Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1-idKtEyWPNAMJeIijPIWRfu03ys.roa
File: 1-idKtEyWPNAMJeIijPIWRfu03ys.roa (raw, json)
Hash identifier: ZFExyJVdtmrhUYVV87RFw7yeN570axMy9XT8ECtG1ao=
Subject key identifier: FA:27:4A:B4:4C:96:3C:D0:0C:25:E2:22:8C:F2:16:45:FB:B4:DF:2B
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0198EF6EFA12BCE2F8DF23A6D8BEACB4E0B1
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1-idKtEyWPNAMJeIijPIWRfu03ys.roa
Signing time: Thu 28 Aug 2025 06:48:04 +0000
ROA not before: Thu 28 Aug 2025 06:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.100.172.0/22 maxlen: 22
212.100.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:6e:fa:12:bc:e2:f8:df:23:a6:d8:be:ac:b4:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 28 06:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa274ab44c963cd00c25e2228cf21645fbb4df2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:38:72:91:7d:5b:ce:6c:34:67:c3:84:be:
f8:47:9c:23:b1:1f:ae:fc:af:ee:14:b4:bb:5c:86:
14:9a:f7:c5:a0:32:a1:14:74:44:14:59:ba:f2:2e:
1f:dd:30:b6:72:ad:b5:d3:14:8b:9d:94:87:9b:70:
9e:11:03:69:eb:67:14:7d:c5:6d:85:27:2e:ee:a0:
9f:f0:1e:7c:ba:d8:0f:db:27:61:24:8c:f8:7e:27:
eb:84:8d:db:0a:af:cb:0b:19:3a:2b:a9:26:76:84:
cd:0a:26:9c:85:f9:b9:b3:e7:74:b1:39:01:67:dd:
89:91:a1:47:0b:57:96:c6:20:2d:32:32:42:57:76:
3f:9e:b9:65:d4:fc:3d:73:97:ca:f4:12:49:44:b3:
67:18:ad:78:11:e3:ac:27:29:16:94:af:8d:27:8e:
52:ca:0a:e0:ef:6f:05:2c:b3:f0:18:22:5e:95:ae:
ab:a6:3b:94:a5:ea:7e:39:fb:2f:97:c4:46:38:20:
8c:32:dc:57:3d:b9:31:cc:fd:9c:79:06:10:fa:d8:
0d:45:ee:97:3d:1c:f9:ac:35:52:be:92:ce:20:ca:
f4:8d:66:dc:51:fd:68:31:6d:60:db:69:ed:f2:21:
a0:af:17:d2:a0:ae:02:04:f0:03:72:0e:41:8b:2d:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:4A:B4:4C:96:3C:D0:0C:25:E2:22:8C:F2:16:45:FB:B4:DF:2B
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1-idKtEyWPNAMJeIijPIWRfu03ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.172.0/22
212.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:93:fe:44:2c:ac:e8:59:33:85:a4:89:5c:ed:99:9e:ee:84:
9e:cf:f6:67:9c:93:f9:58:c4:96:77:a3:8d:f8:ce:ed:fa:d7:
8f:26:85:c1:71:9f:c8:59:dd:45:82:29:3e:bd:be:80:08:cf:
eb:8f:70:39:55:34:ac:8b:b8:16:78:21:02:c8:f7:d5:f7:dc:
e5:7c:41:6a:e5:ec:ed:79:56:51:6e:16:2f:9a:db:e2:e4:6c:
66:f1:22:23:9b:b3:d9:1d:76:47:2b:83:fd:c0:30:a7:a3:17:
ec:36:85:c8:76:79:67:19:7a:cd:09:62:ce:79:c6:d2:de:b6:
fd:22:08:fc:b4:8b:2f:59:ef:13:3f:fe:f5:f2:c7:43:59:3c:
27:92:36:f2:a4:b1:56:b8:7e:a3:67:08:27:9c:1d:9d:97:6a:
72:3a:bb:0e:46:68:22:17:b9:dd:f2:f3:1f:31:9c:a3:ee:94:
e6:31:8c:f5:cd:2a:c1:a5:a2:d6:3a:fe:bd:4f:66:75:d0:43:
cb:93:10:7f:f3:33:e4:8c:25:77:3a:7a:a8:02:4e:6e:0a:d4:
82:ad:15:c1:c5:16:da:3b:69:6e:b6:14:69:ce:9b:26:71:22:
37:4f:8c:2a:e2:19:f5:04:17:e4:61:01:78:3a:de:76:aa:cc:
35:af:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:11:54 2025 by rpki-client