Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/wLR8jW1mcZUvoZV3c0mZMReuKfk.roa
File: wLR8jW1mcZUvoZV3c0mZMReuKfk.roa (raw, json)
Hash identifier: Wo6japZLDr5ZqcodvcMsjsWlXak2QkIZTZ5ptwie8U8=
Subject key identifier: C0:B4:7C:8D:6D:66:71:95:2F:A1:95:77:73:49:99:31:17:AE:29:F9
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A086E69605A209783FA800388052D607DB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/wLR8jW1mcZUvoZV3c0mZMReuKfk.roa
Signing time: Wed 09 Sep 2026 16:00:53 +0000
ROA not before: Wed 09 Sep 2026 16:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 222.167.192.0/24 maxlen: 24
222.167.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e6:96:05:a2:09:78:3f:a8:00:38:80:52:d6:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 9 16:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0b47c8d6d6671952fa195777349993117ae29f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:19:c6:8b:80:cd:00:7a:15:dd:0d:18:12:6b:
01:0e:4c:47:ca:53:fe:3a:32:98:0a:da:37:9d:dc:
52:b4:04:79:95:94:4a:79:a1:ab:9d:19:30:8d:89:
41:a3:d4:ea:8e:7f:82:4e:5c:d0:24:87:14:4f:9c:
54:1d:a2:29:b5:73:49:17:40:b0:3f:87:b9:a7:ae:
5b:cb:e7:b5:af:37:ce:dc:29:d1:d2:7f:c1:de:e2:
b0:57:d5:11:f0:65:7b:da:4f:05:ff:4e:59:d2:a5:
54:80:4b:1d:e0:d1:6f:8e:78:db:f8:bf:03:f2:aa:
80:00:37:31:8c:ab:f7:8a:40:48:d2:11:6f:f4:eb:
da:b5:14:9a:15:52:c5:76:a9:1f:b6:21:db:fe:46:
ed:72:a0:32:de:51:51:92:14:b1:d9:48:f6:dc:5f:
76:bf:58:8c:c2:2b:3a:39:4b:ff:b5:8f:13:f2:7e:
9d:22:a7:a9:fd:ee:5f:a8:57:a7:0c:d7:34:57:61:
29:de:0b:eb:c8:4d:d5:6f:62:87:1c:5e:1d:cc:3c:
be:4a:4e:c5:11:56:b6:45:7e:6b:bf:ed:d0:34:2a:
0a:66:4d:1b:be:2e:00:ba:26:50:6e:39:cd:e2:97:
52:a7:ae:9a:50:d9:18:69:6f:67:6c:aa:b9:38:da:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:7C:8D:6D:66:71:95:2F:A1:95:77:73:49:99:31:17:AE:29:F9
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/wLR8jW1mcZUvoZV3c0mZMReuKfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.192.0/24
222.167.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:60:f0:70:fd:98:84:48:8f:cb:51:95:13:84:fb:20:0f:85:
88:90:aa:a5:e4:37:0e:93:42:65:aa:b9:83:67:b7:4b:04:59:
9e:cb:13:0f:6e:16:f7:76:51:ad:fe:2d:0b:07:43:9e:46:ec:
0a:b4:b3:ae:1e:41:88:bc:33:0f:b7:c3:00:96:c9:ed:75:ca:
e4:88:9d:40:25:08:2f:ce:d6:20:5b:1a:e3:85:c2:23:1d:17:
49:6c:e8:7f:34:3d:76:b0:51:a7:37:fc:74:2c:62:ed:f8:56:
21:00:78:60:cb:07:6d:2d:57:a2:bb:2a:62:b0:3d:60:27:7b:
da:4e:45:1a:69:fa:92:c7:d5:fb:4a:67:9a:61:52:ce:09:79:
38:52:22:7e:ef:20:f6:76:27:81:cd:43:48:68:94:f0:7d:b4:
e3:51:aa:e1:b5:f7:92:fb:3e:a6:99:77:f9:0e:d7:a0:2c:83:
8d:ab:31:da:da:c7:0c:c8:a8:19:2e:21:24:2c:37:a2:68:91:
e9:ab:af:0e:c0:69:e1:0e:9b:ad:2d:28:07:05:8a:96:90:76:
90:e6:90:b9:db:90:9d:49:5a:b0:60:99:40:ca:db:fe:8e:53:
10:6b:49:24:12:c2:76:3e:d3:2d:48:f6:41:a7:32:8f:b1:7d:
f2:e1:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:28:01 2026 by rpki-client