Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/VaQO35MjmxIvk25kxSxS8V8IT-A.roa
File: VaQO35MjmxIvk25kxSxS8V8IT-A.roa (raw, json)
Hash identifier: GQYXzidHPzzz2ER38qUc2ZQSsKzCNUQKQ+UjOoI//as=
Subject key identifier: 55:A4:0E:DF:93:23:9B:12:2F:93:6E:64:C5:2C:52:F1:5F:08:4F:E0
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0B666D3BF3DD7D4D0C5D15679C1CC59D0
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/VaQO35MjmxIvk25kxSxS8V8IT-A.roa
Signing time: Fri 18 Sep 2026 21:23:07 +0000
ROA not before: Fri 18 Sep 2026 21:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 222.167.233.0/24 maxlen: 24
222.167.243.0/24 maxlen: 24
222.167.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:66:d3:bf:3d:d7:d4:d0:c5:d1:56:79:c1:cc:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 18 21:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55a40edf93239b122f936e64c52c52f15f084fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:73:10:89:41:4a:de:93:6f:70:d4:4a:a9:
1e:f8:2b:0f:70:92:c1:06:05:0f:6c:46:af:54:4f:
ef:15:ba:25:05:92:ce:75:74:b1:c0:14:6c:55:4b:
c6:e2:8b:25:9e:5c:5e:1d:fd:05:5d:58:1b:c3:8e:
8b:70:fe:74:df:30:60:5c:08:99:c9:bc:40:ea:99:
ea:8a:31:45:78:6b:db:d8:9a:1e:49:94:9a:23:a4:
4d:b2:41:e3:ef:e7:16:27:79:0a:45:e4:74:99:5c:
17:c4:0e:cc:80:fb:31:c8:ac:0b:cd:55:7a:60:ce:
81:f1:b9:b7:22:15:47:44:04:97:b8:c0:cd:14:0a:
9d:15:e5:c2:c1:2c:cb:2f:f7:f1:32:a1:19:d8:bb:
d2:8b:b3:41:85:d6:5d:b0:ef:44:ed:63:2c:91:ee:
57:a3:1a:55:27:3d:e0:ab:cc:db:a9:06:6d:16:5d:
90:9f:b3:3a:d6:6c:e2:bf:d3:4b:77:4d:1b:51:86:
b9:d4:2e:b3:87:10:b0:10:6c:37:af:e1:af:56:59:
e9:1a:89:db:7c:d3:26:32:08:b5:b7:10:ca:18:58:
80:ed:f2:95:63:68:7e:54:39:c7:10:2a:5e:e6:1a:
27:aa:44:d3:f4:d4:d5:c7:2e:4a:d0:3e:9d:d5:68:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:0E:DF:93:23:9B:12:2F:93:6E:64:C5:2C:52:F1:5F:08:4F:E0
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/VaQO35MjmxIvk25kxSxS8V8IT-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.233.0/24
222.167.243.0/24
222.167.247.0/24
Signature Algorithm: sha256WithRSAEncryption
14:85:8b:d4:dd:a7:77:95:6f:b9:c0:0f:0b:7f:13:b5:f1:94:
f2:15:97:c5:56:e8:02:09:07:34:76:70:b3:b4:e7:67:a0:c4:
88:a9:85:04:10:3b:25:54:cf:9c:04:15:e2:f6:28:7b:01:3a:
11:0b:25:84:2f:90:d5:61:65:9f:6b:3c:d4:f4:0a:b0:84:38:
0c:36:26:aa:a7:b5:d1:ab:32:d3:e5:79:5c:cc:81:10:9a:fb:
ee:8b:bd:83:db:63:67:8b:12:10:ac:73:1b:bc:6d:0d:e7:1b:
6f:58:ef:fa:f2:c3:4f:fc:96:64:07:4c:36:b0:c6:1e:da:6d:
34:17:58:99:25:56:02:47:0d:ac:f7:55:07:a4:57:df:6e:93:
96:54:90:50:79:15:c7:2c:49:f4:9b:af:91:dc:56:33:7b:c0:
7c:d0:90:42:71:c3:aa:e8:f7:da:08:ec:cb:e6:51:99:da:c8:
04:26:b3:e1:0a:fc:6c:b1:33:44:a4:02:2e:77:97:db:e9:80:
e5:20:73:f4:23:07:99:e1:9d:bb:d9:13:b9:fb:85:10:1e:58:
d3:68:d1:7f:be:7e:e5:f6:65:29:a2:29:c2:15:fa:2e:11:4f:
86:42:b9:8b:9c:bc:00:1f:d8:84:bd:67:85:b1:aa:0a:24:af:
1b:7a:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:05 2026 by rpki-client