Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Un_3OMScs2A-n1B7QSdez87iw_E.roa
File: Un_3OMScs2A-n1B7QSdez87iw_E.roa (raw, json)
Hash identifier: Lq4xQb+JOCTaHhv89CfMN+jQ5wmo6XsfP2BFflK5jos=
Subject key identifier: 52:7F:F7:38:C4:9C:B3:60:3E:9F:50:7B:41:27:5E:CF:CE:E2:C3:F1
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F6BEBB86878CA886EE13572F8B561116B
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Un_3OMScs2A-n1B7QSdez87iw_E.roa
Signing time: Thu 16 Jul 2026 17:13:57 +0000
ROA not before: Thu 16 Jul 2026 17:13:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 222.167.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:eb:b8:68:78:ca:88:6e:e1:35:72:f8:b5:61:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 16 17:13:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=527ff738c49cb3603e9f507b41275ecfcee2c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:0d:a9:74:ec:58:d9:0b:fc:9f:96:0a:05:
8a:7a:84:90:b3:57:c3:f1:76:6a:01:a5:d5:65:d2:
52:f1:58:bb:8f:46:d4:1a:fe:9d:68:c2:70:fe:a9:
f0:90:e6:dc:bc:23:1f:94:15:14:c2:d6:3f:9d:16:
3e:ad:b7:20:91:f7:51:f2:30:a5:1e:6a:c0:ee:af:
0a:05:45:43:73:b0:1b:7e:55:c0:bd:80:cd:ed:8e:
84:c1:ae:fe:93:5b:ee:29:9f:6e:0e:59:24:17:8e:
f8:87:a0:71:e7:cd:1d:c2:df:6a:08:0a:35:2c:44:
d5:d3:18:f0:b9:3e:d4:f0:e5:e6:5a:11:cd:8c:12:
21:ac:ae:08:d2:4e:ed:37:17:21:30:de:cc:dd:95:
30:90:cf:45:bf:9c:85:50:86:0f:94:0f:f3:ea:0e:
57:9f:34:42:bb:4c:d9:12:b6:7f:37:50:4f:7d:f3:
2a:a3:2c:44:4b:4c:c6:01:6e:7c:75:b1:ca:d8:3b:
23:87:79:5f:0c:d4:cd:74:f5:0b:e0:45:7e:55:eb:
ab:b2:06:12:8c:e9:9a:03:a1:9e:de:4a:a9:55:be:
f8:1a:9a:3f:6a:6e:e7:11:e7:2f:44:f9:59:3a:ca:
e2:c2:d4:1e:1e:20:9c:9e:43:97:95:6c:e1:5d:46:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:F7:38:C4:9C:B3:60:3E:9F:50:7B:41:27:5E:CF:CE:E2:C3:F1
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Un_3OMScs2A-n1B7QSdez87iw_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a4:f4:4e:de:12:16:f8:de:50:87:d1:e8:9d:ed:a7:98:59:
ad:9b:4d:e0:53:3a:98:fd:d7:be:b1:a6:8c:7c:b9:86:b6:2e:
73:0d:7b:e4:38:2d:e8:8b:28:0f:19:eb:00:42:4d:6d:4b:d8:
44:27:84:24:5c:c7:7f:68:e3:5e:88:43:46:b8:e6:3a:34:20:
ec:99:26:b3:4e:35:1d:82:95:01:db:df:3b:fe:76:ea:3c:eb:
ea:9a:a9:42:58:b4:5a:d9:69:c6:ae:a0:fb:03:97:9d:15:77:
30:4b:a6:86:98:b1:4e:dd:aa:76:4b:3a:b5:ee:03:e2:5c:2c:
73:65:cf:83:35:40:7f:94:53:ad:61:34:ee:ce:27:9a:c5:ba:
d0:ad:e5:e6:0a:a0:ef:b4:6a:9d:e1:24:0f:bb:57:b8:f5:2e:
24:4a:26:13:9d:a6:6e:9d:58:4e:f8:52:3b:b1:2f:c8:14:fd:
cd:44:18:3d:4f:cb:87:85:07:20:f1:c4:21:9e:26:c2:98:64:
f7:9b:ec:ea:2c:78:9f:01:07:56:c1:ae:2e:24:97:df:92:cc:
36:5f:d2:40:37:6f:b3:8b:b1:e4:79:c5:52:bb:bd:f9:ad:66:
2c:b0:73:72:49:4f:e7:2d:d3:57:10:a8:65:d6:52:2a:09:52:
16:13:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:21 2026 by rpki-client