Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/B6Yf9dQCGeS0-fjWBIc9KWpacVY.roa
File:                     B6Yf9dQCGeS0-fjWBIc9KWpacVY.roa (raw, json)
Hash identifier:          cXvoNRxBJmQPiHJu+8bv88xqOF7yJq1FKhX1dQd3Gsw=
Subject key identifier:   07:A6:1F:F5:D4:02:19:E4:B4:F9:F8:D6:04:87:3D:29:6A:5A:71:56
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019C82AA5714157ECF7564D2692B11D73621
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/B6Yf9dQCGeS0-fjWBIc9KWpacVY.roa
Signing time:             Sun 22 Feb 2026 00:05:27 +0000
ROA not before:           Sun 22 Feb 2026 00:05:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206300
IP address blocks:        212.100.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:82:aa:57:14:15:7e:cf:75:64:d2:69:2b:11:d7:36:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Feb 22 00:05:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07a61ff5d40219e4b4f9f8d604873d296a5a7156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:5c:bb:97:b0:a7:91:52:09:28:0f:73:8a:
                    a3:99:ea:65:0e:d0:91:14:b2:3c:0e:90:c8:fb:47:
                    27:44:13:54:80:bf:d6:ef:cd:d6:91:a0:de:61:6b:
                    38:a5:b1:6f:63:f1:e6:8b:aa:69:69:a4:9d:28:37:
                    b8:7b:7c:f0:54:d9:88:02:64:39:e4:02:d0:73:76:
                    3b:c6:7f:4b:d9:57:56:18:af:e4:7e:cc:99:17:87:
                    d2:79:1d:34:b8:8b:5d:97:98:8e:2a:3d:da:f8:e4:
                    b3:01:69:11:46:40:e5:e2:1b:e5:da:96:14:48:15:
                    34:0b:16:45:21:9d:04:15:80:80:87:85:c3:bb:ba:
                    78:43:e0:23:ef:44:cc:28:1f:5b:c3:1e:87:3b:32:
                    c3:f9:83:e3:95:07:aa:12:39:02:09:fc:49:03:b4:
                    a7:bb:c7:94:3b:80:d5:e7:8a:4e:6a:46:d0:72:2c:
                    2f:0b:8c:f9:35:2b:fc:e6:ee:c5:f7:fa:a7:4f:76:
                    c4:57:1b:47:6c:8f:b5:09:bf:1e:db:9d:69:c7:ec:
                    88:a0:99:a9:74:90:b6:a0:bd:61:89:4a:5d:96:90:
                    d4:c2:d5:21:07:8f:c8:eb:8f:d9:92:e4:10:4c:f3:
                    72:39:77:20:0f:ca:78:05:d8:a9:d1:a0:24:06:1e:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A6:1F:F5:D4:02:19:E4:B4:F9:F8:D6:04:87:3D:29:6A:5A:71:56
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/B6Yf9dQCGeS0-fjWBIc9KWpacVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:2d:2e:a8:74:b9:8b:5c:0d:65:a9:e5:7f:e2:69:8b:48:
         87:74:16:2e:ee:97:bb:6d:d9:21:71:ad:db:e2:63:b0:53:44:
         e8:dc:c2:b5:58:ca:05:68:6f:d4:81:f4:55:c2:cc:7d:c5:9b:
         ba:d7:9d:82:85:ab:2f:85:25:85:f6:40:1a:9d:7d:90:b4:23:
         2c:a4:c1:ba:e3:89:56:bb:b9:8a:88:5b:f1:e1:c4:1e:88:09:
         50:f0:57:92:d3:a6:10:2c:f4:6c:f3:20:9e:91:18:05:2b:d8:
         9f:6e:a6:28:84:59:4e:20:7a:12:12:54:41:18:44:a7:e7:74:
         96:f3:7d:09:d8:fd:66:88:1f:13:10:75:01:85:3c:05:0a:d7:
         fc:c1:47:42:a8:2d:c3:f9:e1:70:e8:6e:2a:23:35:f3:66:85:
         c5:70:70:5d:54:11:4b:95:00:49:2e:20:36:a2:c4:41:3b:9f:
         75:86:f5:77:dc:7e:16:ee:9d:2f:31:6d:0c:1d:5d:6f:3b:63:
         ea:87:07:45:91:dd:fe:cf:9c:5b:d8:4b:b4:1e:fd:75:b7:ac:
         ae:48:98:2c:4b:a8:c7:30:c0:41:26:74:99:f9:d7:3d:c3:ee:
         eb:87:91:10:90:49:44:2e:f7:1f:52:8d:6d:7a:b2:2d:75:15:
         eb:8c:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 11:59:29 2026 by rpki-client