Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E1xN2EQHnjV7l4Ud58ayk067t9Y.roa
File: E1xN2EQHnjV7l4Ud58ayk067t9Y.roa (raw, json)
Hash identifier: AvCocU8zRlKp8U4hPAeITkW9sAUVW8+tmg/G+VJUsM4=
Subject key identifier: 13:5C:4D:D8:44:07:9E:35:7B:97:85:1D:E7:C6:B2:93:4E:BB:B7:D6
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F60E982D80DD135F4FD134A3254433FC4
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E1xN2EQHnjV7l4Ud58ayk067t9Y.roa
Signing time: Tue 14 Jul 2026 13:55:43 +0000
ROA not before: Tue 14 Jul 2026 13:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 222.167.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:e9:82:d8:0d:d1:35:f4:fd:13:4a:32:54:43:3f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 14 13:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=135c4dd844079e357b97851de7c6b2934ebbb7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:59:42:c7:2e:61:7d:38:2b:c0:22:73:04:
3a:f2:eb:0f:18:90:0d:86:68:59:53:bf:51:22:5a:
0d:41:ce:0d:a0:f1:c8:7d:fe:c0:64:8b:e4:71:2c:
03:5d:37:97:a9:2f:03:fd:c1:21:32:10:9b:36:92:
08:db:5a:dd:66:dd:24:57:60:c5:9e:1c:8f:ce:2b:
97:34:3f:c8:84:6d:e4:88:32:ab:54:78:1d:de:46:
09:58:62:5a:b0:c9:b6:0c:70:0d:f6:44:f6:e9:bd:
cd:c3:55:79:8f:60:f5:26:f4:f4:8b:45:cc:71:98:
bf:76:c4:7b:2e:5e:0d:53:6b:bf:bd:22:86:0c:f6:
b1:0f:fb:4d:3f:c3:d8:82:25:17:17:42:c4:73:c3:
21:8c:94:9a:8d:4e:8f:98:6a:f2:38:6b:2d:6c:af:
48:4f:e1:55:c9:2a:3d:fe:fa:9f:d2:c0:13:89:2f:
f9:a4:92:83:d1:4b:ab:0a:8b:2e:2d:b2:64:af:4e:
77:94:b6:2f:f3:89:cc:09:28:85:a1:57:fb:21:8f:
a8:4f:88:c3:24:82:be:e3:12:76:9a:5e:0f:1a:53:
9d:30:80:c6:87:c2:cf:32:75:e3:ea:48:70:b6:01:
3f:10:85:be:f0:91:a7:0e:17:9e:28:43:ee:8c:e5:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:4D:D8:44:07:9E:35:7B:97:85:1D:E7:C6:B2:93:4E:BB:B7:D6
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E1xN2EQHnjV7l4Ud58ayk067t9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bb:75:a2:2a:d2:f4:20:19:cc:b9:e5:d3:f4:f1:3a:21:a4:
ca:87:74:07:39:4f:06:58:79:89:2b:c7:0a:ba:ff:ed:37:b4:
e6:e6:ff:e7:53:e5:82:30:d5:21:8f:24:6e:98:8f:85:c9:82:
44:75:21:86:eb:d3:1f:b1:03:f7:ae:dd:df:91:5b:7e:77:fa:
ff:f4:d0:40:fd:78:7e:f7:c9:58:48:0c:44:60:31:df:2e:b2:
6b:7c:6d:70:b5:1d:91:c0:94:dc:f8:33:94:00:4b:6e:49:2f:
e5:f9:24:57:74:00:2d:83:00:e9:ad:5b:18:1c:57:93:e5:61:
98:9b:eb:99:ad:d9:df:53:37:77:42:92:ec:31:3b:7c:2a:2b:
a3:c9:28:cd:66:1b:cf:93:42:2c:81:42:21:e9:87:41:7c:27:
56:0f:7c:48:a4:04:e8:a5:09:25:56:ca:5e:4f:de:3f:92:2d:
26:85:63:5e:43:47:83:bd:36:67:f5:ca:d2:86:18:2e:98:b0:
d2:22:a1:cd:a9:99:38:85:c9:c9:b4:14:9e:f1:96:10:4d:9c:
d9:cd:1f:86:e7:c4:a2:b0:bd:27:43:07:ea:ac:e1:4c:de:0e:
66:61:da:72:4e:c0:9b:32:72:f5:95:a4:f7:dc:37:47:9e:a4:
0b:09:ac:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9g6YLYDdE19P0TSjJUQz/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNzE0MTM1NTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzVjNGRkODQ0MDc5ZTM1N2I5Nzg1MWRlN2M2YjI5MzRlYmJiN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15xZQscuYX04K8AicwQ68usPGJAN
hmhZU79RIloNQc4NoPHIff7AZIvkcSwDXTeXqS8D/cEhMhCbNpII21rdZt0kV2DF
nhyPziuXND/IhG3kiDKrVHgd3kYJWGJasMm2DHAN9kT26b3Nw1V5j2D1JvT0i0XM
cZi/dsR7Ll4NU2u/vSKGDPaxD/tNP8PYgiUXF0LEc8MhjJSajU6PmGryOGstbK9I
T+FVySo9/vqf0sATiS/5pJKD0UurCosuLbJkr053lLYv84nMCSiFoVf7IY+oT4jD
JIK+4xJ2ml4PGlOdMIDGh8LPMnXj6khwtgE/EIW+8JGnDheeKEPujOXlZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNcTdhEB541e5eFHefGspNOu7fWMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvRTF4TjJFUUhualY3bDRVZDU4YXlrMDY3dDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfbMA0G
CSqGSIb3DQEBCwUAA4IBAQBau3WiKtL0IBnMueXT9PE6IaTKh3QHOU8GWHmJK8cK
uv/tN7Tm5v/nU+WCMNUhjyRumI+FyYJEdSGG69MfsQP3rt3fkVt+d/r/9NBA/Xh+
98lYSAxEYDHfLrJrfG1wtR2RwJTc+DOUAEtuSS/l+SRXdAAtgwDprVsYHFeT5WGY
m+uZrdnfUzd3QpLsMTt8KiujySjNZhvPk0IsgUIh6YdBfCdWD3xIpATopQklVspe
T94/ki0mhWNeQ0eDvTZn9crShhgumLDSIqHNqZk4hcnJtBSe8ZYQTZzZzR+G58Si
sL0nQwfqrOFM3g5mYdpyTsCbMnL1laT33DdHnqQLCax9
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:53 2026 by rpki-client