Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6YdauMxwtaJ2XapsEhB4s_XIetk.roa
File: 6YdauMxwtaJ2XapsEhB4s_XIetk.roa (raw, json)
Hash identifier: OrJfyq6brZkbyt8ajKBE0Bg6XcJ1it9g0va1TyaaubM=
Subject key identifier: E9:87:5A:B8:CC:70:B5:A2:76:5D:AA:6C:12:10:78:B3:F5:C8:7A:D9
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E88CCDAB573102B9886B94A62FBC01479
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6YdauMxwtaJ2XapsEhB4s_XIetk.roa
Signing time: Tue 02 Jun 2026 14:46:27 +0000
ROA not before: Tue 02 Jun 2026 14:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 222.167.208.0/24 maxlen: 24
222.167.211.0/24 maxlen: 24
222.167.212.0/24 maxlen: 24
222.167.216.0/24 maxlen: 24
222.167.220.0/24 maxlen: 24
222.167.231.0/24 maxlen: 24
222.167.238.0/24 maxlen: 24
222.167.249.0/24 maxlen: 24
222.167.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:cc:da:b5:73:10:2b:98:86:b9:4a:62:fb:c0:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 2 14:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9875ab8cc70b5a2765daa6c121078b3f5c87ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:0f:19:4e:cb:ae:cb:ae:87:61:ea:67:50:
4c:88:ff:b3:9d:6a:8a:86:55:7f:e0:ab:d9:bc:c1:
74:70:06:88:8f:20:97:28:67:0b:82:4c:8f:c5:0f:
cb:6b:0c:f1:5c:93:c4:15:9a:3d:08:cb:ab:6e:d8:
08:bf:5f:1e:d3:77:77:56:22:89:74:a3:a6:3f:7e:
91:71:4a:64:e3:5a:f8:d1:63:94:02:de:90:a6:60:
d2:ad:b2:3a:4c:7d:77:01:3f:4f:61:1a:90:00:93:
ac:09:af:2d:a2:aa:32:be:16:71:73:e3:7e:b1:be:
5c:4d:83:ce:b4:cf:f7:06:a4:21:46:c5:e5:20:a8:
33:15:a5:6b:09:55:46:cd:aa:d1:26:f2:70:2c:67:
c2:63:d5:74:01:b7:1c:04:06:21:a5:02:5a:86:44:
22:a6:03:d4:4a:b5:e2:da:37:91:f2:3e:1b:54:72:
34:f5:72:e5:dc:58:76:a6:09:dc:86:3b:56:ef:19:
57:c7:31:b6:60:39:d0:cd:45:08:1f:49:7f:df:f5:
27:53:26:54:3b:0c:f1:75:cf:90:69:64:8b:41:52:
60:d4:8d:75:4d:35:bd:9b:0a:51:ea:c3:d5:23:25:
c2:25:1e:8f:08:8d:43:8b:ae:7d:9d:d2:27:e0:95:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:5A:B8:CC:70:B5:A2:76:5D:AA:6C:12:10:78:B3:F5:C8:7A:D9
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6YdauMxwtaJ2XapsEhB4s_XIetk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.208.0/24
222.167.211.0-222.167.212.255
222.167.216.0/24
222.167.220.0/24
222.167.231.0/24
222.167.238.0/24
222.167.249.0/24
222.167.252.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1d:7d:6c:5e:ec:a8:6f:8c:44:6a:1c:81:12:71:7c:e0:96:
60:f4:ac:d0:54:3b:73:60:9a:b9:06:04:26:fe:a4:46:08:71:
b6:c4:47:d6:20:4a:b2:a4:f3:9c:f3:f9:a5:cb:06:c8:96:47:
04:4e:16:c0:ee:1d:53:a3:43:35:12:80:da:ec:ad:ed:ad:f7:
3a:77:90:c3:6f:01:d4:8b:7e:ed:49:db:5b:cb:72:f4:91:5a:
1d:25:c0:72:39:30:e9:d7:be:2f:3c:c6:ef:22:f0:fb:55:11:
8d:30:ba:23:59:f6:ee:c8:0b:c3:6d:99:81:80:14:3a:86:15:
37:b5:c4:16:de:20:a3:a6:e6:40:c6:a2:87:77:ca:18:77:4c:
46:6e:15:17:29:30:de:ca:31:6b:8a:d8:6a:32:3d:f6:34:41:
a2:61:0e:1f:dd:c4:3a:8e:3f:d2:27:16:5a:cd:88:50:34:70:
61:7b:c1:f0:fd:5e:e1:59:e2:76:97:79:35:82:f1:4a:de:6f:
df:69:84:50:dc:9f:33:19:41:bb:68:f4:60:fc:d5:30:5f:4f:
28:8c:d9:1c:b5:2e:4a:ed:52:15:37:dc:29:ba:8e:24:da:d9:
a0:5a:a9:85:9f:85:73:d7:fa:a1:ad:45:58:db:6e:79:37:2e:
20:8d:5a:c0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZ6IzNq1cxArmIa5SmL7wBR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNjAyMTQ0NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTg3NWFiOGNjNzBiNWEyNzY1ZGFhNmMxMjEwNzhiM2Y1Yzg3YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodgPGU7Lrsuuh2HqZ1BMiP+znWqK
hlV/4KvZvMF0cAaIjyCXKGcLgkyPxQ/LawzxXJPEFZo9CMurbtgIv18e03d3ViKJ
dKOmP36RcUpk41r40WOUAt6QpmDSrbI6TH13AT9PYRqQAJOsCa8toqoyvhZxc+N+
sb5cTYPOtM/3BqQhRsXlIKgzFaVrCVVGzarRJvJwLGfCY9V0AbccBAYhpQJahkQi
pgPUSrXi2jeR8j4bVHI09XLl3Fh2pgnchjtW7xlXxzG2YDnQzUUIH0l/3/UnUyZU
Owzxdc+QaWSLQVJg1I11TTW9mwpR6sPVIyXCJR6PCI1Di659ndIn4JXUnwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFOmHWrjMcLWidl2qbBIQeLP1yHrZMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvNllkYXVNeHd0YUoyWGFwc0VoQjRzX1hJZXRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQA3qfQMAwD
BADep9MDBADep9QDBADep9gDBADep9wDBADep+cDBADep+4DBADep/kDBADep/ww
DQYJKoZIhvcNAQELBQADggEBAKodfWxe7KhvjERqHIEScXzglmD0rNBUO3NgmrkG
BCb+pEYIcbbER9YgSrKk85zz+aXLBsiWRwROFsDuHVOjQzUSgNrsre2t9zp3kMNv
AdSLfu1J21vLcvSRWh0lwHI5MOnXvi88xu8i8PtVEY0wuiNZ9u7IC8NtmYGAFDqG
FTe1xBbeIKOm5kDGood3yhh3TEZuFRcpMN7KMWuK2GoyPfY0QaJhDh/dxDqOP9In
FlrNiFA0cGF7wfD9XuFZ4naXeTWC8Ureb99phFDcnzMZQbto9GD81TBfTyiM2Ry1
LkrtUhU33Cm6jiTa2aBaqYWfhXPX+qGtRVjbbnk3LiCNWsA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:20 2026 by rpki-client