Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RJdORBkDWN0VE-JuP7On7z_F5yU.roa
File: RJdORBkDWN0VE-JuP7On7z_F5yU.roa (raw, json)
Hash identifier: r8Vj9HIPp8d3IZbe9PSdxB/fms/TANJ4WV4ZrJU4k4g=
Subject key identifier: 44:97:4E:44:19:03:58:DD:15:13:E2:6E:3F:B3:A7:EF:3F:C5:E7:25
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F3F6704743EC8E6244FC297E265A68575
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RJdORBkDWN0VE-JuP7On7z_F5yU.roa
Signing time: Wed 08 Jul 2026 01:45:43 +0000
ROA not before: Wed 08 Jul 2026 01:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54600
IP address blocks: 222.167.233.0/24 maxlen: 24
222.167.243.0/24 maxlen: 24
222.167.245.0/24 maxlen: 24
222.167.247.0/24 maxlen: 24
222.167.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3f:67:04:74:3e:c8:e6:24:4f:c2:97:e2:65:a6:85:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 8 01:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44974e44190358dd1513e26e3fb3a7ef3fc5e725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:b5:e4:21:22:78:ff:e7:0b:ae:bf:6d:61:
eb:60:0e:f7:fc:42:5e:50:ce:d3:89:9d:49:59:f6:
ca:93:6c:11:74:fa:af:ce:ea:ae:b6:88:47:5a:6f:
d0:6b:af:6a:c5:e0:a4:c7:11:b7:63:7f:e5:6d:8f:
f5:bd:cc:5e:f0:6e:94:cd:8f:0a:41:e3:ef:94:5d:
df:49:77:fb:dc:8f:18:d9:3a:9c:fe:0e:40:57:21:
bf:93:1f:a4:ff:b5:e0:8c:5e:40:8f:ea:aa:6c:40:
c7:56:64:c3:a8:cd:69:31:b1:c8:52:93:81:cb:e5:
5f:a3:d0:1d:98:f1:cf:74:c7:f3:00:73:75:88:88:
b6:04:ac:e1:90:b0:6f:20:4b:c7:93:c0:d2:61:93:
a1:df:7f:1e:bb:c5:1b:20:ea:5d:c8:83:4d:9f:83:
3c:00:12:a8:a0:cd:44:fe:83:69:8d:ae:5c:18:44:
c9:20:ee:64:88:c6:b1:5b:e0:9b:55:7d:cb:b5:a5:
ab:23:71:f7:a6:fc:df:ac:9b:56:70:86:ca:5c:5e:
75:04:87:c7:f8:0d:b6:5a:97:b1:bd:c0:eb:68:be:
78:a9:7a:08:44:9f:9c:f1:ec:a5:97:61:c2:82:11:
d2:d8:32:07:89:51:d7:19:b3:68:60:9c:63:2f:06:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:97:4E:44:19:03:58:DD:15:13:E2:6E:3F:B3:A7:EF:3F:C5:E7:25
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RJdORBkDWN0VE-JuP7On7z_F5yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.233.0/24
222.167.243.0/24
222.167.245.0/24
222.167.247.0-222.167.248.255
Signature Algorithm: sha256WithRSAEncryption
6e:31:18:f9:85:62:b8:ac:1a:1e:b8:ca:45:df:86:4e:eb:08:
cb:6a:6b:c8:33:07:75:ff:cf:40:82:4b:00:0f:91:43:7e:22:
80:28:d0:1a:ec:74:5d:6a:e9:bc:67:ae:d9:38:7f:1f:92:1e:
15:10:f0:81:95:95:04:f7:ff:b9:f5:c8:a1:be:fe:7d:c8:5e:
38:4a:dd:46:42:f9:c4:7b:68:8e:95:5c:1e:25:30:36:20:12:
56:15:de:05:8a:75:e3:e1:85:b5:83:37:2e:d6:13:1a:95:f4:
c8:24:b2:15:5f:aa:a2:15:af:ac:bd:a8:15:b1:90:d0:7a:0d:
2b:96:c1:ca:f9:eb:58:a7:5a:19:2a:26:1a:e4:d5:14:10:3d:
e8:3d:24:f2:c6:82:58:a5:00:3e:81:d3:fb:79:22:3d:1b:6e:
51:19:b9:4f:d5:42:2c:1c:a9:b9:54:4e:1a:f8:d9:b3:a2:0b:
3c:96:a4:97:d0:2d:9c:20:69:41:2b:34:9c:42:06:fd:18:ba:
a7:c7:4c:2a:06:f5:86:f4:d1:f2:52:85:a7:76:fb:6e:33:73:
7e:a5:a9:d4:e8:48:b0:1b:0d:a2:97:60:cc:ea:a8:6f:fc:a6:
73:01:66:58:03:3b:42:50:43:5f:2b:a8:65:9b:0b:b9:32:10:
48:36:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:51 2026 by rpki-client