Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/aHikDoY7PTlE63g8681nazruKQI.roa
File: aHikDoY7PTlE63g8681nazruKQI.roa (raw, json)
Hash identifier: ze8lLrQN/ERMv9fQP68OAX0YeYGfw8cezJvf2Z6IrAU=
Subject key identifier: 68:78:A4:0E:86:3B:3D:39:44:EB:78:3C:EB:CD:67:6B:3A:EE:29:02
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D91D52CCE15509C0B6C9E5A0665DE21D0
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/aHikDoY7PTlE63g8681nazruKQI.roa
Signing time: Wed 15 Apr 2026 15:49:20 +0000
ROA not before: Wed 15 Apr 2026 15:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134413
IP address blocks: 222.167.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:d5:2c:ce:15:50:9c:0b:6c:9e:5a:06:65:de:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 15 15:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6878a40e863b3d3944eb783cebcd676b3aee2902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:ee:ef:3c:ec:26:14:f7:59:47:47:e3:dd:
09:81:69:da:aa:52:42:1e:54:24:66:c6:33:b3:3f:
a0:19:88:cc:21:bb:b7:e9:46:fb:11:1c:13:a2:7b:
4b:fb:b0:f3:4b:32:96:15:44:39:41:9a:c5:c9:9a:
7f:9d:64:55:12:0a:bf:0a:d2:38:77:62:09:78:1b:
7b:29:95:e1:e2:a6:99:a3:7e:04:fd:b1:91:60:ef:
d1:93:c3:54:1b:35:eb:e9:15:c5:ad:91:06:c4:b3:
e7:e6:c3:be:9f:f5:d0:2c:93:13:5b:a0:4a:d9:a9:
f5:60:a1:78:0c:4d:b3:38:ac:36:9e:46:f9:e2:fc:
6e:63:a9:a1:b0:fd:a7:14:82:99:62:e5:b5:6a:e2:
bf:54:62:62:29:30:20:ec:bb:ee:21:77:50:67:b5:
db:61:c3:7b:f8:78:6b:e1:ca:8b:4d:85:ed:45:cc:
60:52:96:19:a3:31:b7:17:60:67:4e:3b:26:26:c2:
6e:ea:5e:54:71:8d:fd:d9:98:09:0c:79:49:e9:7e:
41:12:b4:36:b4:39:9f:3c:5e:55:14:05:2a:9d:e1:
8a:95:92:bc:7b:e6:a9:fc:b2:6c:ac:f2:30:b3:aa:
b8:a9:ca:2f:25:f4:3c:e6:e4:4c:55:30:16:6d:c5:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:A4:0E:86:3B:3D:39:44:EB:78:3C:EB:CD:67:6B:3A:EE:29:02
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/aHikDoY7PTlE63g8681nazruKQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.198.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2b:1d:72:dd:26:c6:69:b3:72:aa:cd:4a:d3:7c:10:74:3e:
2f:ab:57:11:2e:71:42:38:d8:5b:4a:7f:9f:8d:74:97:a1:67:
21:6d:9e:29:3d:15:41:ff:f1:e0:20:2f:2f:60:70:d6:4d:e6:
6f:97:58:ac:1c:21:10:04:56:02:4c:ed:c7:4a:bc:2f:11:d9:
a9:bb:1a:57:7e:27:ef:2c:77:10:80:d5:72:c4:b0:25:33:b3:
d9:6b:8e:ec:ad:29:c5:30:ce:67:b9:f1:3a:8d:8f:6f:d0:0a:
be:58:04:f0:c7:ca:17:cd:d1:af:b4:94:36:ee:b4:61:00:48:
7d:be:91:03:a5:d5:3d:a8:a5:10:39:d7:cc:2e:7c:32:cc:d9:
93:ef:f6:6f:41:e7:cf:e1:62:a8:a8:e9:58:24:10:52:ff:df:
37:ff:e5:d3:4a:92:f2:10:ce:2e:ae:f7:89:09:c5:7d:19:b4:
e8:7f:95:52:ab:54:a2:d6:6b:41:ef:e2:56:9e:42:56:f5:ae:
9e:1e:95:bd:00:41:5a:7c:0d:87:a0:2f:54:ee:60:62:df:48:
7e:02:06:37:35:1f:f6:0c:76:c9:fe:19:5d:a4:15:1e:f8:e2:
3f:38:17:da:2a:33:17:0d:73:4e:03:71:8f:4a:b8:4b:1f:fd:
08:c4:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:48 2026 by rpki-client