Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zKKiQ3HKEoFll3txZFlUFQBK_WI.roa
File: zKKiQ3HKEoFll3txZFlUFQBK_WI.roa (raw, json)
Hash identifier: x7HGK7oEhcCYR24vWMnFWIl0shJSf4vIs5noTdJFRjY=
Subject key identifier: CC:A2:A2:43:71:CA:12:81:65:97:7B:71:64:59:54:15:00:4A:FD:62
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0F8291E0B3DCDEC85593F4BD8175AA843
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zKKiQ3HKEoFll3txZFlUFQBK_WI.roa
Signing time: Thu 01 Oct 2026 15:50:39 +0000
ROA not before: Thu 01 Oct 2026 15:50:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 222.167.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:29:1e:0b:3d:cd:ec:85:59:3f:4b:d8:17:5a:a8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 1 15:50:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cca2a24371ca128165977b7164595415004afd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:e4:bb:c1:3f:28:5e:2c:35:9f:ac:14:2c:
ea:10:d5:0c:12:ec:22:f9:ea:52:33:5c:59:f7:12:
53:49:67:ea:79:78:ab:bb:c4:37:a3:11:0b:bb:d1:
70:8d:6f:04:23:20:90:d0:a4:1b:c0:32:62:9f:7c:
85:f6:f6:83:93:bb:e0:f3:65:d3:63:47:c7:e6:97:
82:71:63:17:c2:7f:67:4c:cc:13:6d:c5:fb:d3:9b:
c2:2f:34:e2:41:5c:df:8c:17:ae:fa:64:32:5e:a9:
c6:03:3c:81:6c:4e:bc:cd:92:87:a5:ed:ca:8e:ee:
ce:31:7d:68:82:29:cf:b8:ce:8c:31:c0:ab:c6:61:
fa:99:9f:04:c6:35:2d:48:56:ee:25:57:ad:04:ae:
7d:01:84:19:96:74:ef:fd:f4:06:79:28:57:f3:4d:
50:2a:09:3c:2b:3b:4c:9b:d7:5e:74:f9:50:f7:cf:
62:0d:f1:c8:a0:87:cb:3f:9e:3e:e2:8e:84:f2:23:
3c:ef:0f:50:84:64:3b:c7:32:2b:ee:d7:db:15:a1:
05:2f:fa:54:c8:50:a7:7e:f5:96:05:03:2f:ce:d2:
b8:9c:83:0e:8c:34:6b:29:5f:53:6e:3b:8d:6f:5d:
ce:ee:58:d5:82:db:f2:20:58:70:1e:ae:e5:71:17:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:A2:43:71:CA:12:81:65:97:7B:71:64:59:54:15:00:4A:FD:62
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zKKiQ3HKEoFll3txZFlUFQBK_WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:92:2d:01:ca:47:75:29:ba:14:8e:45:6a:6d:e8:05:b0:3a:
52:c6:93:54:79:2b:71:1c:d1:8d:8b:90:d9:cd:5a:c2:85:62:
59:5e:fe:48:2d:53:f2:b7:e4:d1:ae:87:65:bd:bc:ab:5f:31:
e4:0f:c1:4b:f3:e0:85:94:fd:9a:39:4a:f1:61:98:4b:ec:50:
c8:d1:f2:93:31:aa:5c:f4:3f:a5:61:a2:98:82:50:29:98:08:
ef:fb:a9:1b:13:cb:cd:d7:d1:e6:f9:d1:93:70:e4:e8:ce:ac:
7e:d9:48:1a:1f:3b:5e:ec:66:56:b0:51:01:ff:55:ce:60:06:
44:37:ec:b6:e1:9e:b2:bc:6a:02:bd:b2:2c:c9:c2:7c:db:ec:
6d:f4:74:07:f2:64:73:8d:f1:d7:72:ee:73:b9:7f:8b:02:e0:
1b:36:1f:ad:94:e7:df:58:c4:69:8c:0a:e9:aa:ba:c0:00:09:
5d:17:0f:4b:da:79:52:ea:60:66:77:39:a0:06:93:35:20:be:
77:98:85:ab:02:f2:9e:65:15:af:f5:b5:1b:fe:67:60:43:2c:
89:75:89:17:e7:90:3c:3e:99:66:96:c7:cf:07:48:e7:76:79:
41:89:bc:a4:f2:ae:0c:66:cd:45:d1:3b:bc:1d:7c:b5:5c:64:
b8:f5:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:52 2026 by rpki-client