Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/f5P6u6aM_WBX6oou1dbKJRmkC4Q.roa
File: f5P6u6aM_WBX6oou1dbKJRmkC4Q.roa (raw, json)
Hash identifier: gQ8lTmP0GdnTrpE2PnSmuAmpkOeYje54eg1h9FeBLxM=
Subject key identifier: 7F:93:FA:BB:A6:8C:FD:60:57:EA:8A:2E:D5:D6:CA:25:19:A4:0B:84
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E6AD866327BC6B599A38C9F0279A18FEB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/f5P6u6aM_WBX6oou1dbKJRmkC4Q.roa
Signing time: Wed 27 May 2026 19:10:27 +0000
ROA not before: Wed 27 May 2026 19:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215261
IP address blocks: 222.167.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:d8:66:32:7b:c6:b5:99:a3:8c:9f:02:79:a1:8f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 27 19:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f93fabba68cfd6057ea8a2ed5d6ca2519a40b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:27:50:4e:87:c8:cf:3e:f7:92:01:88:c3:
db:f6:cc:e9:ba:ea:60:6b:1a:c9:a0:ad:b8:b6:c4:
13:b8:7e:92:4e:6a:dc:04:b8:f5:93:0e:cc:5e:d8:
cd:e4:7f:e2:fb:8b:15:e8:59:db:5d:81:ac:62:9f:
6b:7e:13:37:e7:0c:ae:a9:15:ac:5f:7e:c6:30:50:
25:e9:b5:fe:04:4d:69:38:db:f2:30:be:73:ee:c6:
33:6f:e2:95:7e:c5:b5:46:76:ac:07:4f:88:36:66:
03:f3:82:d4:a3:33:32:0e:5a:d5:12:6e:ef:e6:de:
d3:37:87:2d:93:73:dd:ea:e0:6c:d6:fa:0d:23:dc:
3e:44:3a:e0:15:17:1c:60:bb:7e:b5:9f:9c:db:db:
b7:7e:a7:7f:0e:51:48:0d:c4:e4:36:55:2b:ac:fb:
23:b9:a3:b5:bc:48:f9:d9:d2:d8:59:55:8b:05:58:
c9:ff:8a:aa:7d:d3:98:ff:21:38:81:31:24:c5:93:
56:8c:39:03:4c:fa:8a:bf:52:1e:38:8d:79:ec:c3:
d7:64:dd:ba:cd:f4:49:0f:bc:65:ab:44:c7:6b:ec:
20:bd:c2:c0:79:f7:7d:a9:40:72:4d:07:ae:46:81:
8e:06:c6:b7:56:b5:9f:4c:b8:17:89:18:da:1f:9b:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:93:FA:BB:A6:8C:FD:60:57:EA:8A:2E:D5:D6:CA:25:19:A4:0B:84
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/f5P6u6aM_WBX6oou1dbKJRmkC4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:40:bb:78:b4:d2:5c:d4:d4:3d:b6:64:6f:45:de:a1:de:69:
1a:09:82:85:5f:11:82:52:99:35:43:bb:9f:ff:d6:05:f0:64:
5a:33:f1:53:33:be:8f:63:62:4d:92:14:c2:9a:8e:b3:6f:2f:
08:0f:4f:f7:da:79:83:fe:4a:ce:53:81:ca:93:e3:ac:91:e6:
1c:d5:bf:26:d8:b4:61:cc:4d:2a:66:90:79:07:fb:6b:aa:b4:
3d:0c:12:bb:e8:ae:3f:7a:bd:b8:db:0d:37:7f:cc:9d:8a:40:
18:1f:a7:ec:9d:aa:ce:2b:d1:b0:27:d0:e8:3e:4d:83:9e:a9:
b6:51:27:55:da:cc:f4:70:6c:cb:42:80:c0:60:97:7e:dc:82:
b3:0f:85:f4:7f:d7:8a:ce:6c:85:99:ff:18:b3:36:6f:0b:a9:
6a:51:20:0c:15:08:6f:45:d6:a8:2d:1c:5e:5a:06:46:4b:60:
71:cd:31:74:a2:bd:81:4a:c3:5f:31:ff:8d:ca:93:6b:7d:67:
ce:eb:d1:47:0b:18:29:bd:18:22:6d:46:a3:9c:29:d7:47:32:
ca:f1:51:81:0c:ca:d1:bb:50:20:9f:b3:29:7e:05:e3:bd:90:
ac:a0:9d:b7:43:d2:59:b7:ba:08:0a:86:18:db:74:e8:7e:5b:
14:cc:24:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5q2GYye8a1maOMnwJ5oY/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNTI3MTkxMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjkzZmFiYmE2OGNmZDYwNTdlYThhMmVkNWQ2Y2EyNTE5YTQwYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOcnUE6HyM8+95IBiMPb9szpuupg
axrJoK24tsQTuH6STmrcBLj1kw7MXtjN5H/i+4sV6FnbXYGsYp9rfhM35wyuqRWs
X37GMFAl6bX+BE1pONvyML5z7sYzb+KVfsW1RnasB0+INmYD84LUozMyDlrVEm7v
5t7TN4ctk3Pd6uBs1voNI9w+RDrgFRccYLt+tZ+c29u3fqd/DlFIDcTkNlUrrPsj
uaO1vEj52dLYWVWLBVjJ/4qqfdOY/yE4gTEkxZNWjDkDTPqKv1IeOI157MPXZN26
zfRJD7xlq0THa+wgvcLAefd9qUByTQeuRoGOBsa3VrWfTLgXiRjaH5ubNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+T+rumjP1gV+qKLtXWyiUZpAuEMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvZjVQNnU2YU1fV0JYNm9vdTFkYktKUm1rQzRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfAMA0G
CSqGSIb3DQEBCwUAA4IBAQCzQLt4tNJc1NQ9tmRvRd6h3mkaCYKFXxGCUpk1Q7uf
/9YF8GRaM/FTM76PY2JNkhTCmo6zby8ID0/32nmD/krOU4HKk+OskeYc1b8m2LRh
zE0qZpB5B/trqrQ9DBK76K4/er242w03f8ydikAYH6fsnarOK9GwJ9DoPk2Dnqm2
USdV2sz0cGzLQoDAYJd+3IKzD4X0f9eKzmyFmf8YszZvC6lqUSAMFQhvRdaoLRxe
WgZGS2BxzTF0or2BSsNfMf+NypNrfWfO69FHCxgpvRgibUajnCnXRzLK8VGBDMrR
u1Agn7MpfgXjvZCsoJ23Q9JZt7oICoYY23ToflsUzCQq
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:42 2026 by rpki-client