Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/eBZBMiz3QYerwG6SbFbZrVwDKWQ.roa
File: eBZBMiz3QYerwG6SbFbZrVwDKWQ.roa (raw, json)
Hash identifier: 5lkHlJfFYTvBVC8dPVFzykNqImx18wCe+3jtaUjAX8o=
Subject key identifier: 78:16:41:32:2C:F7:41:87:AB:C0:6E:92:6C:56:D9:AD:5C:03:29:64
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E1737DAB2377CD1B0126F73C893D6399C
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/eBZBMiz3QYerwG6SbFbZrVwDKWQ.roa
Signing time: Mon 11 May 2026 13:26:36 +0000
ROA not before: Mon 11 May 2026 13:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213772
IP address blocks: 222.167.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:37:da:b2:37:7c:d1:b0:12:6f:73:c8:93:d6:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 11 13:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=781641322cf74187abc06e926c56d9ad5c032964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:2a:93:6e:57:29:f4:26:85:d8:87:3f:c9:
5c:85:91:24:1e:a7:4e:59:3a:23:16:1d:8d:be:b0:
27:c8:79:02:f3:76:01:43:93:60:74:33:8c:de:8c:
4c:ce:d7:9a:2d:55:f0:5b:40:2c:d0:d1:75:13:37:
ba:df:61:cc:cc:db:71:ec:5b:40:9a:c1:ea:a7:2c:
2b:34:21:98:77:88:f6:36:39:c6:68:41:52:9f:07:
a1:5e:12:fd:4e:db:85:00:70:34:f7:53:80:12:6d:
a7:ea:53:fe:f4:b3:c0:78:04:a1:ad:45:9e:bc:65:
15:cb:ef:b3:b4:bb:cc:4b:8d:94:14:61:71:64:96:
a0:7a:29:b6:ee:be:52:4c:6e:01:e9:25:61:1a:cc:
86:00:e2:b1:ed:b1:40:c7:3e:fe:0f:06:38:ea:31:
67:94:c4:be:93:25:95:1f:8e:25:d6:91:07:db:05:
89:82:ce:2b:4a:e1:b0:ef:ac:b4:43:5a:90:15:2e:
f4:30:2b:53:cf:c4:0d:c0:5b:25:0c:4d:23:99:81:
ae:82:44:de:48:46:bf:22:e1:01:ac:36:b0:84:57:
6f:78:b0:3f:34:03:83:d4:35:35:f5:ef:89:da:9a:
55:fb:89:6d:35:60:c0:6d:25:80:91:95:d4:12:d9:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:41:32:2C:F7:41:87:AB:C0:6E:92:6C:56:D9:AD:5C:03:29:64
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/eBZBMiz3QYerwG6SbFbZrVwDKWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.199.0/24
Signature Algorithm: sha256WithRSAEncryption
45:36:8a:91:39:15:d8:09:55:36:5c:be:14:b5:6e:36:8c:ca:
96:94:53:7c:66:a9:41:cd:31:04:2e:3a:5c:f2:4b:09:7d:3e:
77:87:21:4c:1f:17:dd:d2:f5:04:50:00:8c:24:67:99:1a:75:
8a:89:6c:18:14:32:a3:67:7f:43:d5:d3:7c:d8:c7:f8:23:a7:
5e:d1:97:9a:39:b2:cc:1b:a9:35:e5:77:e1:c0:f7:d1:4b:7c:
f1:52:7c:ea:41:0e:40:0f:e9:09:ee:10:34:13:b2:9a:50:da:
44:c3:a1:61:2f:2a:10:ff:02:7f:f2:37:18:3a:74:20:11:7f:
30:40:c3:e5:4a:41:22:9d:32:28:89:23:1c:eb:a2:7e:26:af:
fd:4b:9b:2e:9d:84:bd:0d:39:27:a1:02:24:ce:72:f7:39:ac:
42:6d:4a:00:43:50:76:a9:cc:ff:74:34:78:46:06:c3:1e:66:
8c:84:5d:77:ec:2c:03:2d:51:d6:74:5a:ae:d9:ad:a8:6a:c1:
3a:d8:31:59:31:26:bc:13:62:52:20:62:41:fe:80:90:aa:40:
44:be:83:e5:ac:9f:dd:ba:70:d1:1b:56:c4:69:47:a8:03:93:
d9:44:ba:53:26:68:c4:a9:52:98:05:25:95:d7:39:1b:52:a4:
60:a9:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:03 2026 by rpki-client