Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E4Elxf4QQwOWkbyIL6p9bBoPILI.roa
File: E4Elxf4QQwOWkbyIL6p9bBoPILI.roa (raw, json)
Hash identifier: TaZTRB7uaZ6Z9BS2/ZpdluyELNUNmRh8G8nJD6Ob6hA=
Subject key identifier: 13:81:25:C5:FE:10:43:03:96:91:BC:88:2F:AA:7D:6C:1A:0F:20:B2
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F76350792D6ED1113813FDF273F3004B5
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E4Elxf4QQwOWkbyIL6p9bBoPILI.roa
Signing time: Sat 18 Jul 2026 17:10:14 +0000
ROA not before: Sat 18 Jul 2026 17:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.221.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:35:07:92:d6:ed:11:13:81:3f:df:27:3f:30:04:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 18 17:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138125c5fe1043039691bc882faa7d6c1a0f20b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:1c:08:15:6e:f4:09:62:8b:87:21:f7:f8:
91:06:4a:06:fd:59:40:8d:54:b8:a5:fa:b7:d7:66:
9c:5d:81:4a:21:73:b6:c6:19:80:ce:38:27:85:3e:
25:3e:9e:34:18:71:4a:ff:39:c4:c4:30:1f:55:43:
6e:16:a4:e4:e1:4f:4e:5f:85:e1:40:13:48:fc:00:
d0:c3:8c:c6:52:d8:bc:c0:f5:21:53:82:d6:41:47:
63:56:bf:7b:d9:89:02:35:ab:57:77:f7:cb:f7:c7:
f7:6b:06:a7:62:99:53:06:40:10:05:a5:44:49:3d:
02:a5:31:0e:4c:21:e4:d4:f0:3d:65:9c:9a:ac:b8:
ac:7c:f4:1a:2d:e7:39:be:c4:6c:bb:4e:5d:2e:f6:
4d:3d:8b:3c:63:22:87:d7:99:80:bd:49:66:a2:2c:
56:c4:15:71:15:68:7b:98:88:60:54:30:2c:1a:84:
05:ef:4d:90:b7:19:48:c1:c9:54:8b:03:3f:c4:69:
f8:2c:56:08:3c:9c:05:df:92:f2:15:db:e6:c9:db:
d6:b8:84:45:3c:aa:db:8f:e5:5d:13:c4:40:28:3c:
25:f8:d9:7b:5a:03:7b:9a:98:c5:59:2d:bd:b0:94:
fe:85:eb:2c:29:8e:88:6f:f2:ac:b5:de:1a:68:b1:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:81:25:C5:FE:10:43:03:96:91:BC:88:2F:AA:7D:6C:1A:0F:20:B2
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E4Elxf4QQwOWkbyIL6p9bBoPILI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.210.0/24
222.167.221.0/24
222.167.224.0/24
222.167.232.0/24
222.167.234.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e6:8d:eb:b7:ba:ed:f2:f2:86:41:e6:48:87:39:7f:c5:d2:
7f:22:a4:56:24:e2:04:98:01:70:50:02:f3:5f:25:40:77:6e:
ad:53:e0:c4:8d:5e:6a:fd:4c:89:fe:fd:bf:39:54:01:1b:3d:
e6:be:41:fa:10:a8:8d:99:17:2c:ec:18:a0:88:84:99:90:a9:
7d:73:7d:01:0c:7e:54:d5:2e:35:93:82:7d:ca:01:bd:9e:f4:
82:a3:cd:23:3d:e0:06:dd:53:73:f2:00:5b:ec:2e:dc:31:28:
30:d9:9e:f0:2a:b2:31:72:be:fb:12:dd:70:75:c6:d3:a7:60:
cd:04:00:84:61:28:94:13:18:ba:7c:d4:5e:12:7d:0c:98:9f:
1e:37:49:3a:af:a6:6e:c6:02:0a:f4:23:b4:6c:fa:bd:76:3d:
01:9c:d2:61:04:2c:3a:af:3b:3c:ce:ea:d7:5a:e9:06:7a:d9:
cc:79:54:25:85:73:b2:1c:68:69:ff:ad:ca:c5:df:d8:0d:6a:
75:5b:7d:ad:4c:fa:61:52:2e:93:6e:22:e6:2f:5d:8b:5d:56:
4a:68:e2:22:c4:db:f1:d9:97:19:33:8e:06:65:bb:25:b9:ad:
af:51:ee:7e:68:e7:88:74:d9:30:1d:fd:38:c8:56:59:e6:22:
bd:cd:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:03 2026 by rpki-client