Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/fMSedJSqv9C6sYPgIeTBDq0FJhE.roa
File: fMSedJSqv9C6sYPgIeTBDq0FJhE.roa (raw, json)
Hash identifier: zAkJp90Xulr6wHS8heu3SwA9t6lCNg9Bdvap7WsW6UQ=
Subject key identifier: 7C:C4:9E:74:94:AA:BF:D0:BA:B1:83:E0:21:E4:C1:0E:AD:05:26:11
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D96AF8DB96B35EE238601972831C7255B
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/fMSedJSqv9C6sYPgIeTBDq0FJhE.roa
Signing time: Thu 16 Apr 2026 14:26:20 +0000
ROA not before: Thu 16 Apr 2026 14:26:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 222.167.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:af:8d:b9:6b:35:ee:23:86:01:97:28:31:c7:25:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 16 14:26:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cc49e7494aabfd0bab183e021e4c10ead052611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:39:5b:94:3f:f7:ad:e0:9a:8b:db:94:e0:
d2:93:77:f5:c3:e1:83:01:30:ad:44:5b:d8:f0:60:
bf:1c:ba:cd:e9:bf:f8:7b:5e:00:48:fb:66:4a:96:
eb:6a:fe:ee:00:b9:69:45:ca:06:8d:d3:a6:c9:f1:
39:85:0c:ab:82:6f:3e:3c:4a:d3:25:5c:00:ae:6c:
07:cc:c8:c1:c4:7f:95:4c:5f:8a:00:6d:6c:21:a6:
44:54:64:86:04:0d:0b:85:65:7d:f9:85:a0:4e:0c:
b3:da:ca:44:3c:54:ed:95:c7:c1:48:ee:6e:d0:bc:
f1:ce:4d:16:c1:33:fd:0e:3f:33:6b:70:53:9f:8f:
67:67:74:e1:9d:e9:ac:52:51:60:a1:0b:a9:c1:70:
d9:ea:0e:90:05:f0:74:bf:7f:1f:99:d1:db:18:cd:
5a:c0:04:4e:d4:f7:67:3b:dd:51:1a:60:fd:50:74:
15:fc:44:fa:7d:a1:0a:d7:ab:c0:f6:14:79:d5:c7:
2e:17:95:70:c1:69:40:a6:1a:79:88:5e:be:51:41:
c5:09:6d:60:54:fc:90:fb:a0:9e:6b:85:f0:e7:96:
bc:84:87:52:71:96:a9:84:66:41:51:64:54:ef:34:
31:12:a0:d5:dc:d2:4e:d4:8c:a3:50:25:e5:44:a3:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:9E:74:94:AA:BF:D0:BA:B1:83:E0:21:E4:C1:0E:AD:05:26:11
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/fMSedJSqv9C6sYPgIeTBDq0FJhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ec:ce:7e:2f:cf:31:e5:2a:bd:72:69:e5:2c:11:3a:c0:ad:
83:6a:51:0f:7e:94:a4:ab:e1:56:3b:59:28:a9:15:2a:c4:48:
ce:eb:6b:64:39:36:43:3d:ec:c6:15:4b:6d:dd:e3:d8:07:7a:
e1:ce:b2:68:cd:3d:ff:9b:2b:40:56:5f:12:02:4a:6f:8d:22:
21:e0:4b:d8:66:a9:f3:8f:f5:54:26:e2:5b:21:f4:87:a8:53:
f6:c2:fd:06:fc:da:62:30:ee:9e:04:15:ef:dc:84:b4:46:62:
37:93:ad:e8:c3:65:09:44:f7:44:51:95:31:2d:9f:14:4b:d2:
54:5d:00:a6:86:6d:9b:ca:5e:92:38:97:a6:bc:25:19:f2:67:
a1:2a:40:7b:ba:eb:73:c5:a2:b2:1d:4b:f7:b8:01:a7:dc:38:
ef:83:98:5b:3b:5f:2f:5f:52:c2:f5:85:be:97:f7:72:08:77:
ed:c9:fb:7a:83:8a:ae:03:00:68:57:73:e4:2e:6a:d9:00:c0:
de:c1:91:41:b7:f2:7e:9c:8c:61:92:cb:47:91:84:af:0f:06:
fb:e1:ee:96:2a:ea:aa:be:c8:5c:85:29:a9:7b:a8:81:fb:95:
ab:cf:4c:aa:80:f5:d3:bb:08:d6:be:6c:55:f9:9c:f7:73:f8:
b6:b1:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:43:20 2026 by rpki-client