Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/o4krrnRQBbXMOjhml03c39s94hA.roa
File: o4krrnRQBbXMOjhml03c39s94hA.roa (raw, json)
Hash identifier: KRFKAP2VYm2wyCRAMLcDs3Vcay+vxd3l2TkniMLDlyk=
Subject key identifier: A3:89:2B:AE:74:50:05:B5:CC:3A:38:66:97:4D:DC:DF:DB:3D:E2:10
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E985CF7F0F5F583075B52134816CE2443
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/o4krrnRQBbXMOjhml03c39s94hA.roa
Signing time: Fri 05 Jun 2026 15:18:10 +0000
ROA not before: Fri 05 Jun 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 150.107.49.0/24 maxlen: 24
222.167.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:5c:f7:f0:f5:f5:83:07:5b:52:13:48:16:ce:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 5 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3892bae745005b5cc3a3866974ddcdfdb3de210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:54:5e:1d:28:32:7d:5f:35:ba:b7:00:9e:
12:4c:88:92:c7:48:78:2b:82:8b:d0:48:7d:ac:09:
9f:27:1b:42:ef:6a:fc:57:47:ad:3a:61:bd:d7:a6:
0a:9a:8d:d9:36:9d:ed:03:ad:d2:08:d0:4d:18:a2:
c3:f8:bd:17:10:13:8c:8d:63:3a:17:14:98:ff:2c:
da:87:fa:2c:05:eb:f5:a1:fd:e6:26:01:c0:2a:7d:
74:5d:eb:51:0e:6b:70:90:c6:ba:bb:d9:75:01:0f:
ef:f4:3a:ed:5b:91:38:a2:4e:c7:e0:42:bd:16:9a:
ea:12:bb:98:13:a8:39:09:c0:f3:cb:b6:ed:0f:7e:
ac:f5:8d:74:70:59:e2:18:85:c9:1a:db:55:c5:73:
d6:0d:df:0f:a0:19:22:cb:86:69:52:80:98:8e:3d:
45:61:fe:91:1b:64:ac:fc:66:da:dd:94:d7:6f:9c:
dc:38:81:0f:d2:c5:65:f1:40:ff:c4:ac:5f:98:04:
b5:81:2f:ed:6f:4b:49:56:04:6f:23:eb:16:ef:a1:
1b:e5:96:c4:e6:d3:28:bf:17:22:53:4c:3d:7c:9d:
13:a8:6f:bf:de:61:af:c3:ce:63:af:d1:8b:e4:5b:
68:21:ed:11:16:56:05:10:b7:03:4b:78:9e:56:1f:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:2B:AE:74:50:05:B5:CC:3A:38:66:97:4D:DC:DF:DB:3D:E2:10
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/o4krrnRQBbXMOjhml03c39s94hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.49.0/24
222.167.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b0:bb:8b:65:29:17:b4:d9:63:6b:0f:34:ae:e4:e4:86:c5:
12:2a:ca:e2:f5:12:36:d5:36:69:ee:c8:23:17:61:84:f8:a4:
de:29:f0:e5:6e:7e:ee:dd:3d:fd:b3:00:40:74:1b:c6:0b:6a:
93:8d:bc:cb:af:5d:d5:25:a6:c3:87:5d:55:9c:5e:ea:1b:2b:
05:b2:30:dc:f1:0e:97:b5:f3:63:61:e1:27:60:83:5a:9a:da:
b7:52:9f:6f:61:1b:b2:36:e5:c9:5d:b8:3b:7c:6f:6b:b5:a9:
12:b1:d6:60:1f:b6:16:0e:a0:07:b3:02:ba:a5:1b:82:b1:e4:
59:a9:f4:12:89:81:b6:47:39:cd:2d:3f:cc:76:24:4f:88:98:
b1:07:2f:43:cd:e0:05:e8:3f:e1:30:18:c3:e3:3a:ed:93:9a:
28:ec:44:35:41:ac:ef:3b:6d:15:40:5a:59:7d:fb:da:32:96:
3e:22:78:2b:e7:59:ff:10:3f:b3:8c:16:f4:2a:be:b5:a0:af:
89:11:22:59:33:db:12:a2:58:3e:2c:9c:49:7a:ad:62:83:58:
ad:01:19:51:e4:8a:02:b4:bb:83:11:cd:20:48:cf:0c:5b:88:
dd:f8:7f:19:c1:15:2e:c0:27:6b:2e:82:a0:d2:01:cd:01:10:
0e:27:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:11 2026 by rpki-client