Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/FinDiLMCVByQtP3Vsfnw_uy3hmI.roa
File: FinDiLMCVByQtP3Vsfnw_uy3hmI.roa (raw, json)
Hash identifier: xvS9bdIj99FFNXS3MCGtShC5ckObf7o75hFF8hhz9vk=
Subject key identifier: 16:29:C3:88:B3:02:54:1C:90:B4:FD:D5:B1:F9:F0:FE:EC:B7:86:62
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019A0FF89F966BA6E0773BDEAF4DE23AC566
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/FinDiLMCVByQtP3Vsfnw_uy3hmI.roa
Signing time: Thu 23 Oct 2025 07:29:03 +0000
ROA not before: Thu 23 Oct 2025 07:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.172.0/22 maxlen: 22
212.100.180.0/22 maxlen: 22
212.100.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:f8:9f:96:6b:a6:e0:77:3b:de:af:4d:e2:3a:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 23 07:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1629c388b302541c90b4fdd5b1f9f0feecb78662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:22:93:a4:20:87:7c:3f:74:e7:d7:73:b3:
52:19:28:ff:44:89:11:58:34:6f:b9:a2:96:27:ac:
a1:d3:e5:e8:7e:12:80:90:2f:eb:8c:53:06:08:be:
ce:22:6d:55:34:ba:29:85:77:66:e3:01:f9:be:8b:
7d:dc:5b:ab:70:b0:52:c7:70:c1:ae:7e:f0:95:c2:
fc:c3:e5:6b:e5:e3:da:e6:49:63:e3:5d:bf:71:b4:
53:f7:da:0e:03:b0:59:bc:96:ab:2b:2a:da:b3:8f:
77:07:1e:d8:11:2d:96:61:db:f2:d7:45:b5:54:ab:
8b:d5:da:d8:c4:60:9b:c4:28:4b:70:04:22:ff:63:
9e:df:03:ef:a2:85:cc:3f:12:18:66:5f:2f:c8:88:
04:6c:66:aa:8c:f3:19:7d:7e:af:77:6e:dd:0a:94:
f0:a9:ee:88:59:31:25:ae:94:5a:c4:3d:45:b7:ea:
87:14:27:05:2e:cd:a3:c1:0c:07:01:f0:40:7d:6f:
8a:7c:8b:43:24:d9:e5:73:b4:f4:3d:39:0d:7c:27:
24:8b:78:39:2c:cf:b2:fc:c7:2c:75:12:f5:68:12:
45:43:fe:0c:71:46:55:16:04:93:66:ec:6b:0a:94:
35:f2:7b:ba:45:48:28:ae:84:fa:27:f3:ba:9a:0c:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:C3:88:B3:02:54:1C:90:B4:FD:D5:B1:F9:F0:FE:EC:B7:86:62
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/FinDiLMCVByQtP3Vsfnw_uy3hmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.172.0/22
212.100.180.0-212.100.187.255
Signature Algorithm: sha256WithRSAEncryption
bf:15:22:da:72:52:06:12:7e:34:d6:06:3e:09:34:cf:b2:fe:
87:eb:12:b2:3c:2b:d4:d8:cd:6f:b0:f7:da:e5:02:9d:21:13:
5d:91:54:ec:53:de:4c:76:f9:60:f5:5c:e3:40:25:c4:f6:78:
0b:e1:92:52:4f:9d:74:a1:36:b7:20:81:04:4c:66:28:bf:ae:
83:bd:c4:c6:76:40:1c:58:15:74:7f:f9:a2:23:29:96:0b:a8:
8a:ef:e3:fa:40:69:04:de:9d:b0:83:e5:f2:15:d5:57:1a:be:
4e:14:1c:32:77:52:d5:2c:88:96:2d:79:76:81:bb:8b:88:76:
16:8f:b3:e3:0c:5b:ce:12:a1:40:ef:0f:83:c5:60:84:34:f6:
3b:a0:93:7b:29:63:5c:30:d6:ca:1e:7b:76:c9:60:02:3f:15:
27:05:c2:d6:f8:7f:1d:a5:b8:da:94:87:53:d1:21:ea:8e:c1:
22:4b:f9:06:9f:ec:7a:a6:6f:3c:42:ea:fe:bf:c9:3b:65:3d:
43:72:41:3d:df:42:19:af:7a:95:d9:8e:a1:11:f2:e5:a0:66:
69:56:6f:13:8b:8e:94:7a:0a:f8:14:31:a9:ef:11:62:64:54:
8e:ae:b8:7a:15:6b:e3:3b:d3:48:5c:e6:df:63:69:d6:3a:44:
7c:da:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:43:29 2025 by rpki-client