Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Nl95pPj1xv8IQn8zdiO5p-KELL0.roa
File: Nl95pPj1xv8IQn8zdiO5p-KELL0.roa (raw, json)
Hash identifier: B68NpSXEheVEoKP1sHxA4HgYoD7ZBtNJllLYnetMaZA=
Subject key identifier: 36:5F:79:A4:F8:F5:C6:FF:08:42:7F:33:76:23:B9:A7:E2:84:2C:BD
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D7332C4860B6FC3F576A367E6C68C3343
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Nl95pPj1xv8IQn8zdiO5p-KELL0.roa
Signing time: Thu 09 Apr 2026 17:03:20 +0000
ROA not before: Thu 09 Apr 2026 17:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 222.167.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:32:c4:86:0b:6f:c3:f5:76:a3:67:e6:c6:8c:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 9 17:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=365f79a4f8f5c6ff08427f337623b9a7e2842cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:c4:11:62:90:61:2d:f8:7c:fc:4b:98:e5:
20:ab:bd:34:c9:74:9d:78:49:b7:d6:94:df:3b:e2:
1a:7c:87:4d:7d:8c:03:05:68:03:3f:53:1c:7c:61:
4f:57:60:3a:35:17:25:ab:68:39:4e:37:18:d8:2e:
df:ef:3b:a4:9d:f4:80:2e:b3:84:05:cc:1a:dc:dd:
14:af:49:36:91:de:47:57:f6:19:6e:50:06:5b:48:
0b:02:5f:91:a1:0b:1c:90:60:62:cc:a3:f3:3d:98:
97:eb:a5:58:4c:7b:00:78:89:cb:7c:84:43:56:a8:
27:cd:11:72:6c:12:bb:dc:96:2d:ce:74:c4:5b:a0:
97:7b:6c:00:09:74:35:27:b5:eb:4f:3d:18:28:50:
3f:33:df:4b:d4:70:09:98:65:7c:7a:5c:e7:f6:8f:
98:4f:8d:71:d1:23:08:70:0a:e9:46:f5:cd:4f:8b:
74:1c:52:46:39:c3:39:36:f3:11:82:04:c3:e8:e7:
32:9b:8d:57:34:67:75:cd:fc:97:36:f9:46:63:33:
06:cc:ce:88:eb:38:0d:3a:6d:29:17:1a:44:5c:ec:
f4:8e:29:c5:61:c9:27:87:ab:20:72:10:e6:e0:6d:
8f:67:63:64:4c:41:49:41:f1:56:43:55:08:71:8a:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5F:79:A4:F8:F5:C6:FF:08:42:7F:33:76:23:B9:A7:E2:84:2C:BD
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Nl95pPj1xv8IQn8zdiO5p-KELL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:11:83:36:e0:fe:70:2a:ea:b3:ff:ef:53:95:73:7e:e6:f0:
31:6f:ee:da:2c:73:92:bd:70:77:aa:7e:3a:ca:88:9c:84:f5:
39:4d:34:e0:ca:42:69:6b:50:a3:6f:1e:24:7d:65:26:29:de:
ea:cd:94:b4:bc:f5:01:77:54:c9:fa:50:d0:53:1a:dc:fc:3e:
fa:09:c6:81:57:98:8e:1f:dc:48:22:f5:f4:13:5e:6a:89:6a:
f0:5f:1f:7a:99:d7:33:3b:46:e6:65:89:67:da:af:f3:d8:53:
3b:f0:2a:2d:86:c5:a1:cc:44:0e:11:83:e5:6a:be:30:b6:e9:
a8:0f:ca:ad:1a:cf:53:6a:e4:51:00:f3:52:90:53:41:c3:89:
12:e1:b3:c3:da:a3:1f:df:29:81:1e:26:41:9c:1f:4d:9d:fe:
15:83:c5:c3:74:16:7f:46:fb:b3:52:56:43:f7:e7:af:7b:26:
33:dc:87:78:7b:2e:1c:a4:95:0e:f4:a7:3e:78:42:a2:b2:ca:
d8:a7:e1:90:41:a1:7a:84:76:46:d2:3b:a3:a6:ef:3b:3c:68:
7a:06:c2:5c:06:3a:1e:0a:1d:98:87:26:0a:55:b9:64:bd:52:
23:b1:7c:cc:e0:5e:6c:a8:88:b3:35:24:f2:e8:7a:0d:f5:b1:
cb:44:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:26:11 2026 by rpki-client