Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0YWrZMHXzL_fpQu6UEXfvsOhaUo.roa
File: 0YWrZMHXzL_fpQu6UEXfvsOhaUo.roa (raw, json)
Hash identifier: D5E1izzcKMP3zRohFMUe7WsnHDjW1oHiWCyMD22hKXE=
Subject key identifier: D1:85:AB:64:C1:D7:CC:BF:DF:A5:0B:BA:50:45:DF:BE:C3:A1:69:4A
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0623D50154DC9B125832594D88CA6B83B
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0YWrZMHXzL_fpQu6UEXfvsOhaUo.roa
Signing time: Wed 02 Sep 2026 13:09:40 +0000
ROA not before: Wed 02 Sep 2026 13:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218805
IP address blocks: 222.167.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:3d:50:15:4d:c9:b1:25:83:25:94:d8:8c:a6:b8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 2 13:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d185ab64c1d7ccbfdfa50bba5045dfbec3a1694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:08:57:0e:8d:be:4a:91:00:40:8f:50:f3:
38:1b:75:ea:71:73:fd:4c:c5:5e:4e:b9:c0:db:05:
3d:ff:99:0f:31:8b:93:53:aa:44:83:f7:38:5e:d4:
b2:5f:20:01:c7:6f:ab:5b:5a:68:6f:1c:a5:6e:f8:
2d:7e:26:a5:45:53:3f:8f:a3:1e:35:99:44:5e:ce:
5e:dd:71:97:ed:d7:b8:2c:fb:a4:76:a5:74:3a:55:
74:41:d8:cd:90:7b:21:4d:f0:71:e7:a9:53:a8:9e:
16:7d:c8:f6:d2:3f:7b:23:21:1b:d7:25:da:9f:ce:
62:68:5f:74:73:c5:5a:ce:ec:ab:6f:ee:56:60:d8:
57:d8:37:48:97:25:4c:a1:7e:d8:29:42:1e:b0:8d:
99:2c:1c:0d:00:10:45:f3:ee:e0:3e:ac:08:eb:52:
89:bf:f4:69:2a:33:a2:c1:75:0c:32:d8:32:b8:a0:
c2:a8:bd:13:74:d1:27:74:d1:41:55:75:8b:83:5c:
a3:fd:f0:b6:33:4a:50:bd:4e:f6:93:83:91:09:4d:
8b:94:cd:76:f9:32:fb:63:6a:08:93:10:eb:04:31:
15:4a:a0:c6:d9:7b:c3:99:bb:41:1e:26:0b:bb:9a:
03:6b:56:ef:80:c9:9d:ba:33:82:01:ee:cc:67:80:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:AB:64:C1:D7:CC:BF:DF:A5:0B:BA:50:45:DF:BE:C3:A1:69:4A
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0YWrZMHXzL_fpQu6UEXfvsOhaUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:91:a2:f8:b2:bd:88:ac:b1:01:56:c2:0f:c8:52:0e:92:0c:
1c:78:50:ca:f4:32:e0:ac:76:08:0e:6e:0e:d7:9c:fd:11:8c:
60:39:7f:81:94:6d:14:8e:73:09:cc:d1:9b:a4:96:cd:b9:56:
ec:ef:ad:09:f5:5d:22:3c:0f:c0:14:98:70:ad:3c:02:cf:d3:
85:b8:c4:e9:9e:92:51:55:4d:a4:9b:5d:99:a4:06:c9:43:85:
b7:90:9c:42:ab:ba:12:41:01:88:d3:45:68:f8:02:f8:c3:63:
a9:55:52:34:ba:54:b9:d6:7a:30:e7:5b:44:b8:d2:46:b6:2f:
47:e6:e9:84:19:29:6f:c8:77:51:37:ab:7c:69:09:2b:18:ab:
4a:fa:d3:2f:b4:cf:ee:d3:97:a1:0c:91:c5:8f:fa:54:9c:54:
8c:ff:38:02:72:c2:ab:f0:9c:b5:c3:f0:b8:39:0d:dd:86:28:
66:52:29:62:d7:f2:3f:00:44:89:52:5d:69:c6:6f:0f:6f:2e:
f6:fd:b9:90:3e:23:20:2c:5c:da:4f:0a:8e:52:25:1c:e0:55:
6b:dc:7c:0b:68:e8:e8:8b:80:59:c4:ae:18:2c:13:00:e4:9a:
4e:82:28:e6:75:92:28:29:17:dd:aa:bc:ed:e3:5c:e2:0f:dc:
8e:e0:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:44 2026 by rpki-client