Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6nsjDhn-NUS0eS2znotmTLFb8K4.roa
File: 6nsjDhn-NUS0eS2znotmTLFb8K4.roa (raw, json)
Hash identifier: brgSOLqNkmWevGXCCydMHGGRZ6gS0cHDgCsdzaFEdLo=
Subject key identifier: EA:7B:23:0E:19:FE:35:44:B4:79:2D:B3:9E:8B:66:4C:B1:5B:F0:AE
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F3F6704FA00B56F3C9D004AA5ADC66BE7
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6nsjDhn-NUS0eS2znotmTLFb8K4.roa
Signing time: Wed 08 Jul 2026 01:45:43 +0000
ROA not before: Wed 08 Jul 2026 01:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398993
IP address blocks: 222.167.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3f:67:04:fa:00:b5:6f:3c:9d:00:4a:a5:ad:c6:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 8 01:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea7b230e19fe3544b4792db39e8b664cb15bf0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:31:c8:25:db:2d:7a:8a:63:b0:f0:cb:6e:
af:fe:f7:a1:fb:92:1d:69:58:f4:51:c3:63:32:75:
e2:35:9d:3c:ba:08:dc:17:82:40:3f:29:cb:d1:39:
61:0b:21:72:47:72:d6:f0:85:a4:81:c3:79:ff:3a:
04:69:b4:9d:76:0d:19:38:c0:a5:7c:bd:ab:b5:05:
26:20:01:03:48:11:99:02:11:79:6c:fc:65:fc:83:
0f:fd:08:05:53:d4:2c:eb:af:09:87:26:82:81:12:
a6:57:43:5c:0f:c7:a1:ef:23:d3:26:89:32:94:a4:
05:a1:57:c5:13:17:31:ff:5d:b2:b4:65:bf:95:20:
a5:49:c7:e5:6f:17:7a:8f:4c:3c:13:e9:39:46:36:
da:16:81:53:ca:2e:f1:a2:d1:5f:75:ba:91:10:77:
4c:73:94:79:ea:f6:b3:b4:f3:43:b1:fa:be:f8:f9:
56:f6:fa:96:5c:49:8c:cf:33:38:a5:a5:cc:b5:30:
75:18:3e:82:5f:bc:96:bb:cb:11:e0:3c:61:d0:eb:
40:d3:ee:4e:a4:ed:7e:68:0a:e6:c4:2a:23:f4:4d:
59:69:c9:78:5e:2c:6c:2b:80:06:07:02:73:21:6a:
04:36:44:fb:3c:53:73:40:28:d8:61:49:5d:76:f5:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7B:23:0E:19:FE:35:44:B4:79:2D:B3:9E:8B:66:4C:B1:5B:F0:AE
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6nsjDhn-NUS0eS2znotmTLFb8K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c3:74:57:de:5d:d9:dc:c6:85:ce:a9:6b:36:2b:0a:4b:7a:
b6:2c:fd:37:9a:2f:05:46:39:03:fd:59:39:ee:95:de:50:af:
a2:1f:b1:b9:35:3b:cb:e1:6f:01:ba:56:24:c0:dc:8e:4a:8c:
e4:48:a1:2b:5f:3c:f5:fd:bd:ea:58:f8:a5:59:0a:cd:52:3a:
bd:6a:4f:86:dc:21:a0:01:88:29:db:b3:6d:b3:b6:db:90:68:
af:a8:00:3b:da:41:92:d7:85:ac:a4:61:0e:f4:2d:97:e9:85:
37:4c:88:4d:27:5f:f9:32:a7:32:a1:e0:96:46:e0:dd:47:a2:
55:26:8f:7f:d0:29:ac:01:b0:aa:2f:d2:15:20:b2:bf:60:43:
04:e2:05:c5:25:60:65:10:45:02:a2:fa:5b:9c:a9:48:9f:9a:
8a:4d:01:27:57:3c:c9:58:d1:4f:bd:48:89:e4:96:f2:ec:1e:
77:4f:2a:57:8d:ea:c5:83:ba:53:67:86:fa:33:e2:fd:b8:21:
0c:f5:b4:6b:16:a8:e2:6e:1d:7c:ea:03:78:04:60:15:a6:00:
02:46:a5:5e:ee:f4:46:8d:a4:d4:0d:c7:30:90:bf:0e:2d:22:
0b:cc:b2:3d:cd:9a:93:ef:4a:02:22:e8:ff:16:28:e3:8c:1b:
ff:f9:d3:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8/ZwT6ALVvPJ0ASqWtxmvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNzA4MDE0NTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTdiMjMwZTE5ZmUzNTQ0YjQ3OTJkYjM5ZThiNjY0Y2IxNWJmMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PAxyCXbLXqKY7Dwy26v/veh+5Id
aVj0UcNjMnXiNZ08ugjcF4JAPynL0TlhCyFyR3LW8IWkgcN5/zoEabSddg0ZOMCl
fL2rtQUmIAEDSBGZAhF5bPxl/IMP/QgFU9Qs668JhyaCgRKmV0NcD8eh7yPTJoky
lKQFoVfFExcx/12ytGW/lSClScflbxd6j0w8E+k5RjbaFoFTyi7xotFfdbqREHdM
c5R56vaztPNDsfq++PlW9vqWXEmMzzM4paXMtTB1GD6CX7yWu8sR4Dxh0OtA0+5O
pO1+aArmxCoj9E1Zacl4XixsK4AGBwJzIWoENkT7PFNzQCjYYUlddvWgJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOp7Iw4Z/jVEtHkts56LZkyxW/CuMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvNm5zakRobi1OVVMwZVMyem5vdG1UTEZiOEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfaMA0G
CSqGSIb3DQEBCwUAA4IBAQB6w3RX3l3Z3MaFzqlrNisKS3q2LP03mi8FRjkD/Vk5
7pXeUK+iH7G5NTvL4W8BulYkwNyOSozkSKErXzz1/b3qWPilWQrNUjq9ak+G3CGg
AYgp27Nts7bbkGivqAA72kGS14WspGEO9C2X6YU3TIhNJ1/5MqcyoeCWRuDdR6JV
Jo9/0CmsAbCqL9IVILK/YEME4gXFJWBlEEUCovpbnKlIn5qKTQEnVzzJWNFPvUiJ
5Jby7B53TypXjerFg7pTZ4b6M+L9uCEM9bRrFqjibh186gN4BGAVpgACRqVe7vRG
jaTUDccwkL8OLSILzLI9zZqT70oCIuj/FijjjBv/+dNr
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:33 2026 by rpki-client