Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/scU1Gksut10owMxugR9oC_Lah5U.roa
File: scU1Gksut10owMxugR9oC_Lah5U.roa (raw, json)
Hash identifier: Skt/LbVCjsLDj47pmYbe72pJBhiqsCgkk56yGSDngYs=
Subject key identifier: B1:C5:35:1A:4B:2E:B7:5D:28:C0:CC:6E:81:1F:68:0B:F2:DA:87:95
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FEC927E5E23710D73E18E965F3670C5AE
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/scU1Gksut10owMxugR9oC_Lah5U.roa
Signing time: Mon 10 Aug 2026 16:47:31 +0000
ROA not before: Mon 10 Aug 2026 16:47:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 222.167.215.0/24 maxlen: 24
222.167.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:92:7e:5e:23:71:0d:73:e1:8e:96:5f:36:70:c5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 10 16:47:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1c5351a4b2eb75d28c0cc6e811f680bf2da8795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:53:59:80:ea:13:3b:39:ff:ea:00:c3:6a:
50:12:73:69:44:c6:13:b6:e0:3e:5c:8a:e3:12:24:
81:7e:0a:c0:0e:48:62:60:42:ca:cb:7c:0c:88:fb:
ab:b1:ae:4c:b0:8b:c6:3f:0e:71:06:03:71:76:46:
3f:a1:2d:f6:23:28:0f:a4:86:a7:38:e7:a0:9a:38:
ee:20:b0:fd:51:73:44:34:0a:ee:74:03:fd:8a:b6:
58:ce:29:29:d7:c3:fa:04:be:a0:8a:fa:f4:d2:e7:
d3:55:23:fd:dd:68:c4:a9:ae:0b:4d:0e:09:7b:47:
5b:63:15:b7:18:2d:ef:34:80:07:ee:a1:3b:09:0f:
0a:5c:47:79:54:91:34:a9:f2:ff:9d:97:50:15:0e:
be:3a:57:6d:bf:ef:85:5b:99:d9:34:30:36:a1:5f:
b7:4f:d7:82:e4:56:61:78:83:51:0f:47:c2:0e:e0:
e6:75:59:fb:10:22:74:fb:95:50:36:b5:84:0e:12:
cf:da:9b:8b:f6:c2:7c:77:21:44:d8:f7:69:e3:b5:
59:26:43:2d:c8:91:e7:a6:d4:d1:88:5d:c9:a1:3a:
5a:4b:0b:75:77:cc:f8:46:00:db:cc:8a:a4:11:8f:
a1:a3:8e:ef:e2:b3:40:c3:43:04:f6:46:5c:50:78:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:35:1A:4B:2E:B7:5D:28:C0:CC:6E:81:1F:68:0B:F2:DA:87:95
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/scU1Gksut10owMxugR9oC_Lah5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.215.0/24
222.167.230.0/24
Signature Algorithm: sha256WithRSAEncryption
55:be:60:ce:e8:c5:9e:f8:4c:c7:ba:1f:e8:b2:49:dc:64:ab:
f5:28:b0:11:dc:62:e2:6c:dc:06:f6:a5:2e:3d:35:d9:39:b8:
6a:fc:dc:d2:1c:ae:b8:6b:25:41:ce:e3:df:6e:e8:44:7f:53:
33:1e:8d:91:c4:9c:30:79:f9:0f:87:3d:6c:da:1d:f9:81:ff:
ee:55:d3:00:c8:8f:6d:2f:fe:68:c4:a8:13:f6:7d:0b:ec:26:
b8:c8:00:24:f3:c6:b6:c0:97:44:a2:b6:8b:30:cb:6f:65:6e:
7e:bb:b9:76:0e:60:29:fa:14:8e:83:4b:f3:d3:8b:f2:b7:0d:
fe:5a:92:3e:08:c2:7a:8e:84:39:a7:89:33:e2:d4:ac:0b:24:
2f:d5:6d:10:1e:09:65:e4:9c:d2:e5:95:fc:e5:c8:01:3f:a6:
d3:c3:07:5b:b7:7c:f8:34:a4:75:9a:9f:c7:71:f2:c0:83:94:
74:70:2e:e0:61:61:71:c5:b0:cb:8e:1b:9c:25:bd:6d:fa:17:
85:f5:7b:ae:ea:b9:f5:45:ee:ce:09:28:83:45:b3:78:cf:20:
a1:9e:9f:30:da:fd:21:0f:81:9a:ed:48:10:de:9d:10:63:78:
5d:3e:49:0e:20:3b:24:7d:fc:9f:42:c1:35:3f:84:42:b6:82:
f1:30:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:20 2026 by rpki-client