Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/QnBNxQiefz20u8o9VW0hVcKH9FA.roa
File: QnBNxQiefz20u8o9VW0hVcKH9FA.roa (raw, json)
Hash identifier: lfA48bSeSrBLTiiQa31OzQoaQDfkl++TWzqG0YvPsig=
Subject key identifier: 42:70:4D:C5:08:9E:7F:3D:B4:BB:CA:3D:55:6D:21:55:C2:87:F4:50
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E4BBA8B266215A0709F56BC02EBF03E8E
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/QnBNxQiefz20u8o9VW0hVcKH9FA.roa
Signing time: Thu 21 May 2026 18:09:37 +0000
ROA not before: Thu 21 May 2026 18:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199783
IP address blocks: 222.167.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:ba:8b:26:62:15:a0:70:9f:56:bc:02:eb:f0:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 21 18:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42704dc5089e7f3db4bbca3d556d2155c287f450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:ca:a8:90:ec:1b:12:9e:2a:52:c1:cf:2c:
86:c3:ee:bd:81:f0:68:37:da:6d:d6:12:a8:29:8b:
15:4d:3a:63:00:18:ef:bd:98:57:90:3c:0e:8a:e1:
cd:21:be:65:f8:7e:00:82:a1:de:79:55:35:89:04:
fb:d3:f5:dc:64:0c:d7:a6:9e:54:5b:bf:ae:19:da:
37:f5:9e:ea:dc:2a:dc:19:d5:1a:d8:b6:3d:f4:06:
28:a8:8f:c1:a2:18:5e:20:5a:1a:14:46:98:0c:f1:
45:5e:e3:f2:7e:c2:a4:08:3f:61:df:3c:92:4f:c7:
00:03:37:69:c7:39:44:92:a9:e2:e9:08:fa:87:49:
25:fb:fc:31:26:3b:07:f7:a6:b7:f9:e5:7f:f3:0e:
72:8b:5a:17:28:67:56:72:03:97:3f:ee:ce:75:3d:
fd:66:85:15:8c:4d:1d:d8:d8:4b:df:ae:3a:d0:ce:
aa:d1:30:fd:8d:9c:6f:b1:64:15:c0:52:5d:3d:11:
c6:ef:f1:08:84:9c:c6:a5:c1:e5:79:1c:09:cb:75:
7b:5d:36:cd:96:65:a4:4b:5d:d9:67:f0:a0:c5:9f:
70:8a:b7:37:71:70:d5:e7:06:20:a7:1d:4f:ed:be:
66:db:5c:f0:19:99:28:fc:bf:ba:2a:c1:13:1f:94:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:4D:C5:08:9E:7F:3D:B4:BB:CA:3D:55:6D:21:55:C2:87:F4:50
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/QnBNxQiefz20u8o9VW0hVcKH9FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.215.0/24
Signature Algorithm: sha256WithRSAEncryption
38:df:86:5b:c0:bd:23:87:fb:10:9d:7a:87:50:b9:f8:c6:0f:
17:1a:3c:e7:d5:b4:b1:fe:09:b4:68:53:9d:b9:1f:c5:87:23:
54:43:d9:c5:07:5b:56:36:fb:15:20:8d:66:89:27:0b:fa:63:
39:df:e7:52:b8:77:30:28:0f:f8:eb:75:33:a9:96:01:b4:c4:
3e:94:bd:4a:f2:ac:6d:97:72:ba:13:58:3b:db:ec:66:f3:cb:
26:30:d3:88:c4:84:db:e1:57:0d:6e:39:e0:b2:0d:1b:26:dd:
18:ea:70:d1:ad:04:00:70:c1:06:28:79:f2:20:59:3f:8c:61:
64:10:a8:42:92:f3:5e:1f:c3:59:1e:38:cd:37:a3:f5:26:f2:
ae:e9:8c:29:f1:8e:74:72:e2:1c:f9:3f:b4:e3:65:8d:3f:e7:
c2:bb:fb:41:16:b2:4c:a7:90:9d:fe:26:d2:fc:03:02:1d:9b:
5d:3e:48:20:9d:31:40:a5:3c:7e:ee:8a:fb:56:11:b1:02:45:
c4:a8:02:c6:1e:17:50:20:dd:6a:95:6b:ea:5f:87:3a:85:a4:
79:0d:b3:89:a6:12:9a:05:9d:0f:9c:00:cd:cb:4c:ec:39:63:
ea:57:e7:07:98:7c:59:d1:97:33:95:b6:83:e6:c7:34:18:3a:
1e:90:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:42 2026 by rpki-client