Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/9WyEzQIjKdyy934SONiQPqcf53Y.roa
File: 9WyEzQIjKdyy934SONiQPqcf53Y.roa (raw, json)
Hash identifier: PRztYbhnuer59pLYZZm6haITyZSS1wptsUQ7sv9ibfY=
Subject key identifier: F5:6C:84:CD:02:23:29:DC:B2:F7:7E:12:38:D8:90:3E:A7:1F:E7:76
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A04501EF1B9FF051F5A6A6CC54644E0C9D
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/9WyEzQIjKdyy934SONiQPqcf53Y.roa
Signing time: Thu 27 Aug 2026 20:55:49 +0000
ROA not before: Thu 27 Aug 2026 20:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 212.100.165.0/24 maxlen: 24
212.100.175.0/24 maxlen: 24
212.100.176.0/24 maxlen: 24
212.100.179.0/24 maxlen: 24
212.100.189.0/24 maxlen: 24
212.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:01:ef:1b:9f:f0:51:f5:a6:a6:cc:54:64:4e:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 27 20:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f56c84cd022329dcb2f77e1238d8903ea71fe776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:97:4d:1a:38:4f:d6:e4:4f:82:a8:26:d7:
ef:a0:b1:7e:c5:c6:25:31:9d:5f:14:8b:91:d2:0c:
e9:d0:2d:70:24:6b:68:53:9d:c3:78:92:2c:ea:f2:
11:9c:28:01:f2:be:5b:61:06:f9:47:83:4e:5b:1b:
df:c5:00:dd:73:2a:0e:26:c8:0c:75:85:1a:3e:1f:
fd:63:94:ba:ab:ce:57:62:9c:63:7d:6f:89:8f:d6:
dd:89:92:87:34:a8:8c:09:2f:0b:0b:d4:c2:de:d5:
01:bb:39:3c:c8:8a:88:54:66:8e:9e:c0:eb:b1:71:
cf:56:a0:16:0e:d9:a1:d6:0e:e7:cc:56:42:6f:08:
48:83:0b:bd:33:e9:3e:57:b6:fc:15:da:31:99:44:
eb:e0:e2:60:21:da:18:38:f2:d9:3b:fe:82:cf:1e:
8f:2c:4f:46:4f:37:42:2c:4a:dd:13:3a:ac:de:b4:
c6:b5:af:3d:cc:c5:ad:f5:3a:51:05:6f:6c:ce:dd:
98:98:03:de:b1:d3:09:0e:a1:d3:e8:8d:5a:ea:7e:
b2:f1:66:c0:8e:a7:1f:e6:ce:25:46:36:e2:af:96:
05:52:55:19:ad:e1:b9:56:46:87:d8:e5:4a:90:30:
f5:08:91:6e:49:9c:8a:f8:37:f5:d2:b0:2a:58:e3:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:84:CD:02:23:29:DC:B2:F7:7E:12:38:D8:90:3E:A7:1F:E7:76
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/9WyEzQIjKdyy934SONiQPqcf53Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.165.0/24
212.100.175.0-212.100.176.255
212.100.179.0/24
212.100.189.0/24
212.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:dd:f4:d2:0f:13:da:d1:8c:6d:6a:f1:c5:92:f8:3d:f0:97:
4f:eb:02:2a:58:ac:e4:9c:bc:3a:2d:92:79:6c:4f:ab:26:b2:
a4:30:24:54:7b:fb:42:f0:76:19:5d:41:20:47:cf:2f:f7:5d:
ab:53:70:c6:76:c9:df:92:5d:10:25:a7:d0:c1:04:9e:c2:bb:
00:17:2d:76:e5:2a:a4:e8:91:01:f9:77:89:e0:a4:fb:c1:ab:
df:8d:f7:d6:09:3d:d2:c0:20:57:86:de:f4:ce:25:b1:a5:f5:
a1:59:15:ca:63:b7:c3:4d:26:0b:f3:fd:5d:46:1e:17:8b:f1:
87:9a:14:2c:df:d7:55:2e:85:72:ca:2c:96:8d:98:3f:c4:70:
7a:2f:06:d2:00:49:42:04:f4:b1:75:59:c8:43:0c:4a:75:dc:
3e:53:c0:7b:77:69:77:48:82:ef:a8:68:27:cd:d5:b7:eb:5a:
ff:2e:8c:f4:20:52:71:ca:d4:cf:cf:3b:07:55:95:3b:77:8c:
84:e2:14:ef:3f:8a:48:5d:15:7f:f2:e1:cd:fb:6e:c5:08:c0:
04:14:26:04:94:de:a4:e7:75:b8:99:c7:bd:0c:89:06:02:c5:
87:2f:39:0f:6e:4d:18:4d:66:1c:16:66:4b:32:f1:f2:93:3d:
7a:ae:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:17:52 2026 by rpki-client