Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Gr-gE1NqeEACzS-7Rj3fAujfc4E.roa
File: Gr-gE1NqeEACzS-7Rj3fAujfc4E.roa (raw, json)
Hash identifier: OEi/PUACRnTQK5NG4UsTjABJ6+D9RPwqgWDf1rfLbLQ=
Subject key identifier: 1A:BF:A0:13:53:6A:78:40:02:CD:2F:BB:46:3D:DF:02:E8:DF:73:81
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019DABC16CEB5C05C77506C11E783E17C8D5
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Gr-gE1NqeEACzS-7Rj3fAujfc4E.roa
Signing time: Mon 20 Apr 2026 16:37:53 +0000
ROA not before: Mon 20 Apr 2026 16:37:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273408
IP address blocks: 222.167.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:c1:6c:eb:5c:05:c7:75:06:c1:1e:78:3e:17:c8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 20 16:37:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1abfa013536a784002cd2fbb463ddf02e8df7381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:27:cf:2b:b1:0a:1d:15:c8:ca:06:a5:23:
1b:e0:06:0e:a4:41:49:d3:02:92:4f:04:74:6e:f6:
27:43:d7:c1:49:bf:d5:ac:35:f0:e1:22:64:91:3c:
ac:73:30:b7:53:78:46:7b:c0:61:95:b4:a3:11:37:
9b:fa:c5:fe:81:fa:e9:8d:db:a9:2f:5e:8d:57:2f:
86:5f:3d:c6:8e:2b:06:14:d5:97:74:31:fb:25:52:
a1:87:37:6a:39:5b:51:67:27:a9:63:75:73:2b:b8:
09:30:5c:19:40:1e:b8:99:9a:3f:a0:2b:b7:38:be:
91:fb:5c:01:bc:40:70:c1:d6:20:d3:ea:47:b1:12:
bd:91:34:48:ac:a8:a2:20:be:eb:06:a3:4d:a0:0e:
30:39:60:c6:e7:57:ea:f2:2d:23:42:b9:8e:98:7d:
04:03:29:99:78:e0:c4:35:76:2e:77:06:67:d6:94:
ee:b6:bd:4e:67:81:7a:44:6a:61:04:91:5b:79:7f:
db:50:fa:26:40:37:cc:75:31:d3:5f:6d:cd:cf:4a:
f3:9d:4e:4e:91:ac:79:b9:d1:94:1c:3b:54:07:20:
53:1d:69:4c:41:47:d8:cf:9f:20:10:38:d1:e7:41:
ca:8a:6f:5b:63:fa:2f:aa:3e:1e:8e:6f:b6:88:ad:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:A0:13:53:6A:78:40:02:CD:2F:BB:46:3D:DF:02:E8:DF:73:81
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Gr-gE1NqeEACzS-7Rj3fAujfc4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.232.0/24
Signature Algorithm: sha256WithRSAEncryption
35:84:d8:b8:cf:27:0a:be:2f:ee:9b:25:63:e6:42:d2:a0:00:
73:96:c1:48:a8:c6:4b:5f:1d:08:6c:00:b7:12:0b:d8:36:9b:
d5:e3:74:4b:55:40:38:35:f2:80:0a:c9:fe:a9:35:02:1b:1a:
a1:07:5b:84:3e:f0:6f:4a:3b:b4:9f:a4:5b:cf:9d:4a:1a:c1:
74:fb:8f:9e:85:2d:0f:81:30:0b:54:1d:93:c4:27:94:0b:b4:
88:23:8b:a2:27:5b:94:7f:e1:24:d3:ef:e0:39:fb:fc:f8:da:
ca:98:1c:f1:a8:0c:f2:6c:e1:f7:22:21:d8:34:2d:95:f9:54:
f7:a5:09:d4:84:55:9f:0a:e6:ed:be:c2:ed:13:9a:e3:69:f6:
e2:42:b8:08:44:a7:7e:7b:16:0b:03:6d:89:fc:06:3f:2e:a1:
5e:14:77:4a:5c:25:d2:ef:b6:ac:0f:29:7b:5f:10:24:66:49:
bd:ee:62:05:2f:31:fa:5a:1c:f7:df:19:b3:56:3e:5b:50:89:
cc:2f:50:63:10:da:b2:61:ac:9d:7e:36:0b:c0:fb:9b:af:25:
11:f4:fd:76:d9:2f:ef:99:38:c0:2a:c5:f1:13:4e:ab:bd:6f:
86:28:bc:71:13:4d:2a:a0:75:3c:2f:da:f5:45:19:82:e7:4a:
d2:ad:06:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2rwWzrXAXHdQbBHng+F8jVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNDIwMTYzNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWJmYTAxMzUzNmE3ODQwMDJjZDJmYmI0NjNkZGYwMmU4ZGY3MzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPMnzyuxCh0VyMoGpSMb4AYOpEFJ
0wKSTwR0bvYnQ9fBSb/VrDXw4SJkkTysczC3U3hGe8BhlbSjETeb+sX+gfrpjdup
L16NVy+GXz3GjisGFNWXdDH7JVKhhzdqOVtRZyepY3VzK7gJMFwZQB64mZo/oCu3
OL6R+1wBvEBwwdYg0+pHsRK9kTRIrKiiIL7rBqNNoA4wOWDG51fq8i0jQrmOmH0E
AymZeODENXYudwZn1pTutr1OZ4F6RGphBJFbeX/bUPomQDfMdTHTX23Nz0rznU5O
kax5udGUHDtUByBTHWlMQUfYz58gEDjR50HKim9bY/ovqj4ejm+2iK3ONwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBq/oBNTanhAAs0vu0Y93wLo33OBMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvR3ItZ0UxTnFlRUFDelMtN1JqM2ZBdWpmYzRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfoMA0G
CSqGSIb3DQEBCwUAA4IBAQA1hNi4zycKvi/umyVj5kLSoABzlsFIqMZLXx0IbAC3
EgvYNpvV43RLVUA4NfKACsn+qTUCGxqhB1uEPvBvSju0n6Rbz51KGsF0+4+ehS0P
gTALVB2TxCeUC7SII4uiJ1uUf+Ek0+/gOfv8+NrKmBzxqAzybOH3IiHYNC2V+VT3
pQnUhFWfCubtvsLtE5rjafbiQrgIRKd+exYLA22J/AY/LqFeFHdKXCXS77asDyl7
XxAkZkm97mIFLzH6Whz33xmzVj5bUInML1BjENqyYaydfjYLwPubryUR9P122S/v
mTjAKsXxE06rvW+GKLxxE00qoHU8L9r1RRmC50rSrQbn
-----END CERTIFICATE-----
Generated at Wed May 13 02:51:39 2026 by rpki-client