D:FE:FF:3E
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kJ4OAD2Svd5bJYqmvYEji53-_z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:00:f5:17:57:30:71:82:1c:d8:8c:fc:54:4e:83:bf:b4:7d:
3c:21:e6:8e:c1:65:c5:7d:b2:a9:2d:db:f4:8d:fa:fc:a1:76:
b4:bd:5b:0c:f7:94:cb:68:13:ff:dc:63:a2:da:59:78:d6:e7:
82:e5:db:37:be:cd:df:81:af:6c:6f:29:cf:8d:80:4f:04:9e:
41:d2:2c:d2:2e:bf:d4:c2:7a:7e:73:0f:94:d0:ad:a5:ca:b1:
1f:a1:fb:92:49:93:9c:2d:ea:be:f4:83:ee:6a:01:e0:ff:0f:
53:f7:1c:eb:5a:a0:81:93:8b:a2:1c:42:2f:90:5a:35:55:df:
83:87:40:56:20:22:35:81:44:59:ce:e4:ee:f3:38:18:16:57:
5c:e6:6b:89:0f:a8:08:53:b8:b6:61:35:56:92:55:fd:4b:fa:
f1:03:db:90:72:3a:3b:e4:c9:3e:c0:aa:b2:2e:76:31:e5:c8:
b0:28:c4:a8:f5:a8:be:57:eb:85:2f:e3:71:28:5e:77:7c:dd:
cf:0d:5e:48:a1:57:10:01:05:9e:65:65:f6:9b:d2:f8:78:45:
51:ed:ea:ba:58:4d:a1:c1:9a:c9:c4:ee:b6:e7:4e:b9:40:1e:
68:7e:63:00:00:ab:0c:45:46:26:93:14:a3:d6:73:a3:24:9c:
9f:56:14:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2wsVzVjsZYQMjhjMgy8NHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNDIxMTUzODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDllMGUwMDNkOTJiZGRlNWIyNThhYTZiZDgxMjM4YjlkZmVmZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJDNzYx7ygl3RfJkcl48uFCKYbjI
7CMZhk/TYV+YKJtmp09x2htMG+NP6FW7kypSwSZzMr4xrKq37PqRx5F6tRRpPm5A
LdL6xvl90yP5rSDX/FeYnIXs6y9cewxswYv64vlBGiI7Fnl26oDp3f2hxTtbbx3J
iEPBSvQYG3QSTB4y8h5o/dEQ54YCB4/4YQKQHKKC8wVso9W13+lYc/iZ1IkeyKrr
5iBzGR3ibdjSR57II56k4lZPwkciCgZ08UEJhdmKc8fTDN2yHTOzHpuENiDqaV+6
4tUa34Yk8+mv8HnYngTBwe187rGfqlIz2MgAYYJ8omcofnr6mOiQGOikeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJCeDgA9kr3eWyWKpr2BI4ud/v8+MB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEva0o0T0FEMlN2ZDViSllxbXZZRWppNTMtX3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qf2MA0G
CSqGSIb3DQEBCwUAA4IBAQCgAPUXVzBxghzYjPxUToO/tH08IeaOwWXFfbKpLdv0
jfr8oXa0vVsM95TLaBP/3GOi2ll41ueC5ds3vs3fga9sbynPjYBPBJ5B0izSLr/U
wnp+cw+U0K2lyrEfofuSSZOcLeq+9IPuagHg/w9T9xzrWqCBk4uiHEIvkFo1Vd+D
h0BWICI1gURZzuTu8zgYFldc5muJD6gIU7i2YTVWklX9S/rxA9uQcjo75Mk+wKqy
LnYx5ciwKMSo9ai+V+uFL+NxKF53fN3PDV5IoVcQAQWeZWX2m9L4eEVR7eq6WE2h
wZrJxO625065QB5ofmMAAKsMRUYmkxSj1nOjJJyfVhT4
-----END CERTIFICATE-----
Generated at Tue May 5 19:06:23 2026 by rpki-client