Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/y8_nvxCR-Qd7EcSmQHcXdPSJCFs.roa
File: y8_nvxCR-Qd7EcSmQHcXdPSJCFs.roa (raw, json)
Hash identifier: H747siaU4a7zYAxsCbJPNhBXSGCvgDw/VQ9bDYpmQXw=
Subject key identifier: CB:CF:E7:BF:10:91:F9:07:7B:11:C4:A6:40:77:17:74:F4:89:08:5B
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A1C1066423CDD9ED1787A795B1B0FF61DB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/y8_nvxCR-Qd7EcSmQHcXdPSJCFs.roa
Signing time: Mon 09 Nov 2026 15:56:23 +0000
ROA not before: Mon 09 Nov 2026 15:56:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398478
IP address blocks: 222.167.194.0/24 maxlen: 24
222.167.197.0/24 maxlen: 24
222.167.200.0/24 maxlen: 24
222.167.204.0/23 maxlen: 23
222.167.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:06:64:23:cd:d9:ed:17:87:a7:95:b1:b0:ff:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Nov 9 15:56:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbcfe7bf1091f9077b11c4a640771774f489085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:82:88:cc:33:a5:c3:92:28:c4:70:c8:ad:
81:e6:d7:74:92:79:ee:63:3e:4e:17:cc:5a:d4:e9:
60:6c:2a:1c:04:da:9d:94:fd:1a:77:09:f5:a2:ce:
1c:8c:57:29:e2:f8:1c:31:6d:f0:dd:a6:ef:8b:57:
14:f5:06:1f:a8:b6:c6:e8:84:97:27:55:a1:47:ec:
c0:4b:34:04:c7:f4:5b:82:d6:b3:26:e1:c6:b4:15:
50:8d:5f:d9:5d:fa:53:88:71:5c:c8:c1:0f:a1:6d:
3f:19:fd:04:02:39:b4:9e:3f:87:e5:5a:29:6a:4b:
26:7d:bc:66:a0:24:f6:86:c6:25:40:74:06:f2:a4:
e6:b7:3e:e9:3b:05:2d:04:50:20:e0:53:2a:f4:34:
51:2a:ec:44:9f:81:c8:0a:5d:b6:f3:e6:69:97:5e:
cd:8a:56:63:61:5f:18:9c:de:b1:93:28:0d:57:9c:
26:14:ea:46:eb:d3:39:86:9f:5c:a1:b1:56:15:65:
29:71:f1:0f:fe:b3:72:2f:54:9c:83:6a:30:94:e6:
ea:93:f5:09:4d:c0:f9:48:d7:63:07:9d:bf:bc:14:
b5:c1:e7:d0:35:5e:4c:ea:d8:e3:b3:bb:c8:4b:58:
03:19:62:32:45:5e:d2:6a:b5:b6:73:fe:f2:18:34:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CF:E7:BF:10:91:F9:07:7B:11:C4:A6:40:77:17:74:F4:89:08:5B
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/y8_nvxCR-Qd7EcSmQHcXdPSJCFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.194.0/24
222.167.197.0/24
222.167.200.0/24
222.167.204.0-222.167.206.255
Signature Algorithm: sha256WithRSAEncryption
85:5c:2a:61:cc:b9:c4:de:0b:28:05:5a:53:40:41:1e:ff:6f:
a8:3f:33:96:cb:f7:ed:5a:da:e2:26:7e:0c:3e:14:3c:b1:15:
ff:a0:dd:a6:9e:ad:f7:64:45:b9:49:b6:b3:ff:94:a3:11:79:
a5:c5:6c:0c:34:57:fb:f9:df:46:cb:75:de:39:b8:45:d0:ec:
14:6e:d2:6b:49:35:98:90:59:b3:aa:1d:55:f4:fb:c2:73:04:
62:b0:13:6e:31:6f:d1:32:08:1e:0d:22:c5:d3:3a:ac:a8:fd:
16:7a:75:f3:36:98:1d:8c:5c:a0:6f:6c:19:5a:87:4c:0f:6c:
57:06:78:c1:16:3f:3b:22:6a:28:85:90:47:16:da:2e:01:bf:
7f:fe:bd:69:f8:e3:04:cc:e7:d6:45:69:c2:76:d5:95:9e:4a:
d3:90:63:23:f7:5c:3a:f7:9d:8f:fa:27:ec:ad:4f:d5:b0:09:
d3:3e:1b:66:31:a6:07:64:8c:96:fa:16:8f:1b:fd:33:5d:b9:
5f:c9:b4:e1:62:ad:23:99:27:60:c3:81:88:cc:44:31:89:1b:
57:4d:60:f6:4e:c7:4b:c0:38:55:77:34:8f:f9:ae:22:1f:8c:
5b:a2:99:f0:e4:dc:07:45:a9:3a:9c:91:fb:f2:ae:7f:bd:8d:
62:6e:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:43:09 2026 by rpki-client