Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/v_8oHkJrMTUTEJw4tXjOKqHM9IU.roa
File: v_8oHkJrMTUTEJw4tXjOKqHM9IU.roa (raw, json)
Hash identifier: aUHL1kaI3QLAnPjxaA6YFCkAEzIof0X0DkpPUS5Vu/k=
Subject key identifier: BF:FF:28:1E:42:6B:31:35:13:10:9C:38:B5:78:CE:2A:A1:CC:F4:85
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019CA4BE6489A7FF1896DB99C3C81C620396
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/v_8oHkJrMTUTEJw4tXjOKqHM9IU.roa
Signing time: Sat 28 Feb 2026 14:54:26 +0000
ROA not before: Sat 28 Feb 2026 14:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 116.204.164.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a4:be:64:89:a7:ff:18:96:db:99:c3:c8:1c:62:03:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 28 14:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfff281e426b313513109c38b578ce2aa1ccf485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:fb:6f:c7:9c:bd:a2:5e:c7:41:88:37:42:
3d:e2:d2:6b:ac:04:35:45:a2:83:f2:74:8f:87:65:
25:d3:33:c5:f7:e3:91:d9:c4:76:30:12:d9:4b:d2:
11:85:50:4d:9e:d7:8f:15:01:0f:c6:93:8a:c8:3f:
41:c5:4c:a4:91:07:a6:2f:0d:66:21:d8:43:93:5a:
8b:b1:a7:20:57:2c:ca:e6:dd:57:84:b3:b1:b6:5f:
a4:4b:43:37:cf:23:c8:71:51:5b:2d:e0:29:e6:5f:
23:97:26:a7:e1:5c:29:f1:7d:d7:4a:6b:9b:49:65:
17:8c:ce:14:de:72:1b:73:4d:50:7f:d1:bd:ce:69:
89:bc:90:80:2f:0c:e8:50:aa:56:08:b2:6d:21:7c:
51:12:c4:b9:14:c9:4e:21:97:ef:ca:e3:14:57:09:
a2:a7:69:31:4d:56:06:87:f9:88:46:b2:aa:be:02:
f5:42:c7:7d:87:4a:a8:2a:d3:b2:fc:ab:03:b5:22:
41:23:7a:ea:ee:18:70:ea:14:75:5f:8c:82:0a:99:
df:19:2d:6f:e4:14:c9:ff:0e:4d:2e:b7:96:4a:98:
9b:52:ab:8b:1d:e9:9e:f3:84:85:c7:fc:ef:e6:5c:
8f:51:a3:28:78:dc:d7:ee:6f:ba:fc:10:55:8e:ba:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:28:1E:42:6B:31:35:13:10:9C:38:B5:78:CE:2A:A1:CC:F4:85
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/v_8oHkJrMTUTEJw4tXjOKqHM9IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.204.164.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7a:92:d8:ab:04:c5:ab:ed:3d:83:e7:cf:c9:f4:e3:7e:79:
70:32:86:f6:e0:24:15:8a:d4:18:40:33:ca:98:f4:8e:c6:df:
d5:24:48:cd:eb:3f:63:e7:b7:5a:63:74:ed:47:c5:ee:25:4a:
bd:c9:3c:1e:98:f6:99:74:f0:56:4f:ca:15:42:10:01:6f:7e:
e8:6c:13:05:90:f0:67:9d:c1:b0:4c:45:29:04:0c:60:16:c0:
a8:d7:67:4b:32:5f:2e:a0:9f:7a:ef:ff:e6:f4:25:ef:d6:e5:
7d:af:dc:66:50:bb:21:6e:95:83:03:d6:5d:c2:72:65:5d:ee:
5b:88:8e:f2:c9:02:9c:48:9e:1e:4a:b1:7a:ff:90:9a:55:c8:
2d:70:48:6e:aa:2f:38:8a:1a:a4:35:a7:f2:df:eb:26:36:36:
e6:f9:88:85:d7:3c:7f:29:65:8c:5a:b3:51:71:fa:11:fd:b9:
58:2d:1d:37:82:cd:a5:06:cd:90:1c:43:6f:76:9a:dd:2e:1a:
f5:5c:fb:2e:57:9d:a9:74:85:1b:52:2a:a1:7e:17:89:90:b7:
ca:04:b1:69:c1:1b:0e:ee:b2:fa:23:47:0c:b4:7d:aa:81:83:
56:7a:38:3f:b4:5f:ea:ae:51:dd:73:43:e5:9a:e4:7d:b3:03:
4a:de:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:31 2026 by rpki-client