Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dIkIIwMJlVngPHY00W7so9kXee8.roa
File: dIkIIwMJlVngPHY00W7so9kXee8.roa (raw, json)
Hash identifier: TIHdrgcUvKTPC7X6t/4o0xwh0i5oON/QpQCpMxfjv30=
Subject key identifier: 74:89:08:23:03:09:95:59:E0:3C:76:34:D1:6E:EC:A3:D9:17:79:EF
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D46D1F5502F1C95878C90B95A2F42A2C3
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dIkIIwMJlVngPHY00W7so9kXee8.roa
Signing time: Wed 01 Apr 2026 02:14:17 +0000
ROA not before: Wed 01 Apr 2026 02:14:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 192.144.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:46:d1:f5:50:2f:1c:95:87:8c:90:b9:5a:2f:42:a2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 1 02:14:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7489082303099559e03c7634d16eeca3d91779ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:10:ff:46:68:93:a1:e5:10:02:91:2a:9c:
bd:45:c4:13:82:55:a7:c0:85:37:7c:83:9e:6d:f7:
08:4a:a1:f2:1f:20:50:b8:5c:c6:ab:78:c6:cb:b6:
84:37:ff:3f:9f:35:e9:c6:cd:50:1b:6e:3a:2a:df:
aa:93:30:f9:79:1d:d9:47:ea:df:8e:66:fd:5d:19:
f4:bc:f8:d5:e6:5a:d4:67:5e:9c:c4:ae:2b:68:34:
d6:ee:db:fa:c5:e5:cc:b6:52:91:6d:84:ed:e1:02:
01:a9:cc:43:1d:eb:a2:ff:4f:eb:18:82:2b:bd:2b:
ea:23:af:92:0e:1d:29:b8:a0:25:c1:d5:35:6e:eb:
ed:38:40:85:ec:f5:50:53:29:bd:40:11:03:e0:50:
5c:2f:f4:c4:29:a3:7b:67:37:64:b3:99:5f:f3:8f:
ae:e1:da:bd:3f:ed:ad:d6:5d:af:4b:17:6d:a7:ac:
2e:7a:ef:25:70:79:ae:eb:f8:cc:ce:0f:e5:a0:0b:
12:04:51:91:ba:39:e6:6a:8c:eb:21:3a:d5:bc:74:
61:11:10:93:18:56:4c:06:ed:ff:26:0d:37:0b:09:
d2:5e:e9:35:4c:3e:e0:50:d4:91:49:bf:bc:98:4a:
00:d9:41:99:97:32:6d:31:d6:b6:79:f4:5b:8e:df:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:08:23:03:09:95:59:E0:3C:76:34:D1:6E:EC:A3:D9:17:79:EF
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dIkIIwMJlVngPHY00W7so9kXee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e1:a3:21:c3:73:80:82:ac:c6:79:c4:9a:1a:71:9a:16:a6:
55:5a:16:58:e1:33:b3:58:2a:94:1e:f0:8e:8d:2b:10:00:7b:
0e:ca:4d:2d:35:97:4f:04:05:d0:25:a1:25:e8:ef:52:8d:3e:
ad:c9:7c:21:08:37:1d:b7:5e:56:74:e6:2c:e3:0a:d6:cf:06:
f0:ca:4f:9d:c1:b6:c6:9d:77:6f:1c:a0:e0:ae:b5:8d:af:4c:
9b:e4:a0:67:56:41:23:3a:66:14:08:84:9f:88:ac:62:51:7f:
5e:ff:76:01:90:b8:01:c8:17:31:5a:d9:e3:60:ca:e7:f8:27:
c4:68:a4:52:7d:5f:2f:c9:e0:27:65:a7:ec:8e:08:2b:98:f5:
ce:9d:9a:b9:db:d4:e1:5d:f5:06:84:88:40:36:96:c5:b7:4f:
c5:ac:92:bf:9e:2c:aa:7a:d2:9c:c5:d1:aa:6b:df:ca:62:73:
ce:d4:94:bc:5e:21:52:24:a4:4b:cb:42:78:84:ce:8b:e6:20:
5f:5f:81:61:ab:c5:19:e7:a0:d1:6b:0b:e4:80:ae:b0:70:f9:
47:2e:42:6f:9f:94:59:c1:8b:73:e7:59:3e:44:5c:7b:7b:5d:
f9:20:a3:e7:21:cd:6a:d7:85:a3:67:0a:e9:bf:bf:41:79:bc:
97:89:4d:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1G0fVQLxyVh4yQuVovQqLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNDAxMDIxNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDg5MDgyMzAzMDk5NTU5ZTAzYzc2MzRkMTZlZWNhM2Q5MTc3OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSsQ/0Zok6HlEAKRKpy9RcQTglWn
wIU3fIOebfcISqHyHyBQuFzGq3jGy7aEN/8/nzXpxs1QG246Kt+qkzD5eR3ZR+rf
jmb9XRn0vPjV5lrUZ16cxK4raDTW7tv6xeXMtlKRbYTt4QIBqcxDHeui/0/rGIIr
vSvqI6+SDh0puKAlwdU1buvtOECF7PVQUym9QBED4FBcL/TEKaN7Zzdks5lf84+u
4dq9P+2t1l2vSxdtp6wueu8lcHmu6/jMzg/loAsSBFGRujnmaozrITrVvHRhERCT
GFZMBu3/Jg03CwnSXuk1TD7gUNSRSb+8mEoA2UGZlzJtMda2efRbjt9o+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSJCCMDCZVZ4Dx2NNFu7KPZF3nvMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvZElrSUl3TUpsVm5nUEhZMDBXN3NvOWtYZWU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJBOMA0G
CSqGSIb3DQEBCwUAA4IBAQA84aMhw3OAgqzGecSaGnGaFqZVWhZY4TOzWCqUHvCO
jSsQAHsOyk0tNZdPBAXQJaEl6O9SjT6tyXwhCDcdt15WdOYs4wrWzwbwyk+dwbbG
nXdvHKDgrrWNr0yb5KBnVkEjOmYUCISfiKxiUX9e/3YBkLgByBcxWtnjYMrn+CfE
aKRSfV8vyeAnZafsjggrmPXOnZq529ThXfUGhIhANpbFt0/FrJK/niyqetKcxdGq
a9/KYnPO1JS8XiFSJKRLy0J4hM6L5iBfX4Fhq8UZ56DRawvkgK6wcPlHLkJvn5RZ
wYtz51k+RFx7e135IKPnIc1q14WjZwrpv79BebyXiU0i
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:26 2026 by rpki-client