Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/yLRXDXQYTegT2fvY_9U1e6QFEBU.roa
File: yLRXDXQYTegT2fvY_9U1e6QFEBU.roa (raw, json)
Hash identifier: wd5oKV1ZxNoQJUmhO1JfEjb0Ksgu3a+qs915waW9pSo=
Subject key identifier: C8:B4:57:0D:74:18:4D:E8:13:D9:FB:D8:FF:D5:35:7B:A4:05:10:15
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A03EA4E01DFE8F75B42F2A99884B0A8A13
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/yLRXDXQYTegT2fvY_9U1e6QFEBU.roa
Signing time: Wed 26 Aug 2026 15:16:27 +0000
ROA not before: Wed 26 Aug 2026 15:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 222.167.215.0/24 maxlen: 24
222.167.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:a4:e0:1d:fe:8f:75:b4:2f:2a:99:88:4b:0a:8a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 26 15:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8b4570d74184de813d9fbd8ffd5357ba4051015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:16:67:96:bc:62:4c:3e:02:d2:d1:38:b9:
a6:fd:06:88:cd:f3:ea:10:df:25:a0:82:c2:3a:5e:
b4:f7:62:01:25:f3:8b:53:47:3a:fa:23:5c:6b:de:
e6:93:bd:33:d6:c2:e1:c2:be:40:71:39:2b:37:37:
3f:f6:94:8e:9c:af:2b:9b:7b:76:92:db:d5:50:c3:
b7:8c:1a:2a:15:09:44:94:72:54:28:8c:9c:67:c4:
3e:38:9f:f0:d5:60:7d:c5:dd:93:84:81:4b:b2:c1:
d5:c5:7e:4c:ad:1b:7f:1d:54:05:73:fd:e8:15:21:
56:17:9f:c5:ce:06:74:03:4e:28:3e:85:f9:8d:65:
ba:15:54:95:84:4f:da:46:ab:0f:12:dc:83:2e:82:
d7:77:e9:bc:38:79:c1:63:da:8a:5c:1a:ac:fb:0c:
10:a2:a1:18:32:b1:23:49:38:f8:bd:1a:2e:30:f2:
d7:ca:35:a6:05:bd:43:f2:39:bc:de:21:e5:91:43:
09:75:8b:10:c8:ff:61:19:0a:78:2b:9a:04:6e:fa:
96:b8:51:2f:53:f9:55:44:fe:b4:94:4a:ae:5f:30:
f4:18:0a:e1:1b:16:20:3a:56:64:50:46:9b:10:98:
15:b5:5d:00:4f:53:6d:b4:06:d6:98:f3:a1:dc:b0:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:57:0D:74:18:4D:E8:13:D9:FB:D8:FF:D5:35:7B:A4:05:10:15
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/yLRXDXQYTegT2fvY_9U1e6QFEBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.215.0/24
222.167.227.0/24
Signature Algorithm: sha256WithRSAEncryption
10:18:ec:1b:4e:b5:c2:11:0d:80:9e:2d:48:98:bc:68:c0:50:
57:a6:17:85:22:b9:b6:fd:b6:e9:ff:26:b3:5e:a0:2a:e8:67:
a2:49:8a:34:d4:54:5f:d3:41:c3:3e:d5:8f:43:7e:95:78:ba:
53:a3:ab:3c:bf:ae:5e:40:1a:e1:37:fd:d2:a9:c3:c4:38:20:
d4:d5:57:23:68:a8:66:ca:0d:31:b3:5a:d7:67:a1:54:fd:2d:
24:f4:8b:83:fa:7c:9e:15:36:e2:6a:e8:37:31:62:bd:2c:6f:
11:42:89:89:9d:1e:f6:66:b8:7f:de:a1:8f:c9:3b:a9:bd:ba:
3e:00:26:3e:ef:0e:f0:11:34:d2:6b:cd:6c:de:cd:03:84:3d:
b9:1b:32:50:87:95:aa:7b:f3:77:67:4d:1d:05:d7:dd:9e:d8:
07:0b:6e:b7:b6:c4:d4:ac:35:26:34:8b:b2:ab:1b:f0:4a:d2:
fb:ab:48:9c:7e:a0:cb:e2:8e:c7:38:71:65:6d:9f:57:2a:94:
0d:c9:09:47:50:51:66:35:62:b5:cd:42:43:7e:df:e0:61:4d:
28:84:e6:c2:ae:9e:cc:1b:54:14:92:12:6f:b1:c4:69:22:87:
35:b1:29:52:a2:5e:6c:0c:25:0a:17:a2:01:d1:28:d0:b5:5a:
a0:91:14:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaA+pOAd/o91tC8qmYhLCooTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwODI2MTUxNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGI0NTcwZDc0MTg0ZGU4MTNkOWZiZDhmZmQ1MzU3YmE0MDUxMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqwWZ5a8Ykw+AtLROLmm/QaIzfPq
EN8loILCOl6092IBJfOLU0c6+iNca97mk70z1sLhwr5AcTkrNzc/9pSOnK8rm3t2
ktvVUMO3jBoqFQlElHJUKIycZ8Q+OJ/w1WB9xd2ThIFLssHVxX5MrRt/HVQFc/3o
FSFWF5/FzgZ0A04oPoX5jWW6FVSVhE/aRqsPEtyDLoLXd+m8OHnBY9qKXBqs+wwQ
oqEYMrEjSTj4vRouMPLXyjWmBb1D8jm83iHlkUMJdYsQyP9hGQp4K5oEbvqWuFEv
U/lVRP60lEquXzD0GArhGxYgOlZkUEabEJgVtV0AT1NttAbWmPOh3LCZLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMi0Vw10GE3oE9n72P/VNXukBRAVMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEveUxSWERYUVlUZWdUMmZ2WV85VTFlNlFGRUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA3qfXAwQA
3qfjMA0GCSqGSIb3DQEBCwUAA4IBAQAQGOwbTrXCEQ2Ani1ImLxowFBXpheFIrm2
/bbp/yazXqAq6GeiSYo01FRf00HDPtWPQ36VeLpTo6s8v65eQBrhN/3SqcPEOCDU
1VcjaKhmyg0xs1rXZ6FU/S0k9IuD+nyeFTbiaug3MWK9LG8RQomJnR72Zrh/3qGP
yTupvbo+ACY+7w7wETTSa81s3s0DhD25GzJQh5Wqe/N3Z00dBdfdntgHC263tsTU
rDUmNIuyqxvwStL7q0icfqDL4o7HOHFlbZ9XKpQNyQlHUFFmNWK1zUJDft/gYU0o
hObCrp7MG1QUkhJvscRpIoc1sSlSol5sDCUKF6IB0SjQtVqgkRQW
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:49 2026 by rpki-client