Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/mSeqrM6ax77e1mH4N20zXtId-dc.roa
File: mSeqrM6ax77e1mH4N20zXtId-dc.roa (raw, json)
Hash identifier: CxkChAE9kvtH6F03AdsKyAbq+7FWtLM6nALOJbgV1tM=
Subject key identifier: 99:27:AA:AC:CE:9A:C7:BE:DE:D6:61:F8:37:6D:33:5E:D2:1D:F9:D7
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019812A83F0D2026072C1F07CC4DF7A5E1A0
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/mSeqrM6ax77e1mH4N20zXtId-dc.roa
Signing time: Wed 16 Jul 2025 09:54:32 +0000
ROA not before: Wed 16 Jul 2025 09:54:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 212.100.168.0/24 maxlen: 24
212.100.169.0/24 maxlen: 24
212.100.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:a8:3f:0d:20:26:07:2c:1f:07:cc:4d:f7:a5:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jul 16 09:54:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9927aaacce9ac7beded661f8376d335ed21df9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:e6:68:92:4e:bb:ef:25:00:23:46:2d:2c:
b8:a4:10:af:72:3b:f5:4e:01:4b:82:a2:f1:d9:dc:
ba:87:5d:6b:32:ce:95:93:54:72:98:1b:2b:29:13:
84:9a:58:97:e4:74:d3:63:61:48:a0:ef:eb:a0:2a:
3e:5d:25:e4:83:78:33:30:55:b3:d7:18:18:d8:cb:
30:22:cd:2d:6a:89:c9:a6:50:12:99:d9:ba:53:16:
5d:22:1a:e6:a2:f8:c6:df:f9:f7:ab:f4:00:cc:88:
f6:f8:8a:33:9a:f2:23:df:44:10:ed:36:7a:8e:f4:
b3:84:5c:6c:d7:98:ec:43:ba:15:24:72:be:6f:17:
33:6e:1f:4c:3d:f1:56:4a:4d:9f:be:e2:01:9f:0f:
61:53:f6:44:3e:63:2a:ed:df:b6:c6:34:2d:b7:4e:
fe:81:63:c1:7f:7a:34:d7:cf:16:8e:cb:02:d7:8c:
b6:3b:22:b6:16:fc:99:6e:fa:02:c8:0e:b0:22:7d:
17:f9:5c:4a:b1:1d:43:b1:58:33:01:83:14:01:69:
01:cf:6c:d1:e8:27:c3:96:f4:a2:ab:67:ff:40:f5:
9e:ab:db:f3:8c:4a:c2:5f:aa:a1:e7:52:c5:a2:23:
36:b1:35:24:e2:66:4a:b2:e6:ee:56:6f:55:98:fe:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:AA:AC:CE:9A:C7:BE:DE:D6:61:F8:37:6D:33:5E:D2:1D:F9:D7
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/mSeqrM6ax77e1mH4N20zXtId-dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.168.0/23
212.100.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:30:87:33:a0:c3:df:88:54:fb:7d:2f:bc:80:e5:ef:7f:80:
29:8b:35:18:f2:a9:5a:d2:69:47:e0:ec:f6:63:9c:26:32:d3:
52:c2:bd:95:f4:e0:81:ba:fe:08:52:97:1a:3c:38:21:75:db:
16:8e:a6:53:97:55:b8:31:0d:5d:5f:12:d6:56:a1:9d:b4:70:
17:9f:ef:7c:54:53:8f:da:1f:c3:94:ad:d3:fa:c1:0b:a7:ce:
bb:cc:b6:f9:79:0f:10:ad:1f:51:40:ce:ac:32:33:4f:90:e8:
05:a7:9f:2e:63:e4:56:00:85:5a:4f:85:b8:30:b0:1a:0f:1c:
55:f9:0e:da:66:67:b5:3a:9a:43:07:2d:f3:eb:54:65:83:4a:
5e:81:0b:ea:67:55:bd:06:28:5c:65:9d:c2:e2:09:d8:8a:c0:
a2:40:75:e8:f8:a8:cb:a2:94:f4:a9:15:83:39:99:70:a8:5d:
bf:2f:4a:eb:ca:b2:f7:ef:37:df:f8:05:e0:82:e7:d6:cb:44:
ac:26:de:78:7e:3c:3b:96:41:d2:e3:71:36:7a:f2:04:ca:09:
82:3b:7b:14:b3:a8:63:d0:64:e9:f2:94:36:30:9f:55:7e:e4:
62:c2:f3:ad:a7:f8:3b:a3:04:55:1d:bd:82:9e:da:09:1b:f8:
65:31:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:33:45 2025 by rpki-client