Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/22VKqsoF6YnHioFgIyM1cB53zy8.roa
File: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (raw, json)
Hash identifier: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=
Subject key identifier: DB:65:4A:AA:CA:05:E9:89:C7:8A:81:60:23:23:35:70:1E:77:CF:2F
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019C8C11418506183C3E718D825DB1C39FAF
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/22VKqsoF6YnHioFgIyM1cB53zy8.roa
Signing time: Mon 23 Feb 2026 19:54:27 +0000
ROA not before: Mon 23 Feb 2026 19:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21030
IP address blocks: 216.162.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:11:41:85:06:18:3c:3e:71:8d:82:5d:b1:c3:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Feb 23 19:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db654aaaca05e989c78a8160232335701e77cf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:14:7b:19:50:d9:e7:33:e4:37:d5:0a:a9:
b6:0c:3a:72:4f:7d:46:a7:79:62:7c:fc:37:f3:29:
08:a7:f8:46:26:59:4e:30:c3:a5:ae:d0:55:bc:e5:
7c:d0:a2:b3:01:6b:62:39:8f:14:17:58:77:ea:85:
3f:28:df:2e:e7:3f:6d:ff:38:cd:35:fa:e3:bb:eb:
11:28:f5:c8:04:7f:f7:78:0d:7a:e2:fc:0c:74:58:
9e:79:89:42:db:2d:21:65:66:e5:84:cc:b2:ec:27:
b9:b4:f5:db:0a:4c:4b:6d:bb:85:e1:b5:12:56:47:
85:39:5d:ee:e8:52:ed:82:78:42:e3:7e:ff:50:d6:
3a:e1:1a:90:3e:f7:7a:1e:18:58:32:76:4d:e0:69:
40:ba:48:17:8d:ef:f2:26:5b:46:d3:c5:ca:f0:17:
41:2f:b4:a3:ed:ed:0b:f1:15:49:b4:9c:34:f5:3e:
f9:da:07:c3:fd:af:33:34:60:8d:4c:f8:90:40:77:
da:87:33:b1:8a:3f:cd:4e:63:f6:50:e1:e8:2d:90:
de:45:ca:97:b5:0c:a0:58:fe:0e:c1:cd:23:00:90:
b8:f9:bd:06:a2:09:cf:50:77:f8:51:d7:f5:9c:8c:
25:0e:52:06:b5:a2:18:87:4c:b9:25:5c:42:b0:a5:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:4A:AA:CA:05:E9:89:C7:8A:81:60:23:23:35:70:1E:77:CF:2F
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/22VKqsoF6YnHioFgIyM1cB53zy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.162.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:08:89:5f:8a:44:d9:34:e8:a6:58:72:a1:03:45:fd:44:e4:
3c:9b:b7:b1:a3:a6:08:7f:77:2d:60:30:e4:ef:35:22:bd:3a:
a9:52:a7:2f:8c:cc:3c:ee:70:32:fe:5d:cc:e9:4d:38:fa:27:
03:f8:8d:53:3d:dd:b9:3a:34:c0:6a:b4:8b:d4:15:1b:34:6d:
ac:09:ec:e7:c1:88:cf:7c:8f:5b:3a:86:69:1a:fb:9e:72:5e:
aa:cf:68:3a:f5:58:79:41:a1:97:bd:71:72:99:b7:f5:d5:f9:
ec:a1:c9:ed:be:26:c5:50:c2:97:94:22:2d:64:fd:fb:f9:72:
50:83:2a:a1:84:70:bc:cc:d8:a7:65:2f:2b:63:0a:fd:6b:30:
79:5b:9c:40:df:9d:79:7d:b3:da:a1:40:a4:0b:3f:1e:d4:af:
16:a9:8b:99:34:c8:a2:9d:e5:1d:e1:41:48:1a:1b:f9:a3:a4:
f8:ec:3a:e4:c7:9a:12:f9:fa:ad:e5:4e:2e:53:ae:f2:9b:75:
5d:81:b2:fe:7a:99:7e:bc:e6:14:bb:63:c1:15:37:a8:ca:f0:
2c:73:2c:5c:d1:94:be:f5:fc:f8:e9:28:61:ff:44:fc:c5:2c:
2d:e1:16:8f:5d:87:09:1c:f7:54:d2:6b:17:ca:d6:ce:47:15:
40:20:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:18:53 2026 by rpki-client