Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X8sdbycHT12fl8v3f4JjpsnZTG0.roa
File: X8sdbycHT12fl8v3f4JjpsnZTG0.roa (raw, json)
Hash identifier: 35gVkSTJeST2VThCOqua4110t4pi9FQFLTgTaz5Gffk=
Subject key identifier: 5F:CB:1D:6F:27:07:4F:5D:9F:97:CB:F7:7F:82:63:A6:C9:D9:4C:6D
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019C9F887884432A6AD6DC75B2D4B61C091F
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X8sdbycHT12fl8v3f4JjpsnZTG0.roa
Signing time: Fri 27 Feb 2026 14:37:26 +0000
ROA not before: Fri 27 Feb 2026 14:37:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59455
IP address blocks: 222.167.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:88:78:84:43:2a:6a:d6:dc:75:b2:d4:b6:1c:09:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 27 14:37:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fcb1d6f27074f5d9f97cbf77f8263a6c9d94c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:11:92:0a:84:f8:ee:98:c8:8f:e1:2a:46:
79:6c:dd:2a:b3:08:94:34:76:c9:72:d6:75:e4:8e:
00:19:1b:f7:e0:29:79:9b:fe:75:bf:1a:a0:53:7c:
fb:87:3d:3b:0c:d3:b6:b4:0f:1a:b7:62:4e:f5:4e:
9a:35:1a:57:7d:a8:04:3b:bf:ff:f7:e6:2d:4b:29:
e4:0a:96:0d:2f:6f:d3:1d:52:ee:95:f8:59:80:fb:
a5:d3:db:69:f0:dd:f6:f9:da:91:d9:7e:0f:5d:79:
f4:61:fb:56:fc:ec:d4:6e:55:e9:1d:8a:17:be:bf:
54:72:75:60:6f:a1:02:0e:8b:9f:a9:f4:8a:c0:46:
c5:34:68:d7:02:e0:c0:c2:48:85:76:d5:68:f6:33:
be:20:a5:9e:dd:0b:15:61:a8:ab:0b:03:d0:ed:d7:
56:aa:c4:00:43:50:71:b4:40:c3:92:12:08:22:0b:
b8:bc:7c:ab:96:d9:fa:93:a8:27:f7:12:cc:72:a8:
5a:e8:b2:10:bc:0c:49:a7:bb:7c:89:96:82:19:dc:
9d:34:02:31:03:8f:10:7d:e5:2b:d8:ee:6f:5b:05:
0b:56:67:e3:cc:51:34:40:05:d8:e0:72:95:89:c0:
8c:ad:90:44:c3:a4:bd:12:42:c3:a3:09:95:0f:b0:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:1D:6F:27:07:4F:5D:9F:97:CB:F7:7F:82:63:A6:C9:D9:4C:6D
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X8sdbycHT12fl8v3f4JjpsnZTG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7f:2d:a5:bb:8c:84:8a:4a:51:13:41:80:34:2d:76:08:6e:
88:70:c7:b2:2d:22:5b:2c:e6:a7:3e:88:7e:89:0d:5d:2b:43:
57:65:49:cd:ba:7c:99:56:48:34:17:1a:d0:00:1f:69:9f:a8:
e9:34:09:45:0f:02:ef:cb:06:35:c8:51:2d:4e:61:66:f7:5e:
6c:75:19:9b:e8:1b:09:13:84:ce:77:84:58:6e:85:09:2f:c3:
c1:c1:2a:2f:76:c2:44:d9:ee:b3:4d:3a:3b:51:b4:12:ef:7f:
29:de:48:fa:65:8f:c2:09:55:30:a6:8f:bb:50:b3:05:e5:a6:
1f:75:29:6d:3f:57:0c:2b:27:e2:58:e5:26:4a:a2:a0:4c:57:
c9:4b:4d:01:1e:6b:fc:a5:4e:df:fa:58:a7:57:68:d7:16:22:
86:5a:fa:90:34:ad:43:01:85:77:b0:36:22:11:ba:04:3a:ea:
03:c2:76:ee:31:a6:f3:ef:81:d2:31:2e:31:64:47:9b:3f:43:
26:a4:d2:3e:80:98:40:92:62:a0:7a:bc:8f:44:46:ee:58:e7:
ea:a3:48:82:ae:c8:1b:d3:f6:66:66:e0:53:2a:bb:da:f8:a5:
6b:b7:90:22:7e:e3:7e:db:29:b7:43:24:b4:5d:65:f0:40:20:
ec:30:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:30 2026 by rpki-client