Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/tyIYmMk_gjnIPbezGVyRNv-H50M.roa
File: tyIYmMk_gjnIPbezGVyRNv-H50M.roa (raw, json)
Hash identifier: +uH76gT0H9RV3kFXJJiliC2TaV5ae1PZfbZrLsi6EW4=
Subject key identifier: B7:22:18:98:C9:3F:82:39:C8:3D:B7:B3:19:5C:91:36:FF:87:E7:43
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A175DF8758549699236D0CA56A1F9F24A3
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/tyIYmMk_gjnIPbezGVyRNv-H50M.roa
Signing time: Mon 26 Oct 2026 01:42:25 +0000
ROA not before: Mon 26 Oct 2026 01:42:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 222.167.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:df:87:58:54:96:99:23:6d:0c:a5:6a:1f:9f:24:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 26 01:42:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7221898c93f8239c83db7b3195c9136ff87e743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:c3:d6:e3:ff:41:f8:08:ab:48:cb:e8:54:
78:4e:06:84:d8:35:7d:25:de:e4:75:e0:68:04:af:
6e:b1:5f:1d:92:dd:fb:37:de:bc:6d:68:0a:a2:8a:
51:9a:73:43:01:32:18:19:ae:8d:5a:59:eb:6f:89:
e3:71:26:89:5d:2c:b8:a0:7f:2a:cc:74:a1:0f:3f:
c6:df:83:d0:16:c1:44:5e:89:e5:48:88:f5:d1:ae:
bd:00:ed:c3:98:1c:da:29:d8:39:e0:1e:d5:15:ea:
8d:28:81:8f:d2:67:ac:a7:c0:ac:22:f1:2c:db:64:
62:91:13:b9:40:0f:e0:35:d9:43:86:3a:4b:e1:ca:
29:5c:27:5a:22:06:6b:94:cb:e0:54:4c:bb:fe:1e:
55:c8:dc:33:dc:e1:2a:ce:de:f4:dd:fd:3a:80:0c:
19:2a:3c:9d:fb:a3:67:c5:80:b4:77:d2:c1:8a:2e:
e8:a0:6c:d2:15:b5:1c:af:12:a8:6f:28:41:09:fd:
f8:6f:26:9c:c4:e5:32:13:7d:33:94:ce:f5:5a:a8:
f4:2b:82:e3:b9:54:a7:6f:72:38:45:fb:9c:cb:0d:
90:b7:a3:7d:40:88:a5:f5:aa:2d:be:21:9b:11:30:
ae:65:07:bb:23:51:18:ff:de:79:1f:48:19:e4:c7:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:18:98:C9:3F:82:39:C8:3D:B7:B3:19:5C:91:36:FF:87:E7:43
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/tyIYmMk_gjnIPbezGVyRNv-H50M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.192.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bc:1e:24:dc:a4:6f:d7:bd:84:04:b1:1d:d1:95:7c:9b:ff:
e8:83:d5:67:12:87:f0:e5:07:7b:af:8c:ca:35:ef:6c:1a:41:
1a:22:51:d7:7a:a1:e5:b1:d0:0c:58:87:db:bd:3b:66:06:1d:
77:05:01:3a:f2:b2:aa:f4:98:60:4b:83:a1:0b:11:49:5c:b8:
68:5c:5b:5b:ed:9b:0f:aa:ff:2a:9f:b6:0e:95:9a:83:e1:a9:
34:35:67:88:30:6d:97:f8:25:9f:72:2a:51:50:13:cb:0e:24:
e7:99:ef:f1:74:96:5b:8b:66:90:e1:5b:e4:fb:8a:e4:9a:d7:
5e:e7:6e:4a:b7:a6:a2:c9:e5:5e:47:8b:db:09:24:00:95:b5:
bc:8f:1c:76:28:3d:48:73:3c:9c:a7:c6:dc:e0:76:4e:eb:62:
81:72:ea:fa:52:ba:29:46:6a:98:40:b9:fd:28:57:0b:6d:7e:
3e:9e:54:cd:2c:0e:e5:9b:d7:2e:f7:85:22:6e:d6:de:48:45:
f4:ec:30:84:c9:1e:2f:22:8d:05:7b:63:e5:52:33:39:48:cd:
c7:5a:1d:94:d3:b9:0f:b2:05:1c:19:94:94:d0:0d:d8:e3:0a:
69:ea:86:bf:bd:77:1e:bc:69:72:98:c0:23:bb:7d:5e:63:9a:
16:d6:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:30 2026 by rpki-client