Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/847zFWn5eVS9knYe8BRZHVv_s2c.roa
File: 847zFWn5eVS9knYe8BRZHVv_s2c.roa (raw, json)
Hash identifier: BaG3yolbgvhFed4tgUbetMOu3GbXza6kCLC1VVMYbGY=
Subject key identifier: F3:8E:F3:15:69:F9:79:54:BD:92:76:1E:F0:14:59:1D:5B:FF:B3:67
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F60E98351B30094AE1D3CBC00213DBF14
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/847zFWn5eVS9knYe8BRZHVv_s2c.roa
Signing time: Tue 14 Jul 2026 13:55:43 +0000
ROA not before: Tue 14 Jul 2026 13:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 222.167.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:e9:83:51:b3:00:94:ae:1d:3c:bc:00:21:3d:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 14 13:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f38ef31569f97954bd92761ef014591d5bffb367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:76:6d:71:9a:2b:2d:d0:4b:f2:26:1f:17:
91:e2:66:fc:be:33:47:b1:8b:69:4e:47:4b:92:6e:
95:04:ac:4e:d0:e2:e8:a2:26:63:37:eb:40:60:68:
e1:52:5a:6d:c5:3e:4a:93:17:7c:3a:ff:39:ee:75:
d2:2d:69:62:9c:35:7c:3a:b8:9d:99:6f:f6:dc:78:
09:43:7e:05:e6:dc:20:c9:3a:a2:60:c3:21:63:7d:
66:d1:6e:74:b3:96:54:0c:4e:bc:67:00:ab:d5:9f:
46:d1:63:9d:ac:67:2a:11:74:9a:3f:b9:47:70:e1:
81:8a:f7:b9:ab:72:f2:82:6c:a1:3a:ac:c6:3e:2e:
cc:cf:e0:71:46:45:cd:60:6d:31:b3:e9:d8:9d:6e:
ba:fc:92:3a:f6:9b:fc:c0:9c:1e:51:2c:bc:d0:a2:
27:7b:ce:97:71:16:15:68:3c:fb:24:2d:9c:28:e5:
8f:7d:75:bc:f3:6b:03:d9:a0:d5:e7:2e:51:bd:a4:
a7:57:de:a3:f9:b4:b8:1b:0d:aa:f1:94:95:0a:1f:
e6:07:cf:eb:43:bd:da:34:b5:94:56:2a:5a:bf:c8:
e6:c6:24:a4:c9:fa:16:8a:47:b7:d1:8e:85:12:89:
36:fa:6c:f2:fb:5c:f4:80:fa:bb:ba:fe:63:52:ac:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:F3:15:69:F9:79:54:BD:92:76:1E:F0:14:59:1D:5B:FF:B3:67
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/847zFWn5eVS9knYe8BRZHVv_s2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bb:85:be:1d:ce:61:50:0d:ae:15:df:a5:0e:38:6e:9c:02:
59:5f:3d:00:fc:6e:53:f7:e7:5c:93:02:d1:c1:87:19:08:9c:
e7:43:8d:bb:09:35:fc:84:01:8a:ac:2d:56:fe:d4:13:49:15:
97:99:1d:6b:a1:d0:0a:dd:20:27:2a:f7:7c:27:e2:be:4a:2f:
3e:c6:ed:04:1a:f2:74:ba:39:2c:f0:3b:c1:fc:d2:08:ad:69:
7e:1a:26:82:34:ca:fc:21:38:f0:df:73:12:6b:3c:27:92:7e:
32:86:bb:4a:26:d7:03:e3:6e:f6:8b:bb:1b:bc:27:b4:06:e0:
5c:d6:2d:69:8b:b7:42:21:fe:fc:2f:dc:9a:87:d2:d4:6e:72:
ff:ae:01:17:41:04:2b:b2:cd:b1:94:65:3f:95:6f:fe:34:67:
b8:3d:0f:18:a5:ee:4f:de:59:3a:df:3d:94:53:58:fe:ae:b9:
bb:ca:16:f7:07:83:6a:32:d6:e8:ea:3f:77:6f:ff:a4:d6:af:
55:c8:96:ae:21:97:fa:5f:03:3a:a7:a6:ae:7d:5f:21:23:f6:
c9:4b:b1:35:48:69:b4:8d:6c:62:b3:1e:8d:80:64:3d:09:6e:
a7:22:ce:50:96:ea:b9:f1:f9:62:b8:c2:f1:b8:45:2e:df:ce:
06:02:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:04 2026 by rpki-client