Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/FPr3CSTPTG3WcX0hY9kv8oCNP0o.roa
File: FPr3CSTPTG3WcX0hY9kv8oCNP0o.roa (raw, json)
Hash identifier: lAL35wvI6bQCDKnV3kyebMtJMd1Ob5EhjuZvD+GyMK4=
Subject key identifier: 14:FA:F7:09:24:CF:4C:6D:D6:71:7D:21:63:D9:2F:F2:80:8D:3F:4A
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01990F247FDA583AF70A73D7F15BB8F6BE40
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/FPr3CSTPTG3WcX0hY9kv8oCNP0o.roa
Signing time: Wed 03 Sep 2025 10:34:34 +0000
ROA not before: Wed 03 Sep 2025 10:34:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10111
IP address blocks: 212.100.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:24:7f:da:58:3a:f7:0a:73:d7:f1:5b:b8:f6:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 3 10:34:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14faf70924cf4c6dd6717d2163d92ff2808d3f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:0d:73:e4:29:24:7e:fb:e1:23:d7:ce:90:
ee:68:6e:f3:f3:aa:49:bf:eb:7d:15:08:3a:73:69:
36:b5:b9:53:8d:53:f5:e6:cf:b3:a5:d0:3d:1f:b9:
5b:48:f9:16:08:36:c5:62:7f:ba:b4:0f:f5:db:5e:
35:f4:01:36:82:40:73:a3:10:ba:0b:a4:40:77:dd:
d1:b1:23:24:4a:01:08:83:5f:a2:84:0e:28:0c:88:
e4:ec:c3:47:af:da:7a:07:d5:0e:c4:25:1e:1e:0b:
a0:de:59:ea:8b:7a:79:bb:74:05:33:70:5b:f6:5b:
ca:a8:ec:d3:24:8c:03:25:49:be:65:5d:0f:95:e7:
89:21:b6:73:99:98:3f:a2:62:62:11:27:bb:55:ce:
c4:49:26:91:81:6b:ff:d2:4b:a8:22:dd:26:86:e2:
bc:42:5e:22:74:7e:db:85:46:4c:81:a6:ca:eb:92:
37:c6:b5:28:f5:d5:ad:5a:4f:67:9e:91:15:73:77:
8a:96:ef:b1:6c:a9:27:15:75:20:e7:63:89:62:2c:
90:cf:68:fd:3c:ee:05:b1:08:24:bb:85:12:aa:ba:
1f:b5:ec:b0:a4:ce:6e:55:7d:a4:71:94:dd:a6:5d:
76:aa:a3:61:ac:d6:1f:88:24:7f:73:46:f1:8d:83:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:F7:09:24:CF:4C:6D:D6:71:7D:21:63:D9:2F:F2:80:8D:3F:4A
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/FPr3CSTPTG3WcX0hY9kv8oCNP0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f5:67:4b:3f:d2:47:06:ef:10:dc:04:0f:bb:8d:22:8c:20:
0f:ea:76:90:31:9d:f2:e4:02:ce:e2:d4:1e:16:9d:fb:4c:a4:
f2:4e:ac:a1:f3:2f:80:16:bb:aa:e9:37:c2:80:81:b9:16:e0:
f4:ae:bd:1e:d4:11:71:8d:b1:60:d4:75:04:97:89:18:4f:4f:
b2:a6:6a:dd:26:71:f3:86:56:0c:5d:1c:fd:93:7d:66:3c:f2:
a8:99:5a:57:73:d4:62:46:00:d0:30:4e:38:03:3c:32:f2:1c:
e2:90:ce:a8:7a:c5:ef:f1:af:de:f8:eb:2d:19:e4:d7:b5:28:
03:68:dc:1c:ae:16:d0:3a:29:3a:85:71:1b:6e:22:d8:04:e2:
7e:97:b4:7e:b2:e2:0a:fa:7e:13:05:28:ca:e0:13:a9:d7:5e:
33:6d:99:cb:92:b3:91:9c:e5:6e:17:2d:2e:51:f1:9f:82:28:
7e:9c:79:2a:ad:24:12:d6:ce:71:41:09:df:ae:56:29:ce:96:
1f:da:b7:82:72:2e:df:8a:06:72:04:94:92:b6:f6:a2:0f:3f:
c5:9f:8c:47:54:99:1b:38:8f:40:2b:a9:9c:30:30:eb:45:0d:
80:f2:16:be:51:60:48:96:f9:6f:56:de:73:f5:66:55:a0:8e:
2e:15:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:10:04 2025 by rpki-client