Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/2Eg9MXs3kMIzZV8RHl8SkcZ_Ujw.roa
File: 2Eg9MXs3kMIzZV8RHl8SkcZ_Ujw.roa (raw, json)
Hash identifier: eQ2sF26oTn6UeyVsnnomDEIJxuet9SJl9Iuxk++QBco=
Subject key identifier: D8:48:3D:31:7B:37:90:C2:33:65:5F:11:1E:5F:12:91:C6:7F:52:3C
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FA3AB634216E8682B9E49517B58408377
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/2Eg9MXs3kMIzZV8RHl8SkcZ_Ujw.roa
Signing time: Mon 27 Jul 2026 13:02:25 +0000
ROA not before: Mon 27 Jul 2026 13:02:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.192.0/24 maxlen: 24
222.167.215.0/24 maxlen: 24
222.167.226.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:ab:63:42:16:e8:68:2b:9e:49:51:7b:58:40:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 27 13:02:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8483d317b3790c233655f111e5f1291c67f523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:d4:f6:b7:a9:8c:77:ea:a0:36:bf:51:40:
41:81:49:66:a9:2b:57:12:45:60:a2:f2:26:0d:ab:
fc:34:b0:dd:83:a0:e5:be:21:80:91:3e:b5:04:c4:
d6:59:5b:61:40:62:90:b1:ea:d5:fc:6b:fb:f5:ba:
b0:97:23:aa:37:1d:cc:fb:cf:2b:5d:53:08:d7:56:
cf:70:a8:03:c8:e9:12:01:24:a0:cd:d2:6e:ea:2e:
6f:58:e5:ac:7f:6b:a2:8b:bf:eb:af:74:83:1e:69:
6b:c9:a7:82:7a:d8:e7:0b:3a:83:62:a8:29:b7:33:
0a:50:44:59:e3:34:c9:3d:4b:65:aa:fb:26:25:b4:
b0:a9:7f:d6:8c:80:06:1a:91:29:4f:39:e5:85:b4:
09:66:a0:6f:53:ad:2f:b6:ce:01:9b:27:57:b3:6f:
0c:76:42:33:05:34:2e:04:47:1d:72:c7:b2:3a:df:
89:99:da:02:5d:54:e6:b1:f6:94:f7:b9:22:8e:95:
3d:a5:37:da:9d:94:30:e8:7f:6e:d7:c5:0a:b6:4d:
07:e4:d7:52:5b:63:ca:38:7e:29:0e:48:a3:67:cc:
d2:28:48:5f:c8:ef:c6:d3:e2:55:f0:1f:96:21:b1:
6b:54:8c:d0:6f:18:f0:37:a1:95:6e:43:8b:1a:27:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:3D:31:7B:37:90:C2:33:65:5F:11:1E:5F:12:91:C6:7F:52:3C
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/2Eg9MXs3kMIzZV8RHl8SkcZ_Ujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.192.0/24
222.167.215.0/24
222.167.226.0/24
222.167.234.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c9:6d:e2:2c:7e:ac:50:02:c5:16:79:2e:58:7d:87:cf:eb:
64:52:79:bd:f9:dc:10:4e:e2:e2:a0:c5:00:62:05:74:0e:59:
e1:67:c6:62:db:ec:d5:f9:f0:9e:74:86:0a:66:c0:34:8d:a0:
f1:85:91:e0:91:1c:ba:81:9f:0f:c8:d1:59:17:af:ca:0e:e9:
d1:32:4e:a5:ef:a0:1e:93:67:82:8e:5f:45:16:8f:f1:65:34:
fc:8e:5e:8b:de:00:25:7d:77:46:bd:9b:11:04:90:39:50:6b:
f5:52:e7:da:3c:27:66:c1:58:7d:43:4f:c0:fe:b7:a5:0d:83:
c2:c8:ba:77:f5:55:2e:46:7f:ae:fa:e6:e0:b6:15:4e:82:ef:
13:5d:51:37:8a:ae:4c:db:c8:f1:83:ee:e7:e5:93:3f:69:92:
7e:2b:1a:b4:cc:81:ba:51:a6:5d:67:c4:47:60:b9:fb:34:e3:
61:1e:6b:36:f5:61:85:d8:34:d0:85:a3:65:2e:a7:45:c0:fe:
4a:96:8f:83:bc:49:83:58:0a:1c:d3:28:2b:8c:0f:d4:83:9f:
64:14:18:30:be:b0:8a:68:5e:4e:95:7c:da:66:b5:07:85:53:
da:eb:d6:fa:cc:64:d5:a7:59:c2:11:f0:8b:11:62:88:ad:b4:
6c:e7:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:16 2026 by rpki-client