Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sueV4JJ3ROpAHo8UisQ4Rsf5QEE.roa
File: sueV4JJ3ROpAHo8UisQ4Rsf5QEE.roa (raw, json)
Hash identifier: wgB+TfhpdpYMlRPY7Fjq8RZGe1gBJvAh5FLgG7yQd7s=
Subject key identifier: B2:E7:95:E0:92:77:44:EA:40:1E:8F:14:8A:C4:38:46:C7:F9:40:41
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F6B8F1400A56982C58C86A0FD1367D108
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sueV4JJ3ROpAHo8UisQ4Rsf5QEE.roa
Signing time: Thu 16 Jul 2026 15:32:46 +0000
ROA not before: Thu 16 Jul 2026 15:32:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141957
IP address blocks: 222.167.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:8f:14:00:a5:69:82:c5:8c:86:a0:fd:13:67:d1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 16 15:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2e795e0927744ea401e8f148ac43846c7f94041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:83:bf:db:74:fc:68:3d:b3:c7:ca:c8:96:
8f:65:c1:3c:c5:99:58:31:cc:73:c6:19:eb:3d:b1:
c5:93:e0:23:36:2a:26:3a:f8:00:1d:34:9a:e7:3e:
cc:42:52:47:27:15:23:e7:7e:ee:a2:05:1b:4e:2e:
b1:e4:c9:51:99:32:c5:63:0a:46:fc:2b:5c:d4:c8:
df:9b:d2:bf:dd:8d:cd:b8:34:74:6d:1b:82:4f:33:
b3:38:53:b7:03:20:de:0c:b8:a6:0e:44:eb:54:53:
2e:7a:91:5c:0b:6c:6e:b1:82:26:b3:48:75:13:7a:
e4:26:90:7e:89:68:b1:18:8e:c1:50:b6:e7:c8:d6:
06:f0:3a:b0:15:c2:63:ea:6e:8f:73:e4:87:de:99:
6e:d7:e8:32:d9:b7:c5:50:5b:5b:1a:37:2b:12:ce:
99:78:ec:d5:d7:d3:ba:1b:28:10:1e:c0:dd:c3:3f:
31:4c:e3:9e:b6:af:ad:cf:39:68:7a:c5:2e:18:29:
9e:d0:f2:b0:ad:40:bd:19:bb:b6:59:d7:bc:85:7a:
32:68:61:5d:de:a5:a9:d6:39:d5:0d:3d:ed:03:05:
b0:a3:3c:80:fe:2a:11:44:aa:a0:6e:8a:81:3f:9e:
b7:51:30:ed:11:73:c3:7d:da:03:6b:17:89:6d:99:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:95:E0:92:77:44:EA:40:1E:8F:14:8A:C4:38:46:C7:F9:40:41
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sueV4JJ3ROpAHo8UisQ4Rsf5QEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.229.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d8:e9:45:84:53:66:37:6c:cb:b9:73:3c:a6:52:73:bb:e4:
75:21:ab:11:f2:42:c0:4b:a8:bd:8f:20:6f:ab:cd:e3:21:5a:
53:c3:e0:b6:1e:d5:a1:2a:71:eb:3e:97:20:40:88:73:79:54:
f2:94:fd:77:ea:ea:df:8c:5b:df:a0:e3:fc:3b:9c:1a:0f:fd:
a1:85:ed:59:ca:60:af:b7:83:dd:c3:0a:48:14:8a:29:5b:92:
6c:c3:f1:87:5a:12:52:54:7a:05:80:e7:81:6d:a4:d4:14:26:
07:bd:f9:31:1c:d3:a9:90:52:fe:27:0f:10:87:e8:b9:16:c4:
c7:4f:9a:2d:16:50:6b:3c:a7:8c:32:67:5e:7b:84:b2:7a:c4:
b4:8e:7b:9f:fe:0f:b6:d5:03:0e:3d:cb:0e:26:04:46:cd:0e:
ba:da:f6:53:ef:1e:fe:09:db:9e:83:46:fc:b8:ef:a6:a6:0c:
75:87:1d:4c:cf:84:f3:13:6f:b4:6e:d2:be:f0:40:82:0c:6a:
aa:97:96:c1:72:fe:b2:56:09:15:ea:d0:e1:87:5d:64:53:ac:
d2:b3:40:dd:63:e6:17:e6:d3:bc:39:bc:53:7d:26:7c:fa:25:
4b:d1:09:f3:48:ef:6f:26:d8:08:95:7e:87:12:00:79:e5:17:
d0:70:47:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:58 2026 by rpki-client