Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/vmFt-RmqVoh_m-q8wh6IIIdBxb8.roa
File: vmFt-RmqVoh_m-q8wh6IIIdBxb8.roa (raw, json)
Hash identifier: FltAqRb87ts5v2htuSfnYAhowaqVKKWGQQ7zYPxwmUQ=
Subject key identifier: BE:61:6D:F9:19:AA:56:88:7F:9B:EA:BC:C2:1E:88:20:87:41:C5:BF
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0FE38321D3768F571D9B10F083DB34AE5
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/vmFt-RmqVoh_m-q8wh6IIIdBxb8.roa
Signing time: Fri 02 Oct 2026 20:04:50 +0000
ROA not before: Fri 02 Oct 2026 20:04:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199566
IP address blocks: 222.167.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:38:32:1d:37:68:f5:71:d9:b1:0f:08:3d:b3:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 2 20:04:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be616df919aa56887f9beabcc21e88208741c5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:58:c2:21:53:7d:9b:1b:a4:87:93:af:fc:
9d:e7:e4:55:48:f5:8b:55:be:c7:94:27:f9:30:81:
ad:7c:57:26:b9:22:83:b0:c6:ac:ce:f1:e6:38:76:
1a:cd:77:26:9d:be:8d:bb:2a:1a:0a:57:c7:80:e0:
e4:19:3b:1b:9a:bc:5a:89:f6:92:04:8e:6f:4e:64:
98:0c:1c:07:1f:05:5a:9f:fb:4c:75:8a:86:2e:3f:
15:ce:51:3b:42:66:96:21:ca:e1:c8:00:3c:cd:68:
6c:a2:26:42:f0:5a:92:e2:f2:c6:ca:ab:0a:06:74:
fa:51:32:f2:ff:04:e0:42:37:07:b3:8f:88:c4:9d:
57:64:69:dd:11:d0:e5:9a:00:3d:30:62:26:16:6d:
74:b4:ce:15:a6:15:70:41:de:f2:34:2a:59:69:30:
f0:4e:58:c9:57:08:27:48:e3:fc:50:81:bc:ab:8f:
7a:50:4f:54:55:cc:ee:13:74:97:27:ab:4b:7d:a2:
7b:e8:0d:09:0b:20:dc:f7:85:ce:36:00:8d:3c:83:
8d:7f:ac:e6:a0:f2:05:49:26:10:fe:13:8e:52:d8:
a6:7e:6e:74:eb:84:21:d4:52:cc:52:98:5c:a5:84:
75:5c:25:f8:99:38:f0:dd:62:ee:21:04:10:d9:fa:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:6D:F9:19:AA:56:88:7F:9B:EA:BC:C2:1E:88:20:87:41:C5:BF
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/vmFt-RmqVoh_m-q8wh6IIIdBxb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cb:79:0a:c4:d1:76:ab:63:2e:8a:36:28:5b:58:86:63:74:
6a:c2:f7:a8:a6:79:71:89:0f:6c:37:fa:be:3e:6e:02:2b:bf:
3f:2d:04:10:07:61:9f:d1:6a:b9:29:69:b1:21:98:5e:5c:ed:
d4:b8:b7:a9:58:0b:31:cc:9d:fe:15:0f:5d:21:b7:ac:bc:a5:
fd:e3:c9:87:23:b1:32:31:db:28:23:9c:c9:bb:59:e4:64:2b:
19:c7:31:16:39:4d:91:0e:64:3a:ae:9c:dd:82:bd:0a:8f:47:
99:6e:6a:13:c4:de:77:25:86:48:bb:d0:01:5a:4c:e5:2d:bd:
07:46:98:32:9a:ea:13:da:a2:58:fd:61:c4:9d:bc:41:1e:40:
68:0d:49:3b:b9:19:e5:a9:4d:61:33:bf:b5:92:f9:32:57:c3:
63:06:66:26:22:91:87:fe:65:71:2e:b5:36:79:b0:b0:f0:6d:
ed:b2:51:12:8c:e8:eb:2d:9d:d6:1d:5c:e5:26:4a:db:e4:b2:
98:58:db:5c:fc:4c:a6:18:2f:8a:59:25:89:fb:4d:89:59:38:
99:9b:05:3f:32:ef:31:7d:8f:db:02:bd:62:2c:99:ba:fb:dc:
3e:9e:41:35:46:00:73:a8:c9:6c:0d:8f:52:18:20:9e:c7:4d:
4b:54:d3:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD+ODIdN2j1cdmxDwg9s0rlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYxMDAyMjAwNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTYxNmRmOTE5YWE1Njg4N2Y5YmVhYmNjMjFlODgyMDg3NDFjNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjZYwiFTfZsbpIeTr/yd5+RVSPWL
Vb7HlCf5MIGtfFcmuSKDsMaszvHmOHYazXcmnb6NuyoaClfHgODkGTsbmrxaifaS
BI5vTmSYDBwHHwVan/tMdYqGLj8VzlE7QmaWIcrhyAA8zWhsoiZC8FqS4vLGyqsK
BnT6UTLy/wTgQjcHs4+IxJ1XZGndEdDlmgA9MGImFm10tM4VphVwQd7yNCpZaTDw
TljJVwgnSOP8UIG8q496UE9UVczuE3SXJ6tLfaJ76A0JCyDc94XONgCNPIONf6zm
oPIFSSYQ/hOOUtimfm5064Qh1FLMUphcpYR1XCX4mTjw3WLuIQQQ2foMxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL5hbfkZqlaIf5vqvMIeiCCHQcW/MB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvdm1GdC1SbXFWb2hfbS1xOHdoNklJSWRCeGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfmMA0G
CSqGSIb3DQEBCwUAA4IBAQB/y3kKxNF2q2MuijYoW1iGY3RqwveopnlxiQ9sN/q+
Pm4CK78/LQQQB2Gf0Wq5KWmxIZheXO3UuLepWAsxzJ3+FQ9dIbesvKX948mHI7Ey
MdsoI5zJu1nkZCsZxzEWOU2RDmQ6rpzdgr0Kj0eZbmoTxN53JYZIu9ABWkzlLb0H
RpgymuoT2qJY/WHEnbxBHkBoDUk7uRnlqU1hM7+1kvkyV8NjBmYmIpGH/mVxLrU2
ebCw8G3tslESjOjrLZ3WHVzlJkrb5LKYWNtc/EymGC+KWSWJ+02JWTiZmwU/Mu8x
fY/bAr1iLJm6+9w+nkE1RgBzqMlsDY9SGCCex01LVNOb
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:14:48 2026 by rpki-client