Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/qMiFxTRVISPkgtdPb0IiXJ31t1w.roa
File: qMiFxTRVISPkgtdPb0IiXJ31t1w.roa (raw, json)
Hash identifier: YlVuo9nhEtdftkdgzSmDXZ5Z0EVtZ2rshanOX2KamZE=
Subject key identifier: A8:C8:85:C5:34:55:21:23:E4:82:D7:4F:6F:42:22:5C:9D:F5:B7:5C
Certificate issuer: /CN=90ca2f02d7a1c124d8aa3864cb4e37917aa324a4
Certificate serial: 01A0FCECC588D678C58D19E3AE3949147F2C
Authority key identifier: 90:CA:2F:02:D7:A1:C1:24:D8:AA:38:64:CB:4E:37:91:7A:A3:24:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/qMiFxTRVISPkgtdPb0IiXJ31t1w.roa
Signing time: Fri 02 Oct 2026 14:02:50 +0000
ROA not before: Fri 02 Oct 2026 14:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398343
IP address blocks: 137.22.128.0/24 maxlen: 24
137.22.129.0/24 maxlen: 24
137.22.130.0/24 maxlen: 24
137.22.131.0/24 maxlen: 24
137.22.132.0/24 maxlen: 24
137.22.133.0/24 maxlen: 24
137.22.134.0/24 maxlen: 24
137.22.135.0/24 maxlen: 24
137.22.140.0/24 maxlen: 24
137.22.141.0/24 maxlen: 24
137.22.142.0/24 maxlen: 24
137.22.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:ec:c5:88:d6:78:c5:8d:19:e3:ae:39:49:14:7f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ca2f02d7a1c124d8aa3864cb4e37917aa324a4
Validity
Not Before: Oct 2 14:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8c885c534552123e482d74f6f42225c9df5b75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:f6:06:e3:88:a3:c1:5f:41:bf:2d:b7:c5:
93:b5:c2:ed:df:69:e2:87:a7:32:d6:b8:c4:d9:51:
26:a4:e5:9f:0f:f7:b5:76:de:11:f0:43:cc:bb:b9:
2e:74:04:db:03:91:c9:6c:0b:2e:12:50:39:23:af:
e4:34:79:85:78:ee:a1:e6:2d:d9:90:a2:98:35:be:
73:af:37:e3:f4:2f:a4:79:28:3b:5c:ad:f4:01:f7:
2d:f0:5c:ab:d0:fa:c2:46:4c:41:e9:c6:70:19:41:
9b:46:c7:1c:0e:10:08:0d:c1:7f:76:f3:70:e4:1f:
ff:57:72:0a:78:72:29:02:7b:27:83:53:4e:75:f0:
a2:37:86:18:22:31:da:2b:52:5c:ce:42:12:e4:a6:
9c:d4:37:55:9f:fe:f3:1e:2b:ac:c2:78:63:3b:74:
d8:c4:49:3c:e4:04:d7:ff:e0:dd:47:8f:94:31:71:
e5:f6:2c:15:9b:3d:a7:04:40:3f:34:a6:05:30:ae:
63:31:12:6a:11:ab:2c:bd:50:9f:56:bf:d6:01:73:
ae:80:d9:20:b7:aa:2e:ce:f2:bc:52:ef:c8:ba:2a:
ab:01:47:e2:5d:5a:cf:f1:78:54:5e:ce:b4:03:23:
03:55:76:37:d9:1a:16:b3:c8:02:a8:d2:14:9d:e5:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:85:C5:34:55:21:23:E4:82:D7:4F:6F:42:22:5C:9D:F5:B7:5C
X509v3 Authority Key Identifier:
keyid:90:CA:2F:02:D7:A1:C1:24:D8:AA:38:64:CB:4E:37:91:7A:A3:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/qMiFxTRVISPkgtdPb0IiXJ31t1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.22.128.0/21
137.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
87:57:75:e6:02:c1:83:e9:e8:6f:b5:19:59:21:5a:09:60:2d:
79:f4:9b:c0:ba:88:f8:65:8a:44:c3:f3:7b:eb:9e:30:cf:45:
98:4d:20:7e:d2:65:3d:3d:5a:ee:b5:a6:d2:ab:27:1c:7c:41:
d6:c5:2c:65:93:e9:ac:20:e3:29:2e:4c:5a:0c:bb:f0:7a:e5:
a6:a1:a6:47:55:2a:2c:69:3d:4e:93:58:91:bb:37:de:d1:a1:
ea:5a:05:01:1e:30:ab:ab:7a:fd:cc:91:e9:49:d7:f4:c3:e9:
07:f3:00:df:05:7e:92:66:9f:f8:3a:62:27:e9:eb:9f:e6:38:
2f:04:e4:4f:5a:3e:39:75:8f:c0:8e:66:9a:fe:47:da:24:04:
f9:db:f4:f1:07:36:8b:76:6b:1b:ac:05:b7:4c:25:12:8b:88:
44:a1:cd:a4:fa:d0:27:91:3d:41:91:b2:98:cb:a4:98:4e:64:
0d:58:94:88:de:29:0d:51:ea:ae:5a:e8:b6:dc:14:15:69:b1:
1b:e6:74:50:f1:1c:06:53:74:fb:32:b4:12:40:7c:bb:bd:1f:
fc:0f:93:fb:e5:0a:84:d7:4b:fb:e6:fe:54:a8:f0:c4:35:20:
5d:3d:ee:09:28:c3:f6:20:5f:ed:3b:9f:b9:40:dd:92:6c:99:
9b:d9:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:28 2026 by rpki-client