Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/s98iHmxLOvbsZ213D7p5i-ABfzg.roa
File: s98iHmxLOvbsZ213D7p5i-ABfzg.roa (raw, json)
Hash identifier: mSRe2INDq/lMQ8XfadiFQF9xu3Zhy3JrLFp0c77wyr4=
Subject key identifier: B3:DF:22:1E:6C:4B:3A:F6:EC:67:6D:77:0F:BA:79:8B:E0:01:7F:38
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FE6C13E59ED1D0A28DE2CC607B49C5D43
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/s98iHmxLOvbsZ213D7p5i-ABfzg.roa
Signing time: Sun 09 Aug 2026 13:40:51 +0000
ROA not before: Sun 09 Aug 2026 13:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.221.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:c1:3e:59:ed:1d:0a:28:de:2c:c6:07:b4:9c:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 9 13:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3df221e6c4b3af6ec676d770fba798be0017f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:f2:35:0e:a0:87:66:49:ad:bc:3d:8e:09:
2a:ed:6a:f2:a9:29:e8:58:5c:4b:d5:fb:3d:08:fc:
58:7c:41:ad:3b:78:ab:b8:04:29:91:60:d0:38:ab:
9f:a2:95:ba:3d:7b:a7:4a:22:f6:87:43:0c:07:e5:
59:8e:6c:dc:f0:3a:88:ad:2d:21:e5:40:bf:94:9b:
cf:29:25:54:04:03:b2:37:bb:13:8f:81:b8:d1:7f:
c5:a6:56:13:c9:b9:6a:8e:5c:ef:74:c3:e4:70:d1:
fc:9f:11:bd:55:77:6c:3e:84:66:29:a9:2a:ce:a9:
42:78:af:45:e4:aa:c6:89:a1:3a:8d:61:b3:7e:fe:
46:05:de:f2:78:b9:a7:43:19:a8:8c:ae:0b:cf:fd:
25:91:e7:e9:0b:95:dd:bf:aa:79:62:b5:71:e2:0f:
ff:38:d3:b3:0f:96:29:ad:49:a8:25:c0:8d:83:14:
61:a3:40:53:18:b7:22:ca:ab:1a:48:fb:ed:e4:92:
da:6d:bc:94:d9:d8:03:15:7e:22:f0:bc:3b:c0:88:
1e:fd:e3:52:89:b8:7d:f5:4f:bc:48:7b:d2:a5:f2:
f0:69:ca:fc:83:a8:1a:89:36:d3:15:ea:fc:f4:cd:
e5:08:91:0a:b1:7f:a4:81:10:99:ae:09:7b:61:dc:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:22:1E:6C:4B:3A:F6:EC:67:6D:77:0F:BA:79:8B:E0:01:7F:38
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/s98iHmxLOvbsZ213D7p5i-ABfzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.210.0/24
222.167.221.0/24
222.167.224.0/24
222.167.232.0/24
222.167.234.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
34:27:9f:8b:96:19:b2:be:46:18:4e:d3:a0:ed:0e:7f:94:36:
c4:6a:97:fd:29:ed:56:59:b1:f0:f6:e5:c9:fb:7f:7c:95:ae:
bf:64:92:02:3f:d6:7e:d1:79:6b:e0:b9:42:69:ca:5b:ec:59:
cb:a1:b4:93:4d:c7:d7:93:23:63:1a:d9:1f:62:db:b1:22:33:
fd:15:75:94:50:d1:2c:64:cc:9e:8d:a6:80:4f:e4:a1:a2:a9:
aa:d0:cc:04:68:3f:a8:0d:39:05:dc:bd:be:80:dc:af:91:a2:
29:3d:c4:4b:dd:cc:a3:f8:af:e8:f0:9d:6a:cd:58:cb:32:d4:
1f:24:26:28:90:b3:e4:cd:d2:7a:94:34:35:47:8a:97:41:34:
0c:b5:e5:fc:c3:03:64:d1:16:ce:bc:38:2a:2d:2f:c9:74:86:
76:4f:a2:76:c2:76:c4:6d:d4:91:55:03:4f:b2:67:70:fa:91:
79:90:19:05:51:27:b7:af:3d:44:39:fa:9a:b1:6f:20:e0:07:
a5:ef:4b:b5:a5:27:b4:0b:27:4f:a1:29:df:b3:78:cc:be:01:
60:97:af:03:41:fc:0e:f8:f3:da:06:4a:27:95:ca:0b:2d:7f:
3f:5e:93:cd:4c:1a:c1:63:51:2d:d7:e5:d3:05:ba:86:56:1d:
dc:f7:c4:9f
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ/mwT5Z7R0KKN4sxge0nF1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwODA5MTM0MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2RmMjIxZTZjNGIzYWY2ZWM2NzZkNzcwZmJhNzk4YmUwMDE3ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY3yNQ6gh2ZJrbw9jgkq7WryqSno
WFxL1fs9CPxYfEGtO3iruAQpkWDQOKufopW6PXunSiL2h0MMB+VZjmzc8DqIrS0h
5UC/lJvPKSVUBAOyN7sTj4G40X/FplYTyblqjlzvdMPkcNH8nxG9VXdsPoRmKakq
zqlCeK9F5KrGiaE6jWGzfv5GBd7yeLmnQxmojK4Lz/0lkefpC5Xdv6p5YrVx4g//
ONOzD5YprUmoJcCNgxRho0BTGLciyqsaSPvt5JLabbyU2dgDFX4i8Lw7wIge/eNS
ibh99U+8SHvSpfLwacr8g6gaiTbTFer89M3lCJEKsX+kgRCZrgl7YdyWoQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFLPfIh5sSzr27Gdtdw+6eYvgAX84MB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvczk4aUhteExPdmJzWjIxM0Q3cDVpLUFCZnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAbiIgAwQA
3qfSAwQA3qfdAwQA3qfgAwQA3qfoAwQA3qfqAwQA3qf6AwQA3qf/MA0GCSqGSIb3
DQEBCwUAA4IBAQA0J5+LlhmyvkYYTtOg7Q5/lDbEapf9Ke1WWbHw9uXJ+398la6/
ZJICP9Z+0Xlr4LlCacpb7FnLobSTTcfXkyNjGtkfYtuxIjP9FXWUUNEsZMyejaaA
T+Shoqmq0MwEaD+oDTkF3L2+gNyvkaIpPcRL3cyj+K/o8J1qzVjLMtQfJCYokLPk
zdJ6lDQ1R4qXQTQMteX8wwNk0RbOvDgqLS/JdIZ2T6J2wnbEbdSRVQNPsmdw+pF5
kBkFUSe3rz1EOfqasW8g4Ael70u1pSe0CydPoSnfs3jMvgFgl68DQfwO+PPaBkon
lcoLLX8/XpPNTBrBY1Et1+XTBbqGVh3c98Sf
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:21 2026 by rpki-client