Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/mXpQ_0-ph_vnvrNA65J7GDHS6XQ.roa
File: mXpQ_0-ph_vnvrNA65J7GDHS6XQ.roa (raw, json)
Hash identifier: uYFa1ooEuFOV2u0L3jniL3q2PzxiyanHtc5AWtzSUvE=
Subject key identifier: 99:7A:50:FF:4F:A9:87:FB:E7:BE:B3:40:EB:92:7B:18:31:D2:E9:74
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F8FE6675158913D3FC49E1A52183806ED
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/mXpQ_0-ph_vnvrNA65J7GDHS6XQ.roa
Signing time: Thu 23 Jul 2026 16:54:29 +0000
ROA not before: Thu 23 Jul 2026 16:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.215.0/24 maxlen: 24
222.167.226.0/24 maxlen: 24
222.167.230.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:e6:67:51:58:91:3d:3f:c4:9e:1a:52:18:38:06:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 23 16:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=997a50ff4fa987fbe7beb340eb927b1831d2e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:58:54:f4:0e:a0:70:5c:b9:f5:46:87:6f:
c1:b9:c2:91:63:6f:e2:ab:ba:7b:35:f7:1f:58:3a:
d3:d2:e8:fa:fb:15:c5:22:25:62:ca:79:11:40:03:
29:46:aa:8d:eb:45:cc:91:f4:36:c4:bd:98:6d:3c:
40:d4:52:32:3e:99:5f:96:05:5e:38:89:c6:89:10:
9c:9d:13:b8:a3:7f:87:a1:59:97:dd:e8:8d:e5:b1:
0f:aa:82:de:4b:f8:c4:2c:64:37:f9:e8:83:fa:04:
42:31:72:f7:84:da:7c:1e:be:f4:4c:56:92:87:d2:
04:e3:99:10:24:89:cf:39:20:1e:aa:b1:04:f1:08:
58:25:bc:5c:2d:fa:c1:c1:22:af:ce:bd:25:28:0b:
c4:f8:1f:d5:d0:e9:88:ef:71:45:1e:65:ae:20:78:
96:c2:ff:f6:ba:89:e3:e6:9d:a8:b5:e3:d5:e3:e8:
44:0b:b9:33:f2:ed:c0:7b:ce:4d:87:a1:6f:4b:92:
17:f0:be:be:3c:6c:5c:c3:8b:dc:ac:14:4a:dd:b7:
5d:92:ac:8f:c9:8c:cb:48:18:2d:0c:c7:17:fc:e1:
51:ec:7f:9b:01:af:3e:74:99:6a:52:7c:47:19:b0:
48:e8:35:dc:0b:cf:e9:ea:95:57:82:fb:52:d2:50:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:50:FF:4F:A9:87:FB:E7:BE:B3:40:EB:92:7B:18:31:D2:E9:74
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/mXpQ_0-ph_vnvrNA65J7GDHS6XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.215.0/24
222.167.226.0/24
222.167.230.0/24
222.167.234.0/24
222.167.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:08:50:33:35:e7:90:21:ee:c0:7e:0f:50:48:f2:71:9f:de:
3a:6e:3e:da:80:78:f1:9c:fc:43:c3:66:9a:8c:ee:86:d8:d9:
60:89:96:18:39:e6:10:72:a3:f0:ee:72:6b:18:f9:9c:ad:f0:
46:e4:41:ae:41:2e:da:e3:ba:46:0b:84:1c:a1:34:23:9c:4d:
08:ef:a7:56:fa:58:95:8a:16:08:da:82:8f:53:4f:21:65:0c:
e4:db:2a:ad:87:59:44:e7:7a:8b:87:8e:8c:ed:a7:fe:62:83:
61:01:82:3e:14:09:3c:8d:7b:2e:b3:e5:f0:d7:57:1d:82:ea:
aa:db:00:09:19:c3:7a:cc:15:cb:7e:fb:bb:96:10:a1:e2:0f:
8a:86:75:c4:be:4e:fc:e5:98:e9:c7:f5:03:d7:a9:62:4f:02:
dc:69:f9:c8:4c:1a:f0:f3:b9:1b:cd:e3:38:4c:3c:32:56:ce:
ed:b3:fe:43:c6:96:79:f5:61:6f:9d:1a:0f:88:ad:57:5d:f2:
3a:8f:fa:18:94:29:37:9d:38:87:99:0e:a4:a0:0d:eb:a9:67:
6c:f9:cc:f6:37:2f:63:54:ff:8c:9f:40:b5:6d:6a:bb:d8:35:
58:a2:fd:0c:94:60:b1:42:6d:eb:67:0c:e0:63:c8:8f:8f:ef:
ad:82:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:51 2026 by rpki-client