Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/ypjfFzQ0QqPSs16bFYUPfxcJ65U.roa
File: ypjfFzQ0QqPSs16bFYUPfxcJ65U.roa (raw, json)
Hash identifier: HysO/GVC8GjAoGltPAZRh0sGuDRiRjVIRsqeK/65o5M=
Subject key identifier: CA:98:DF:17:34:34:42:A3:D2:B3:5E:9B:15:85:0F:7F:17:09:EB:95
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E75E61A8C96500921BE66C8EBF7757865
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/ypjfFzQ0QqPSs16bFYUPfxcJ65U.roa
Signing time: Fri 29 May 2026 22:41:14 +0000
ROA not before: Fri 29 May 2026 22:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 222.167.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:e6:1a:8c:96:50:09:21:be:66:c8:eb:f7:75:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 29 22:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca98df17343442a3d2b35e9b15850f7f1709eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:cd:ed:62:e6:40:d1:a0:2d:a7:f5:cf:c8:
c3:a6:83:e9:28:aa:92:a4:99:54:58:84:bf:78:e6:
01:9f:42:d5:b3:88:f4:d7:6f:b2:bc:48:a8:38:94:
72:80:9f:bc:fc:4b:2d:fa:3e:78:89:cf:d1:a2:8a:
c2:5b:a5:20:59:28:93:ba:aa:80:59:69:a3:32:05:
ae:a4:47:eb:b4:c9:f1:dc:2b:61:cc:d5:27:31:1f:
3a:f5:8d:0d:89:dc:37:13:e2:2c:c9:35:be:4a:ce:
47:56:14:ea:e8:7c:10:c4:81:d7:7c:f9:23:c7:6a:
9d:b9:54:0d:2f:d9:28:c6:ea:a7:89:38:48:b6:b9:
10:9f:3f:51:84:df:9c:09:07:5d:1a:75:cf:13:5e:
92:91:ef:6c:c0:ad:ca:6a:db:e1:ab:a1:e3:2c:e1:
ed:70:2e:54:4a:e1:0f:6f:97:5a:92:32:59:df:aa:
74:12:c6:3a:fb:82:a0:f5:3e:7d:42:bb:ac:4d:0c:
0c:9e:a3:9c:1f:ce:5f:67:cd:ba:b6:ee:d7:f9:c8:
2c:42:0e:6d:79:6c:97:77:8f:f3:b7:a9:d4:94:08:
9a:82:8f:6a:ce:70:e4:e9:0c:b7:92:01:d8:9b:91:
8e:98:24:c6:c9:9f:f0:75:c7:3c:61:fa:74:26:11:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:DF:17:34:34:42:A3:D2:B3:5E:9B:15:85:0F:7F:17:09:EB:95
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/ypjfFzQ0QqPSs16bFYUPfxcJ65U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.210.0/24
Signature Algorithm: sha256WithRSAEncryption
02:27:ba:c6:7e:a7:c2:22:63:f2:de:c4:61:0a:15:1e:f9:55:
c2:d9:13:13:8c:88:89:33:72:16:4d:30:87:08:42:83:f4:14:
7c:08:39:2b:6f:a4:23:00:d1:22:51:f2:e6:97:f8:2a:e5:ca:
16:8c:58:7a:66:f7:b9:72:33:1f:c9:53:7f:1d:fa:67:87:ff:
15:cd:a6:df:ad:ad:51:57:13:79:63:03:8c:57:e1:76:a1:7f:
c7:7a:13:3e:ce:5f:e9:89:03:2e:ce:1e:46:ac:4c:c7:6f:01:
d1:46:b3:cc:c4:0f:2e:ae:6c:29:b7:84:1c:34:a5:fd:0c:c0:
39:40:08:e2:87:9d:b6:a9:d6:dd:c0:f5:d2:68:af:dd:53:f3:
0b:5b:5c:cc:21:7c:3e:ec:4e:12:38:40:37:1e:39:e0:32:cb:
0d:a3:42:67:e0:59:35:9a:14:50:6e:83:f7:fb:55:94:64:c6:
05:41:b6:fc:57:11:eb:a5:7b:63:de:37:c3:a7:95:0c:88:b5:
e8:43:0d:a2:42:d8:b3:1f:9a:b6:4f:d0:b6:c1:2a:c4:c2:39:
2c:11:ab:50:6c:0a:bd:1c:66:cd:db:97:ca:bf:2b:7d:4c:c8:
8f:1f:83:7a:c7:dd:80:36:78:a8:b4:3b:d1:ca:8a:c3:90:e0:
d4:c3:d8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 19:36:33 2026 by rpki-client