Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/n8R8_YX468DSIuduC6xTqMBQXGs.roa
File: n8R8_YX468DSIuduC6xTqMBQXGs.roa (raw, json)
Hash identifier: XkUUH+o4YqvomPSscXttz3rMyHXiogy/8geOkaXdoo8=
Subject key identifier: 9F:C4:7C:FD:85:F8:EB:C0:D2:22:E7:6E:0B:AC:53:A8:C0:50:5C:6B
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F7FB93F3A8FC786D70A0E4D75C8709987
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/n8R8_YX468DSIuduC6xTqMBQXGs.roa
Signing time: Mon 20 Jul 2026 13:31:14 +0000
ROA not before: Mon 20 Jul 2026 13:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 222.167.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:b9:3f:3a:8f:c7:86:d7:0a:0e:4d:75:c8:70:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 20 13:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc47cfd85f8ebc0d222e76e0bac53a8c0505c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:97:9e:96:f8:d1:ed:bd:5d:e9:b9:2b:2c:
b5:4a:3a:e8:60:d1:ae:2c:5e:72:bd:c4:cb:36:ac:
29:f4:be:48:1e:ab:d6:a4:d4:4a:3a:ea:dd:b1:d4:
92:a4:b3:e2:17:bf:68:8e:78:7a:8e:01:17:4f:26:
2c:d7:2c:bf:d3:71:47:53:a8:80:1b:92:55:2f:6c:
92:5e:b5:d0:44:38:7a:f2:fb:25:92:8f:bd:33:85:
77:ec:42:aa:bc:e4:dc:9a:bf:74:df:4d:90:b0:fc:
b3:05:40:73:b2:eb:7e:0b:b2:c2:da:7d:c5:dc:43:
a9:c6:6e:c3:e1:1a:7a:5e:e9:98:db:ec:d4:26:36:
d5:9c:1c:0b:0a:b6:5a:8a:29:5e:14:13:f3:12:8d:
17:59:b3:3a:a6:80:d9:0f:a4:fd:22:63:7c:8f:04:
9d:3d:e3:82:85:ca:dd:83:60:c0:0f:3b:0f:7e:0b:
eb:40:3b:09:50:fd:9a:7d:a8:0a:e3:68:fc:1d:09:
58:fb:6d:03:13:52:a4:e6:31:b0:58:d1:63:66:ad:
21:fb:ff:87:29:82:fb:db:35:7f:63:7f:69:87:ce:
28:b9:e0:aa:9f:ab:06:70:f5:05:b9:5e:6c:3d:5a:
83:c7:ad:91:4c:02:28:6b:e8:64:db:28:fe:fc:ff:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:7C:FD:85:F8:EB:C0:D2:22:E7:6E:0B:AC:53:A8:C0:50:5C:6B
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/n8R8_YX468DSIuduC6xTqMBQXGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.241.0/24
Signature Algorithm: sha256WithRSAEncryption
50:22:0f:db:a5:9b:9c:aa:8d:fb:56:ab:2a:c0:53:bd:82:b3:
98:b8:17:c9:5d:e5:3e:79:94:eb:01:3c:29:e2:1c:4f:ff:02:
e6:c1:77:d8:7e:2d:a3:96:e9:2d:42:48:29:88:b2:1c:d7:84:
72:a3:4e:92:7f:03:80:7b:7e:32:e1:fa:c8:36:2e:a7:ef:34:
89:12:58:c0:19:d6:ee:4e:0e:55:bc:dd:8c:57:cd:06:cc:5b:
6f:96:0b:0a:ef:fd:8c:fe:2d:7e:17:03:43:dd:b7:ed:64:a3:
92:63:42:a0:f4:a0:85:61:72:a5:25:a7:64:fd:32:5a:45:d4:
44:ad:57:0b:41:23:51:9f:0b:c7:70:93:55:d9:44:5c:1b:d2:
f3:3d:92:ba:88:c0:44:4c:6d:fd:c1:30:8f:22:d1:22:0e:fa:
98:59:07:c8:6b:30:71:0f:ec:93:be:7c:8c:32:24:75:c1:bc:
2c:7b:f2:d3:ff:b0:4e:0a:19:6f:9c:c6:b8:5b:0d:f7:34:52:
7b:70:19:dc:06:a6:ad:99:7a:61:0f:d6:25:56:66:6a:8f:5d:
10:0b:5f:55:48:9b:06:fd:1d:f8:0a:0f:21:de:8b:1e:9d:98:
4b:f5:7d:20:43:4f:5d:ec:f1:db:2c:11:1e:61:4d:48:7c:cf:
47:d5:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:06 2026 by rpki-client