Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/CRHe3h1Kyh2V0i1-Qvn963xg5Yo.roa
File: CRHe3h1Kyh2V0i1-Qvn963xg5Yo.roa (raw, json)
Hash identifier: INOs1vIjCSZZ+eLmEYRB0kpzd50ACo3jg4Y0BZLIVKM=
Subject key identifier: 09:11:DE:DE:1D:4A:CA:1D:95:D2:2D:7E:42:F9:FD:EB:7C:60:E5:8A
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A1C1074F21CE7F396B6DB609076C5A5378
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/CRHe3h1Kyh2V0i1-Qvn963xg5Yo.roa
Signing time: Mon 09 Nov 2026 15:57:23 +0000
ROA not before: Mon 09 Nov 2026 15:57:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 222.167.233.0/24 maxlen: 24
222.167.243.0/24 maxlen: 24
222.167.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:07:4f:21:ce:7f:39:6b:6d:b6:09:07:6c:5a:53:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Nov 9 15:57:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0911dede1d4aca1d95d22d7e42f9fdeb7c60e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:bf:ef:da:1d:c9:dc:be:10:37:0e:97:00:
8c:8c:14:19:35:71:cc:d6:03:86:f1:39:de:36:d8:
c8:4f:b0:58:a9:a7:f3:80:62:03:62:f7:b6:75:c4:
45:1a:ea:9c:7a:cb:ec:83:5a:9d:e6:eb:16:7f:8d:
55:ea:6e:91:60:27:a7:32:82:91:64:9d:9a:85:9f:
3c:fc:50:31:85:1d:9a:91:88:2f:ff:a7:9e:bf:8b:
99:10:8e:49:fc:a7:f9:0f:41:37:5b:1c:9f:40:ed:
a0:13:6c:7c:65:02:8a:7f:3f:23:34:b1:0f:6b:3a:
e3:e8:b8:45:0a:82:f6:f3:f6:40:82:d2:8b:30:12:
7f:fa:8b:aa:91:8c:64:d7:19:3a:6e:25:a8:1f:05:
13:88:04:89:24:ec:2c:fd:14:27:a5:3c:3f:81:e6:
42:21:29:4e:e3:13:0c:66:92:a6:ae:1b:33:f0:81:
f0:f4:7f:4d:1f:ca:51:c5:bb:77:9c:d5:56:9f:a0:
f2:13:37:9d:17:99:56:31:69:cf:e1:26:e7:05:3b:
ee:bc:8e:27:e1:66:32:b0:6a:18:55:b7:3c:ef:90:
ff:6f:8c:4b:b4:26:9d:e9:93:2d:87:ea:b7:e4:a4:
74:5c:d1:7c:93:00:dc:f8:b5:cc:da:c4:c4:3a:a9:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:DE:DE:1D:4A:CA:1D:95:D2:2D:7E:42:F9:FD:EB:7C:60:E5:8A
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/CRHe3h1Kyh2V0i1-Qvn963xg5Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.233.0/24
222.167.243.0/24
222.167.247.0/24
Signature Algorithm: sha256WithRSAEncryption
85:dc:2a:b2:17:ef:c2:4c:a8:7c:58:88:eb:d7:16:f2:8e:d0:
c8:8d:64:d9:af:30:32:d4:1f:16:33:90:75:20:d4:45:24:ab:
a0:e7:41:2e:44:94:ca:d3:a8:e0:ba:ee:4b:0b:ef:1e:25:e0:
02:c4:cb:e1:42:38:c8:d0:7a:46:a9:ba:84:01:a7:4b:44:10:
b3:d2:87:61:ee:fe:35:04:7e:13:31:61:2d:b9:b4:48:c0:5f:
01:7d:8c:38:31:a7:53:d4:4d:a0:a5:a1:90:91:44:2c:28:0a:
62:2e:97:7f:cf:b2:89:5b:41:04:52:18:bf:36:d7:5b:3d:5e:
b0:96:a9:66:d9:be:b7:c4:2d:f4:da:47:8e:23:36:96:4f:4d:
c1:aa:ea:2d:87:f0:d0:6b:b4:1e:d2:45:f3:56:8f:c3:f9:f5:
d6:c3:db:82:54:e3:d8:86:d2:ea:c9:66:48:90:1d:27:13:1c:
27:47:d9:af:db:63:08:4c:ac:42:ef:26:fd:a1:e9:2f:51:b1:
7e:4b:48:cc:ce:6a:ec:75:13:ee:36:8f:4b:86:7a:d4:b6:fb:
ca:63:f2:9a:1c:ff:72:d9:10:9f:e1:f4:6b:77:e1:16:45:e4:
11:3c:b9:45:d7:7c:44:79:28:04:a6:a1:84:74:ed:c4:fe:04:
ea:d9:1d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:49 2026 by rpki-client