Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/me9sE9BbC82IQvIzDVSBH4iWPXQ.roa
File: me9sE9BbC82IQvIzDVSBH4iWPXQ.roa (raw, json)
Hash identifier: xc6GADxP9PMb1/VKhxWjvYWWuVG4q4Tt3GZWiAcyWVA=
Subject key identifier: 99:EF:6C:13:D0:5B:0B:CD:88:42:F2:33:0D:54:81:1F:88:96:3D:74
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D1AF5F76097C5B561B6689D0E83F0AA7B
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/me9sE9BbC82IQvIzDVSBH4iWPXQ.roa
Signing time: Mon 23 Mar 2026 13:50:20 +0000
ROA not before: Mon 23 Mar 2026 13:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 222.167.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:f5:f7:60:97:c5:b5:61:b6:68:9d:0e:83:f0:aa:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 23 13:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99ef6c13d05b0bcd8842f2330d54811f88963d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:70:7c:40:40:7c:b0:54:0e:1d:35:72:0b:
2b:1a:10:36:49:0b:12:cf:0c:db:0f:e5:7a:b2:a7:
2f:d6:e4:60:fc:f3:30:e8:cf:ab:02:0e:44:69:ed:
67:70:a2:96:b7:61:f7:3f:fe:2c:be:f2:35:34:64:
aa:76:f5:9e:62:fc:98:b5:9c:4c:2a:ce:16:41:6a:
4e:3a:03:b7:ba:4a:94:df:83:00:0d:57:d6:87:e3:
39:a7:55:df:e7:7a:dc:21:35:e1:22:f8:2d:54:c3:
fb:2d:26:60:38:d2:fb:20:63:c4:47:8d:ec:ce:04:
47:ac:04:c3:78:8b:42:cc:fc:86:2e:ca:58:16:a1:
36:ec:48:f8:f4:27:d8:aa:7d:f7:32:4e:49:42:22:
c1:ac:2a:97:ef:4d:26:45:74:1c:bf:ff:74:a7:cf:
de:18:d7:47:39:27:b8:d0:74:e0:29:4a:1c:25:4f:
76:b8:0d:72:5a:6f:a8:a0:ce:72:98:74:fb:10:99:
45:cb:20:c3:4f:c3:41:98:c6:aa:42:21:70:0d:a2:
b6:0c:78:6f:e3:0c:a4:df:0a:03:f5:3b:6e:6f:cd:
d5:ab:1d:75:a9:d9:11:34:2d:ad:0e:a9:ab:7b:7a:
1d:df:52:47:bd:93:5c:47:62:e9:63:b0:38:1a:59:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:6C:13:D0:5B:0B:CD:88:42:F2:33:0D:54:81:1F:88:96:3D:74
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/me9sE9BbC82IQvIzDVSBH4iWPXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.254.0/24
Signature Algorithm: sha256WithRSAEncryption
af:93:47:c9:17:e6:fe:a1:61:ee:02:6f:8e:49:ba:ec:34:de:
5f:74:5b:5d:b1:f9:d9:f0:8b:5a:62:25:83:84:36:bf:42:db:
98:f4:98:47:95:24:17:6d:2b:d2:94:8b:98:0e:84:2d:e3:bf:
d0:ef:a8:6d:e6:a4:bf:80:c5:36:2d:83:01:20:5f:f1:fd:f6:
05:70:24:f7:d4:5f:ac:d0:92:56:aa:4f:2d:f4:a1:23:c4:73:
2d:94:5c:11:b4:65:34:d0:b0:5e:76:14:51:3f:16:f7:e4:d9:
4d:fa:d7:9e:3e:b1:62:b0:6c:01:7c:5a:29:c3:b8:d5:04:b5:
f5:dd:17:93:6b:5d:d7:bc:b5:59:ff:b5:b5:6b:0b:fb:11:11:
16:2b:8c:0f:04:31:72:dc:56:97:54:18:5c:b3:49:68:fe:38:
8b:ab:30:b0:6d:8f:3d:6c:0f:bb:2f:ec:82:36:eb:d8:22:2b:
50:e9:4f:9a:6c:59:65:0b:04:bb:d5:fb:e4:96:b2:42:2d:ca:
67:89:27:bc:61:31:13:3c:d6:42:4a:01:07:0d:56:b8:5d:a8:
fb:1e:11:6d:20:92:9a:37:ad:f9:09:76:cb:41:24:36:00:be:
c5:eb:ad:0a:66:9e:c0:35:86:14:76:ae:a0:02:d7:b0:97:c7:
9c:4f:03:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0a9fdgl8W1YbZonQ6D8Kp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwMzIzMTM1MDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWVmNmMxM2QwNWIwYmNkODg0MmYyMzMwZDU0ODExZjg4OTYzZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjtwfEBAfLBUDh01cgsrGhA2SQsS
zwzbD+V6sqcv1uRg/PMw6M+rAg5Eae1ncKKWt2H3P/4svvI1NGSqdvWeYvyYtZxM
Ks4WQWpOOgO3ukqU34MADVfWh+M5p1Xf53rcITXhIvgtVMP7LSZgONL7IGPER43s
zgRHrATDeItCzPyGLspYFqE27Ej49CfYqn33Mk5JQiLBrCqX700mRXQcv/90p8/e
GNdHOSe40HTgKUocJU92uA1yWm+ooM5ymHT7EJlFyyDDT8NBmMaqQiFwDaK2DHhv
4wyk3woD9Ttub83Vqx11qdkRNC2tDqmre3od31JHvZNcR2LpY7A4GllawQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJnvbBPQWwvNiELyMw1UgR+Ilj10MB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvbWU5c0U5QmJDODJJUXZJekRWU0JINGlXUFhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qf+MA0G
CSqGSIb3DQEBCwUAA4IBAQCvk0fJF+b+oWHuAm+OSbrsNN5fdFtdsfnZ8ItaYiWD
hDa/QtuY9JhHlSQXbSvSlIuYDoQt47/Q76ht5qS/gMU2LYMBIF/x/fYFcCT31F+s
0JJWqk8t9KEjxHMtlFwRtGU00LBedhRRPxb35NlN+teePrFisGwBfFopw7jVBLX1
3ReTa13XvLVZ/7W1awv7EREWK4wPBDFy3FaXVBhcs0lo/jiLqzCwbY89bA+7L+yC
NuvYIitQ6U+abFllCwS71fvklrJCLcpniSe8YTETPNZCSgEHDVa4Xaj7HhFtIJKa
N635CXbLQSQ2AL7F660KZp7ANYYUdq6gAtewl8ecTwMj
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:33 2026 by rpki-client