Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/wUeG7HGNdVl0Gnd5NjwAqvNucmY.roa
File: wUeG7HGNdVl0Gnd5NjwAqvNucmY.roa (raw, json)
Hash identifier: YEN8L1c4TKxs75gQCQvaBGhz7S7GUfbutjpdYlRXeu8=
Subject key identifier: C1:47:86:EC:71:8D:75:59:74:1A:77:79:36:3C:00:AA:F3:6E:72:66
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019EE69B74E2405E1A08D4563CCE5FC5D8B7
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/wUeG7HGNdVl0Gnd5NjwAqvNucmY.roa
Signing time: Sat 20 Jun 2026 19:56:48 +0000
ROA not before: Sat 20 Jun 2026 19:56:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141280
IP address blocks: 222.167.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:9b:74:e2:40:5e:1a:08:d4:56:3c:ce:5f:c5:d8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 20 19:56:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c14786ec718d7559741a7779363c00aaf36e7266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:68:d1:3e:65:5b:7c:51:44:b5:af:af:3a:
84:45:ca:20:88:16:d8:3f:f0:5e:1a:1d:38:73:4a:
42:ac:74:74:67:45:74:10:5c:ce:b1:d4:b3:43:70:
d6:7b:2f:d4:88:a2:1c:7f:36:87:0b:36:fd:86:47:
7a:65:ed:2f:c5:9e:f6:ce:6c:ba:3a:4f:6a:c2:e0:
17:73:d7:ff:c1:58:1e:ea:02:1a:c1:54:ee:1d:a6:
ff:1f:48:f1:52:cb:93:fe:a3:10:64:c6:b3:fb:b2:
70:3f:4f:fc:76:8d:81:b6:35:15:55:8a:8a:37:4b:
1f:e5:61:ee:96:04:64:75:9d:92:08:a4:62:28:fe:
1f:09:f9:a3:73:33:4e:3c:44:78:45:81:64:be:20:
b7:6f:a3:d7:26:86:fc:87:1f:1c:8e:7b:24:54:e9:
e5:66:82:d2:e3:31:d2:e0:89:e0:20:28:06:87:79:
53:d0:6c:9e:d0:3e:71:6e:bc:a5:b1:14:11:48:d5:
0b:25:93:29:3b:a6:04:8c:83:46:c9:0a:f3:1c:97:
e6:65:9b:33:87:b0:f8:18:f7:b2:60:9c:11:d8:ce:
bc:41:3c:f2:10:b1:53:a9:1d:cd:08:0c:d8:ee:0c:
51:da:5d:67:7a:ea:11:6b:08:aa:de:bc:37:a6:c9:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:86:EC:71:8D:75:59:74:1A:77:79:36:3C:00:AA:F3:6E:72:66
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/wUeG7HGNdVl0Gnd5NjwAqvNucmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.242.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1d:b1:3e:2f:76:a1:2c:f4:57:b1:26:b8:b4:f9:33:be:36:
70:7f:d6:57:0c:7a:21:eb:8d:e0:08:d9:7e:df:c2:e4:1a:ae:
bd:c5:ce:51:6b:6d:07:7d:d0:81:ad:70:a3:5b:04:26:f1:59:
76:17:c2:de:bd:07:0f:a7:de:e8:26:14:76:8f:10:b2:70:86:
77:24:c1:51:c9:44:cf:af:e3:5e:4e:4d:06:14:0c:a7:e6:a9:
7e:06:1e:31:77:4e:e9:7a:ea:bb:ee:d4:6e:c2:f3:87:84:e8:
7c:79:63:11:5e:1f:a9:13:85:be:43:f0:94:78:8e:98:d2:d0:
46:f6:eb:a5:14:98:6c:a6:10:47:25:fb:f7:32:65:2a:04:05:
bd:8a:2a:f5:09:cf:95:2b:7b:a0:a1:44:98:6b:de:63:26:7c:
dd:ea:7e:71:eb:11:36:fa:87:3a:0e:cd:6b:b5:bc:d3:64:52:
ae:33:cd:2d:7a:e2:ca:27:d5:9e:e9:dd:a3:e8:6f:34:12:eb:
b7:cd:e0:ea:a2:bc:f3:46:e4:4f:9e:ef:28:51:f0:c8:1d:32:
8c:34:94:a1:c7:5f:f9:e7:37:39:9f:72:61:2c:a6:31:8c:15:
ae:a4:86:6c:71:f5:57:ea:b3:c4:cc:52:71:2a:12:e9:3b:bd:
67:6d:d1:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7mm3TiQF4aCNRWPM5fxdi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNjIwMTk1NjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQ3ODZlYzcxOGQ3NTU5NzQxYTc3NzkzNjNjMDBhYWYzNmU3MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu5o0T5lW3xRRLWvrzqERcogiBbY
P/BeGh04c0pCrHR0Z0V0EFzOsdSzQ3DWey/UiKIcfzaHCzb9hkd6Ze0vxZ72zmy6
Ok9qwuAXc9f/wVge6gIawVTuHab/H0jxUsuT/qMQZMaz+7JwP0/8do2BtjUVVYqK
N0sf5WHulgRkdZ2SCKRiKP4fCfmjczNOPER4RYFkviC3b6PXJob8hx8cjnskVOnl
ZoLS4zHS4IngICgGh3lT0Gye0D5xbrylsRQRSNULJZMpO6YEjINGyQrzHJfmZZsz
h7D4GPeyYJwR2M68QTzyELFTqR3NCAzY7gxR2l1neuoRawiq3rw3psm4CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFHhuxxjXVZdBp3eTY8AKrzbnJmMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvd1VlRzdIR05kVmwwR25kNU5qd0Fxdk51Y21ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfyMA0G
CSqGSIb3DQEBCwUAA4IBAQAVHbE+L3ahLPRXsSa4tPkzvjZwf9ZXDHoh643gCNl+
38LkGq69xc5Ra20HfdCBrXCjWwQm8Vl2F8LevQcPp97oJhR2jxCycIZ3JMFRyUTP
r+NeTk0GFAyn5ql+Bh4xd07peuq77tRuwvOHhOh8eWMRXh+pE4W+Q/CUeI6Y0tBG
9uulFJhsphBHJfv3MmUqBAW9iir1Cc+VK3ugoUSYa95jJnzd6n5x6xE2+oc6Ds1r
tbzTZFKuM80teuLKJ9We6d2j6G80Euu3zeDqorzzRuRPnu8oUfDIHTKMNJShx1/5
5zc5n3JhLKYxjBWupIZscfVX6rPEzFJxKhLpO71nbdGg
-----END CERTIFICATE-----
Generated at Sat Jun 27 22:09:15 2026 by rpki-client