Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sI4RYibEgYNdM8dwsJITF6oBw7c.roa
File: sI4RYibEgYNdM8dwsJITF6oBw7c.roa (raw, json)
Hash identifier: a7MIzS8eoUG18Z42IMfD217wuwcGCdzyBpUULz9yVZQ=
Subject key identifier: B0:8E:11:62:26:C4:81:83:5D:33:C7:70:B0:92:13:17:AA:01:C3:B7
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D2F7299EBEE19566F6F8015371558A967
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sI4RYibEgYNdM8dwsJITF6oBw7c.roa
Signing time: Fri 27 Mar 2026 13:18:52 +0000
ROA not before: Fri 27 Mar 2026 13:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 222.167.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:72:99:eb:ee:19:56:6f:6f:80:15:37:15:58:a9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 27 13:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b08e116226c481835d33c770b0921317aa01c3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:c4:7f:a1:12:4e:cc:eb:bb:67:a6:77:30:
b8:2a:bc:3d:f2:47:b4:49:4a:c9:af:74:5c:64:12:
f1:dd:20:5f:d6:68:be:b2:19:c9:fc:8e:da:b4:4e:
3f:3c:38:e9:fc:ea:2f:ec:0c:c4:d5:23:6c:c5:3e:
91:ab:fd:80:d9:d9:c5:d2:c7:df:0a:b6:2e:ff:10:
76:23:20:ac:aa:61:83:d3:6c:0b:32:da:5f:6a:3f:
0f:1a:2b:9f:4a:38:34:93:2a:b4:52:3f:60:3c:69:
60:0e:f8:e3:e1:4d:33:34:f9:68:01:e1:1c:3f:71:
77:62:97:30:18:71:4b:7a:e8:bd:a4:17:0e:a0:43:
73:d1:e8:96:ac:2c:7a:c6:1c:ac:c7:7a:9b:34:f9:
5e:c8:cc:41:d0:b3:2a:df:ef:b8:e0:ca:a1:c1:f9:
df:0d:9d:05:89:27:c4:67:88:52:76:82:d7:c0:06:
7d:7e:49:de:25:54:48:35:36:5d:57:2b:5e:bc:4d:
0a:a1:e3:24:51:fc:63:7b:dc:5c:89:d4:64:b9:5a:
d4:87:0c:9c:57:6e:a7:40:25:89:cf:83:45:aa:70:
e1:46:f5:c4:af:79:a7:f5:61:a0:7d:2c:6a:e7:a0:
d6:f1:17:05:45:2e:3b:78:58:2b:98:e5:75:c1:65:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:11:62:26:C4:81:83:5D:33:C7:70:B0:92:13:17:AA:01:C3:B7
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sI4RYibEgYNdM8dwsJITF6oBw7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:07:c5:5b:94:07:80:4a:10:2d:2d:40:45:22:f6:66:19:6d:
02:cd:9b:78:bd:4c:1b:89:b5:61:bf:93:2c:fd:fe:f6:9b:8e:
b0:3c:a8:a0:fa:1f:b5:0a:40:6d:3b:10:19:8b:1e:f5:bf:fe:
d8:75:d5:a1:16:d2:fe:b6:69:b3:22:1e:a2:f8:3e:ca:24:af:
31:0f:77:29:e9:f5:39:d8:a8:06:f5:91:22:59:fb:7c:8e:b6:
cd:0e:57:65:e9:e7:17:f5:c0:18:7b:aa:87:7a:8d:1b:ad:02:
7c:f1:e3:a9:25:b6:34:b1:e1:b0:54:e4:d5:6b:7c:d3:25:8e:
98:54:06:3a:af:98:22:0b:8a:01:07:80:21:63:b8:69:53:31:
c7:43:ff:05:f7:8d:78:4d:76:41:90:a3:93:63:63:7d:2c:eb:
c3:bc:f6:81:08:97:f2:c2:14:eb:a9:67:b7:2f:f7:63:a6:b4:
da:82:00:4b:c6:fe:25:0e:b5:c0:a6:97:8f:e6:40:1b:a2:a5:
09:33:9f:92:25:77:7a:1f:c7:06:31:83:7c:72:4e:b9:7c:19:
1f:05:50:88:77:53:4e:0e:2e:85:18:06:e1:b4:72:87:64:1c:
b9:79:bf:0e:73:7a:27:ae:fd:7e:fe:91:a8:b5:54:10:ee:7c:
2e:d5:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 23:57:41 2026 by rpki-client