Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa
File: QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa (raw, json)
Hash identifier: xbQrT4SCRDGICNyiKtX8aOdkuj5ohxB0sU4mS/MuyaM=
Subject key identifier: 42:B0:DD:86:D1:79:0A:AF:8E:A3:3C:9E:44:AC:B1:C0:79:59:A6:C0
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019DCCA175B4018D2B953111674EB937BA8F
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa
Signing time: Mon 27 Apr 2026 01:50:26 +0000
ROA not before: Mon 27 Apr 2026 01:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 222.167.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:a1:75:b4:01:8d:2b:95:31:11:67:4e:b9:37:ba:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 27 01:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42b0dd86d1790aaf8ea33c9e44acb1c07959a6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:8a:bd:d2:10:5a:db:06:26:77:40:3e:63:
b5:cc:f4:ca:73:c5:f8:32:23:45:65:49:cd:42:da:
c3:ef:6d:5d:5c:df:71:b4:85:77:e1:b6:46:b3:a3:
44:59:25:91:da:cc:55:72:35:f2:6e:26:5e:84:e3:
9c:1d:08:13:de:c9:f9:11:26:28:5f:33:80:ef:ab:
4f:0a:c8:1f:d7:1a:3c:93:b8:60:00:75:ae:a2:5e:
b7:ba:96:69:fc:36:2f:31:fa:8f:83:8b:17:8b:8a:
ca:7e:fe:4c:fa:5a:bc:5b:55:39:83:e5:25:c1:be:
17:c7:54:b8:8a:1e:d1:87:3a:ff:44:ce:6b:a6:7f:
82:fa:12:83:de:c3:9a:4a:66:be:8d:d5:96:0e:8a:
23:b4:c3:73:ae:6f:b6:fa:36:88:8c:8c:af:bf:05:
a5:2f:9c:67:38:ae:1d:8a:24:d5:28:fa:a9:33:ab:
c6:5c:c5:a7:4b:07:b6:6b:14:5b:a0:9c:06:9b:51:
6b:ae:f8:68:c0:40:e3:fc:36:49:d5:f8:65:54:7b:
05:9e:57:e7:d9:92:f8:37:b2:10:5e:cb:ea:df:50:
2a:d5:36:c3:8b:d0:7f:3f:06:30:6b:20:d1:63:d7:
29:12:47:02:aa:c7:03:8e:ed:c3:df:97:d9:21:8b:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:DD:86:D1:79:0A:AF:8E:A3:3C:9E:44:AC:B1:C0:79:59:A6:C0
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1b:7f:ce:17:6c:ae:cb:de:f0:4a:ff:0a:17:e1:1e:b0:f4:
66:7b:f1:f1:c8:c2:52:15:8e:bb:19:79:be:10:b6:f8:65:24:
8f:9b:8f:42:ef:22:0f:48:84:fa:2d:86:59:d6:f2:3d:6b:84:
82:20:a0:38:4b:6f:e1:12:ac:07:aa:a6:78:e2:31:96:01:6f:
27:73:8c:8d:4e:42:d7:b0:ba:4c:44:ec:f8:1b:66:85:94:d1:
c7:35:0b:ee:c7:12:09:de:27:5f:e2:8f:24:48:ac:38:e5:d0:
5c:d8:42:81:e0:47:1b:f3:ce:81:45:63:25:92:50:fd:8f:5d:
67:f9:17:cb:f6:62:f6:3a:4c:7a:4e:cc:0c:12:4d:31:11:a5:
79:26:81:84:ee:58:11:a4:d5:bc:52:07:22:ad:e0:9c:c1:e8:
38:9d:30:6a:53:9b:16:b2:5a:d8:3a:7e:9e:20:bb:61:85:a8:
0a:eb:15:fa:58:bf:ef:bd:49:6a:47:37:1b:bd:f5:fc:78:af:
70:8d:d5:cd:7c:8a:df:c7:af:02:84:a8:13:01:0f:43:6c:7f:
5c:d8:34:7e:1d:9a:e5:17:fc:27:7b:0c:df:33:70:48:fd:25:
e6:0a:cf:9a:a4:13:14:63:02:f9:b3:7c:4a:b8:7c:39:95:38:
d1:eb:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:55 2026 by rpki-client