Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TRKH1TE6Wx2-q_jxnnKVpda3BjI.roa
File: TRKH1TE6Wx2-q_jxnnKVpda3BjI.roa (raw, json)
Hash identifier: 3Msf9lFY/c7Nxyrt7cbHQgNLt+yHKm9nl4QWIZv+9Os=
Subject key identifier: 4D:12:87:D5:31:3A:5B:1D:BE:AB:F8:F1:9E:72:95:A5:D6:B7:06:32
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A053037D7CF65DC830007E89A05C67825C
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TRKH1TE6Wx2-q_jxnnKVpda3BjI.roa
Signing time: Sun 30 Aug 2026 14:12:12 +0000
ROA not before: Sun 30 Aug 2026 14:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 222.167.226.0/24 maxlen: 24
222.167.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:03:7d:7c:f6:5d:c8:30:00:7e:89:a0:5c:67:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 30 14:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d1287d5313a5b1dbeabf8f19e7295a5d6b70632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:b8:40:16:65:95:ab:68:a5:be:f0:2a:9c:
c0:e7:1d:63:e3:f3:89:f7:26:90:08:7c:bd:b3:63:
01:bf:f3:04:ed:d4:6b:4e:d0:84:be:21:35:c0:c9:
7f:c9:84:9f:bb:a1:4c:06:93:f3:f4:f3:e4:d5:65:
0f:79:db:92:84:2f:33:54:fd:62:3c:77:6a:da:bb:
35:1d:8d:8e:2a:36:6a:ff:2f:cd:9b:65:87:73:a9:
80:af:68:e3:eb:9d:b8:59:ab:40:3b:e7:7f:03:07:
16:9c:be:7b:a5:ae:ba:56:67:0e:90:98:22:9f:8e:
9a:e2:62:a6:c9:01:ba:05:df:d4:47:f6:4e:0d:73:
9b:ee:32:3d:3f:78:43:fd:12:96:23:54:a2:d5:73:
cf:b1:ae:c7:29:6b:e3:8e:75:42:bd:78:2b:8f:4f:
1a:9f:ca:6a:77:88:40:3e:e2:2d:49:28:fe:54:c7:
89:e4:0a:75:d6:76:e8:7f:af:c5:4f:7e:ef:3c:64:
ff:02:db:ec:36:09:14:aa:13:e3:0c:df:b5:4a:fa:
a5:f2:6c:a4:19:27:45:ed:f7:2a:5c:6f:a9:51:95:
ad:46:f3:d0:f8:9a:73:e3:06:c4:ad:fe:cd:c2:77:
22:51:46:a5:39:77:c5:8e:f7:09:1e:f7:bd:23:c3:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:87:D5:31:3A:5B:1D:BE:AB:F8:F1:9E:72:95:A5:D6:B7:06:32
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TRKH1TE6Wx2-q_jxnnKVpda3BjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.226.0/24
222.167.230.0/24
Signature Algorithm: sha256WithRSAEncryption
54:48:4c:d6:d1:ea:26:b6:88:74:92:07:d3:13:9e:0a:09:b0:
45:c7:63:f8:37:d4:1d:a4:7f:b6:b8:45:48:24:cd:1a:58:31:
a6:7a:f0:47:76:9f:45:83:65:c9:94:b2:e1:79:e7:5c:29:0b:
48:e0:e8:aa:23:b9:2a:b1:a7:79:4c:98:c6:65:34:7d:53:f6:
d8:4f:5d:12:0c:d1:31:93:20:c0:4b:68:cd:4b:ea:bb:85:e8:
50:78:8a:9b:b5:51:38:79:3f:c0:63:66:33:dd:f7:26:e7:5e:
fa:7f:44:1b:17:ab:90:1c:58:d8:ba:a3:52:a1:06:75:16:15:
c0:04:ef:26:7a:57:42:9c:11:39:b2:c6:ed:2b:ca:8f:94:68:
d9:45:7a:bc:26:2a:9b:ca:91:76:cf:a6:65:98:00:2a:c8:ec:
d1:ea:d8:02:5e:6b:b2:e0:0a:87:13:d5:9d:19:70:94:a2:42:
2f:7f:82:18:66:2f:2f:51:d2:2d:71:bb:d4:d8:42:cf:47:60:
30:8a:37:4c:d8:b4:00:11:5d:0d:f3:dc:1e:16:4b:3d:5e:95:
8e:4a:cf:d3:f2:ad:5e:7d:96:53:e8:57:61:65:59:34:da:54:
e7:64:75:c1:57:fc:c8:e8:5a:38:d7:16:0c:6f:4a:31:fe:20:
9c:ee:ea:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBTA3189l3IMAB+iaBcZ4JcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwODMwMTQxMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDEyODdkNTMxM2E1YjFkYmVhYmY4ZjE5ZTcyOTVhNWQ2YjcwNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdK4QBZllatopb7wKpzA5x1j4/OJ
9yaQCHy9s2MBv/ME7dRrTtCEviE1wMl/yYSfu6FMBpPz9PPk1WUPeduShC8zVP1i
PHdq2rs1HY2OKjZq/y/Nm2WHc6mAr2jj6524WatAO+d/AwcWnL57pa66VmcOkJgi
n46a4mKmyQG6Bd/UR/ZODXOb7jI9P3hD/RKWI1Si1XPPsa7HKWvjjnVCvXgrj08a
n8pqd4hAPuItSSj+VMeJ5Ap11nbof6/FT37vPGT/AtvsNgkUqhPjDN+1Svql8myk
GSdF7fcqXG+pUZWtRvPQ+Jpz4wbErf7NwnciUUalOXfFjvcJHve9I8Oy2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE0Sh9UxOlsdvqv48Z5ylaXWtwYyMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvVFJLSDFURTZXeDItcV9qeG5uS1ZwZGEzQmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA3qfiAwQA
3qfmMA0GCSqGSIb3DQEBCwUAA4IBAQBUSEzW0eomtoh0kgfTE54KCbBFx2P4N9Qd
pH+2uEVIJM0aWDGmevBHdp9Fg2XJlLLheedcKQtI4OiqI7kqsad5TJjGZTR9U/bY
T10SDNExkyDAS2jNS+q7hehQeIqbtVE4eT/AY2Yz3fcm5176f0QbF6uQHFjYuqNS
oQZ1FhXABO8meldCnBE5ssbtK8qPlGjZRXq8JiqbypF2z6ZlmAAqyOzR6tgCXmuy
4AqHE9WdGXCUokIvf4IYZi8vUdItcbvU2ELPR2AwijdM2LQAEV0N89weFks9XpWO
Ss/T8q1efZZT6FdhZVk02lTnZHXBV/zI6Fo41xYMb0ox/iCc7uoV
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:20 2026 by rpki-client