Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FggROl9m7Xv4uzs_g9Ktb3D_gZw.roa
File: FggROl9m7Xv4uzs_g9Ktb3D_gZw.roa (raw, json)
Hash identifier: S+pIChNKyCN5LlX0flijxNEsU7LPJ2J/nYvXGJcOaGg=
Subject key identifier: 16:08:11:3A:5F:66:ED:7B:F8:BB:3B:3F:83:D2:AD:6F:70:FF:81:9C
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019DDFD19C33A83950381EEFC0910EA4B55F
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FggROl9m7Xv4uzs_g9Ktb3D_gZw.roa
Signing time: Thu 30 Apr 2026 19:15:49 +0000
ROA not before: Thu 30 Apr 2026 19:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 222.167.236.0/24 maxlen: 24
222.167.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:d1:9c:33:a8:39:50:38:1e:ef:c0:91:0e:a4:b5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 30 19:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1608113a5f66ed7bf8bb3b3f83d2ad6f70ff819c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:76:74:d6:7f:0f:20:a8:91:3e:7a:0e:a4:
86:dc:be:fa:90:8e:3d:93:ef:a9:05:92:f1:fe:54:
6c:7c:14:49:03:7f:36:1f:84:c1:84:e6:6a:6a:8d:
86:05:d5:92:35:0d:7b:42:42:a4:e8:34:dd:d8:82:
e7:85:61:35:d9:bd:e6:96:fb:00:ca:07:04:09:95:
c9:36:77:4c:35:ac:29:1e:e8:d6:8f:3d:8e:0f:71:
cd:7f:a5:51:a6:a2:c7:88:67:f4:a1:99:e8:21:69:
bc:80:40:09:2b:a3:b7:13:20:fc:81:65:82:9d:d3:
e9:b2:73:78:81:9a:e6:e9:91:ff:8d:54:ac:01:8f:
68:63:11:49:2d:48:da:64:56:36:0b:6c:30:ea:c9:
97:53:d1:05:50:ab:59:3e:a6:af:21:f0:0a:d5:7f:
6c:13:b7:5d:1d:73:c0:a0:95:7b:28:39:e4:06:65:
f5:dd:9e:0c:19:cf:49:9a:88:c8:97:3c:90:35:e7:
e9:47:c1:d1:c2:51:94:1d:cb:07:22:77:97:df:4f:
3e:2c:78:6e:76:f5:fd:ef:a0:b1:b6:1d:a8:cb:4e:
32:76:8c:57:16:1e:4f:c5:4c:86:ad:99:75:9d:a3:
8d:e6:3d:61:5a:17:fb:4f:cb:e8:f1:57:bd:1f:f2:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:11:3A:5F:66:ED:7B:F8:BB:3B:3F:83:D2:AD:6F:70:FF:81:9C
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FggROl9m7Xv4uzs_g9Ktb3D_gZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.236.0/24
222.167.253.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4f:8e:92:f8:1d:fb:1d:da:61:51:6e:70:29:79:92:9e:c1:
df:ef:c7:42:ed:65:d3:36:66:ad:1b:f1:16:3c:db:cb:1e:10:
de:8d:ac:d1:9d:dc:57:86:2b:96:3b:a5:c3:04:f4:0e:03:42:
eb:24:43:0c:f3:de:cb:79:91:ff:03:7c:37:56:e2:c3:52:9a:
78:1e:8c:eb:34:8d:4a:0e:64:1d:b1:5d:41:aa:2c:54:80:0d:
a3:8a:97:10:64:52:e3:ba:c7:79:85:1a:22:9a:ad:a0:68:54:
a4:bc:5d:c8:ca:39:75:17:16:2f:e3:4a:bb:2f:ba:e7:5f:dc:
7d:17:59:e5:6a:e6:75:df:2d:70:9f:47:ab:58:a7:85:48:81:
61:e1:13:c8:b4:ee:2c:76:ba:b4:8f:3a:3a:24:4c:d6:0e:45:
38:53:98:37:d4:ba:16:80:66:7f:40:bb:49:34:74:08:52:e2:
89:12:8b:a7:9a:64:f3:d4:2a:e7:15:9d:8c:52:31:69:4b:2a:
d1:d1:fd:75:c7:c6:18:50:56:a2:90:96:1c:85:d7:0d:c8:dc:
30:f0:83:39:05:21:46:63:eb:6b:16:97:40:79:63:c1:3b:1f:
bb:03:ff:c1:8c:0c:d8:f3:45:8b:9e:2c:24:f6:a5:46:dc:81:
ba:d4:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:44 2026 by rpki-client