Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TQY7akU130oo67n82d-ykDHfoSg.roa
File: TQY7akU130oo67n82d-ykDHfoSg.roa (raw, json)
Hash identifier: AXvCT8Iivy/TjEJ4NtkykOKLnXNWkYcMrnOcONDKwno=
Subject key identifier: 4D:06:3B:6A:45:35:DF:4A:28:EB:B9:FC:D9:DF:B2:90:31:DF:A1:28
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A04DC8117626A6749F29ECF303D1726D72
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TQY7akU130oo67n82d-ykDHfoSg.roa
Signing time: Sat 29 Aug 2026 13:49:12 +0000
ROA not before: Sat 29 Aug 2026 13:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 222.167.245.0/24 maxlen: 24
222.167.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:c8:11:76:26:a6:74:9f:29:ec:f3:03:d1:72:6d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 29 13:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d063b6a4535df4a28ebb9fcd9dfb29031dfa128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:f2:d9:53:1d:8b:62:59:bf:ed:cd:29:5b:
ac:cd:e2:6e:e4:f7:60:2f:a9:8e:1c:e9:ba:3c:9b:
76:80:5e:5d:96:fa:90:12:7e:64:47:a5:47:33:ac:
ec:89:a1:05:60:a3:7a:55:d6:fc:02:a9:1a:29:d7:
68:b6:71:66:0c:68:8b:1f:a1:89:b2:38:ea:62:85:
48:2d:5e:e1:83:1f:59:7e:ea:6e:ce:a2:1f:52:86:
0c:76:58:85:58:1a:36:45:93:f0:71:55:60:b5:93:
8f:df:1a:a7:c0:ad:8a:78:91:03:cc:91:ef:6c:0a:
b6:89:55:10:ac:7a:7d:00:c1:84:ac:cf:ac:04:e4:
18:b1:90:50:98:ef:f5:8d:f9:11:1b:24:f3:6b:1a:
83:cd:8b:61:1b:38:a3:b1:0c:3b:42:fd:11:df:f4:
28:b3:a4:d2:af:d8:9b:ec:2d:61:6c:00:f0:99:35:
e4:31:d3:b4:5d:fb:37:fd:c8:5e:0c:48:0e:04:bf:
ad:62:02:32:4f:26:a8:ed:85:da:cc:a3:c3:d4:c0:
e3:04:df:2a:bb:18:ef:4e:71:67:28:a3:21:09:2a:
20:7a:71:47:4c:62:11:a1:9e:0c:01:a7:9e:91:2a:
5e:26:8c:e4:f2:2c:84:de:38:be:d8:68:19:40:41:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:06:3B:6A:45:35:DF:4A:28:EB:B9:FC:D9:DF:B2:90:31:DF:A1:28
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TQY7akU130oo67n82d-ykDHfoSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.245.0/24
222.167.248.0/24
Signature Algorithm: sha256WithRSAEncryption
65:42:1c:a3:d7:63:ef:fd:f1:a8:5e:38:41:ef:d7:48:ed:6c:
81:6b:6f:f0:10:e1:d9:ec:f3:af:d9:a4:e6:61:a1:99:45:70:
10:88:e1:a6:19:9c:00:c2:96:f6:59:52:42:0c:c9:9b:14:87:
4d:3b:90:c4:a8:6f:68:5d:0e:61:22:ba:b4:7b:aa:4a:ec:45:
b8:58:81:c8:d9:e4:03:72:0b:3a:93:4b:23:8e:b6:16:8e:db:
fe:05:b2:e4:8f:42:88:be:5d:07:fa:b7:93:e9:11:0e:73:c9:
44:74:d4:92:a7:ce:07:7e:27:b2:70:4a:e9:dd:5e:d9:f5:ef:
65:19:33:ee:12:c3:92:28:f6:21:f8:7b:19:f2:24:9c:17:45:
58:88:c3:03:76:4f:fd:3e:e7:55:05:a0:9f:b7:d7:d6:7b:15:
3d:56:1b:ee:d6:d6:da:1a:d6:d6:f8:6d:44:fd:2f:38:5a:dd:
f9:1e:4c:9f:29:e2:4d:9c:a8:64:51:d0:e9:86:9c:9d:aa:5a:
02:15:1f:95:ce:81:43:62:9b:52:55:75:47:37:a9:e9:23:b9:
ac:fd:e8:3d:ae:42:8f:45:d1:e0:7c:a5:6b:11:d1:0b:2b:24:
27:d5:b0:77:69:ab:4f:8e:75:d7:43:80:2d:1d:13:3d:1e:30:
d4:fe:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:27:59 2026 by rpki-client