Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/e1Uv9fPDTBaJitcnbogc_oPJuak.roa
File: e1Uv9fPDTBaJitcnbogc_oPJuak.roa (raw, json)
Hash identifier: bUKyLRz8dumwDcsc9PyfMXa5OiR451MbRkKexvfyRMQ=
Subject key identifier: 7B:55:2F:F5:F3:C3:4C:16:89:8A:D7:27:6E:88:1C:FE:83:C9:B9:A9
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0D8FADD62DE784A643BB4B98B02B031A0
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/e1Uv9fPDTBaJitcnbogc_oPJuak.roa
Signing time: Fri 25 Sep 2026 14:31:54 +0000
ROA not before: Fri 25 Sep 2026 14:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 222.167.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:fa:dd:62:de:78:4a:64:3b:b4:b9:8b:02:b0:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 25 14:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b552ff5f3c34c16898ad7276e881cfe83c9b9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:a2:6f:6e:f8:30:7f:fb:46:09:76:51:6b:
1e:3e:ca:72:41:7e:f0:22:3e:81:a2:e4:11:d9:e0:
92:52:d1:1d:53:7b:56:08:8e:58:87:54:8a:16:8b:
9c:82:bd:93:f7:1d:00:44:7e:5b:94:8e:12:e2:b5:
c1:f1:fd:95:c1:42:9b:c5:62:aa:4b:0d:f4:b2:de:
93:eb:30:f8:82:0f:ce:73:cf:97:70:f3:da:21:6c:
9c:1e:50:bc:7c:6d:b5:ae:92:9a:75:b8:d1:43:25:
9e:50:b5:89:e7:1d:69:f0:53:ac:f9:57:98:1f:56:
41:02:00:d2:d6:37:52:81:c5:a0:c7:12:52:74:b9:
8f:17:ee:4d:0f:87:30:90:5e:34:98:cf:69:72:4d:
9d:9a:7f:5f:5f:9f:7f:02:e8:6f:55:32:2e:f0:e9:
79:64:8c:b6:6f:88:00:1d:eb:cd:a5:41:32:7d:c4:
98:f8:70:0b:fa:a8:98:05:dc:fc:b3:fe:23:ce:06:
6d:3c:bf:8b:6f:9e:4f:4d:3b:af:5c:05:54:3d:8c:
2e:2d:33:ba:82:d0:dc:54:2a:cb:a6:33:7c:c9:5c:
c9:3d:92:4f:af:8f:4a:e3:2a:fa:05:a5:0c:1b:ea:
f9:39:5a:9e:b9:f8:a0:cb:28:74:81:4f:5a:09:8f:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:2F:F5:F3:C3:4C:16:89:8A:D7:27:6E:88:1C:FE:83:C9:B9:A9
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/e1Uv9fPDTBaJitcnbogc_oPJuak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ed:75:df:67:6b:a3:45:ee:87:02:74:cd:5d:2b:b4:4f:bc:
67:16:6f:10:20:3e:4a:19:9e:1a:ec:3d:29:cd:af:ed:4c:ae:
0f:78:82:f5:12:ca:40:bf:42:08:66:c4:3a:b8:90:2c:11:66:
05:f1:af:45:21:56:d8:c8:44:67:62:07:3e:c6:bb:49:89:08:
59:8e:98:61:aa:ba:b3:ba:8a:e0:60:1d:10:f1:6d:fa:0f:52:
2c:91:6d:4c:f5:72:30:7e:12:29:f6:94:d2:27:6a:59:15:70:
04:95:e1:96:94:4a:9e:ad:7a:e5:c2:d4:d9:51:ec:58:2e:c8:
a1:0c:5c:b8:3f:19:dc:0d:dc:d6:0d:78:76:8e:d1:b4:59:2f:
6f:21:af:ae:ed:96:31:bf:48:b1:b8:9d:39:ef:af:72:da:1b:
11:96:8e:9b:e7:a7:31:33:2d:eb:38:b3:28:f4:5f:97:61:3d:
7e:b2:53:b1:51:3f:33:5f:8a:da:7f:46:d2:82:6e:73:51:9e:
cc:f6:f4:e8:1a:c6:ab:a2:ca:88:fc:ec:4c:b6:1a:fc:f7:f1:
77:89:38:e7:8e:01:9d:f9:87:61:91:e8:33:10:91:02:7d:e1:
c5:09:4a:64:74:da:5c:90:24:88:55:42:e9:69:68:fc:cb:51:
c8:0c:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:34:45 2026 by rpki-client