Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RYXC-s2POiJkjMH0uBQIaPbkZQg.roa
File: RYXC-s2POiJkjMH0uBQIaPbkZQg.roa (raw, json)
Hash identifier: 0KNVUedRME7Pg9ZHBMj1l6MA7b+d0DS/lm7sgOYQA6k=
Subject key identifier: 45:85:C2:FA:CD:8F:3A:22:64:8C:C1:F4:B8:14:08:68:F6:E4:65:08
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D02E49C22DF24D456014C335281742318
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RYXC-s2POiJkjMH0uBQIaPbkZQg.roa
Signing time: Wed 18 Mar 2026 21:40:29 +0000
ROA not before: Wed 18 Mar 2026 21:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 222.167.236.0/24 maxlen: 24
222.167.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:e4:9c:22:df:24:d4:56:01:4c:33:52:81:74:23:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 18 21:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4585c2facd8f3a22648cc1f4b8140868f6e46508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:cb:58:c3:6e:00:1f:f3:bf:c9:e9:2b:27:
94:52:fb:8a:99:ba:dd:6d:9a:a6:34:28:87:2b:fd:
27:8c:91:b5:0d:43:46:d0:72:17:63:69:09:20:5f:
14:55:3d:e8:5b:63:45:d0:48:14:01:a8:cc:8e:b5:
97:c5:df:17:5f:4a:b5:69:f8:dd:63:a3:4d:7b:0b:
ed:aa:78:92:5a:1d:ee:b0:b1:20:be:8a:c4:9c:f0:
ed:0a:f1:a0:cb:94:9a:78:37:d9:94:54:d9:66:34:
7c:a7:91:bb:58:6b:69:8b:24:97:77:06:2b:f8:69:
c5:75:6b:1d:36:ab:4e:40:03:52:d4:28:99:b9:8a:
5f:a1:27:0a:3a:c8:84:6b:67:94:d2:73:49:c5:92:
f9:1d:85:d8:68:09:28:98:5f:cf:b8:dc:9d:86:52:
dd:bc:9d:c9:82:a9:c9:61:fc:53:66:8c:c7:87:9d:
9b:24:2c:92:d9:89:c6:47:f6:c8:97:49:7d:5a:92:
8f:9e:68:81:4c:cc:0a:dc:64:13:8c:db:ff:98:2d:
de:e0:71:30:e3:2e:61:e5:23:7c:9e:df:52:49:d5:
8e:8d:ee:f5:9f:d2:82:6d:6d:e0:98:4a:2e:68:35:
bf:52:70:85:3f:12:79:23:6f:ed:72:09:83:ec:a1:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:C2:FA:CD:8F:3A:22:64:8C:C1:F4:B8:14:08:68:F6:E4:65:08
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/RYXC-s2POiJkjMH0uBQIaPbkZQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.236.0/24
222.167.253.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cc:47:8a:cb:48:2b:04:8b:43:cf:7b:11:16:e6:b8:39:d3:
0a:47:16:8b:6c:8b:d5:3c:7e:e1:02:86:e0:c8:6b:c3:3b:eb:
24:9d:c7:7e:81:e8:6d:7a:90:b0:0f:52:16:bf:33:50:1a:61:
11:26:50:22:01:38:68:18:8f:94:c7:ab:1c:96:35:ad:f5:82:
da:96:44:2b:2c:61:8f:54:af:fe:d5:05:ad:0c:2a:f9:7c:a0:
fc:38:0d:70:74:bc:ee:27:12:0f:9f:2c:b5:38:fe:56:9c:96:
22:5b:70:37:49:09:99:a8:60:cf:6e:29:dd:7b:2d:02:c1:64:
de:86:55:6a:30:b4:00:9b:42:0d:07:5e:41:6a:52:a3:1a:b5:
cc:5d:fc:37:83:5a:ff:18:84:3c:ba:13:79:94:fd:45:d3:4d:
7e:7d:ed:79:46:6c:fd:97:a8:e8:06:b2:dd:5e:c7:c2:c1:d0:
7e:c1:38:e1:8a:0a:26:fe:76:75:db:65:85:f9:95:72:d4:ed:
aa:07:1f:90:20:36:65:e0:a6:5f:66:cc:3c:ee:03:7e:ae:f6:
60:86:5f:33:12:88:d6:1f:10:d3:cd:9d:8d:a2:b8:ef:ad:be:
ad:80:fe:40:e5:46:c0:46:1a:a3:02:cf:bc:66:34:52:85:c0:
90:0c:70:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0C5Jwi3yTUVgFMM1KBdCMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwMzE4MjE0MDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTg1YzJmYWNkOGYzYTIyNjQ4Y2MxZjRiODE0MDg2OGY2ZTQ2NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI3LWMNuAB/zv8npKyeUUvuKmbrd
bZqmNCiHK/0njJG1DUNG0HIXY2kJIF8UVT3oW2NF0EgUAajMjrWXxd8XX0q1afjd
Y6NNewvtqniSWh3usLEgvorEnPDtCvGgy5SaeDfZlFTZZjR8p5G7WGtpiySXdwYr
+GnFdWsdNqtOQANS1CiZuYpfoScKOsiEa2eU0nNJxZL5HYXYaAkomF/PuNydhlLd
vJ3JgqnJYfxTZozHh52bJCyS2YnGR/bIl0l9WpKPnmiBTMwK3GQTjNv/mC3e4HEw
4y5h5SN8nt9SSdWOje71n9KCbW3gmEouaDW/UnCFPxJ5I2/tcgmD7KHfvwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEWFwvrNjzoiZIzB9LgUCGj25GUIMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvUllYQy1zMlBPaUprak1IMHVCUUlhUGJrWlFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA3qfsAwQA
3qf9MA0GCSqGSIb3DQEBCwUAA4IBAQA0zEeKy0grBItDz3sRFua4OdMKRxaLbIvV
PH7hAobgyGvDO+skncd+gehtepCwD1IWvzNQGmERJlAiAThoGI+Ux6scljWt9YLa
lkQrLGGPVK/+1QWtDCr5fKD8OA1wdLzuJxIPnyy1OP5WnJYiW3A3SQmZqGDPbind
ey0CwWTehlVqMLQAm0INB15BalKjGrXMXfw3g1r/GIQ8uhN5lP1F001+fe15Rmz9
l6joBrLdXsfCwdB+wTjhigom/nZ122WF+ZVy1O2qBx+QIDZl4KZfZsw87gN+rvZg
hl8zEojWHxDTzZ2Norjvrb6tgP5A5UbARhqjAs+8ZjRShcCQDHAF
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:48 2026 by rpki-client