Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/KiXYqiNf0bW59Zt_60KMfa9fLQQ.roa
File: KiXYqiNf0bW59Zt_60KMfa9fLQQ.roa (raw, json)
Hash identifier: HMjczg7sK6n+3pYTD7TOtniZ/TLF/Z4b8NzZE1oQ7Z8=
Subject key identifier: 2A:25:D8:AA:23:5F:D1:B5:B9:F5:9B:7F:EB:42:8C:7D:AF:5F:2D:04
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019FD7A70259A8E76E3880AE6BB8A9E2C4D6
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/KiXYqiNf0bW59Zt_60KMfa9fLQQ.roa
Signing time: Thu 06 Aug 2026 15:17:54 +0000
ROA not before: Thu 06 Aug 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 212.100.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:a7:02:59:a8:e7:6e:38:80:ae:6b:b8:a9:e2:c4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 6 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a25d8aa235fd1b5b9f59b7feb428c7daf5f2d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:ec:f6:70:30:07:16:15:68:2e:94:18:47:
b3:f6:17:71:97:6c:24:0f:3c:a0:0e:85:11:5d:ea:
92:2b:bb:b4:95:94:f8:60:c1:77:cb:62:69:81:4c:
64:6d:f9:0e:0d:01:ee:6a:91:f0:1e:b0:0a:f9:b9:
69:14:e5:a5:cd:c2:66:3d:6f:a0:c8:cb:9c:48:96:
b2:6c:99:e4:4f:35:98:98:d3:77:95:2d:11:48:77:
12:b1:9b:53:a7:60:ad:18:fc:61:7b:db:50:a4:31:
f3:e8:ad:47:6a:d6:40:da:b8:47:ec:dd:87:20:4d:
55:b0:6d:6a:1e:f7:a1:d6:d1:1e:9f:1c:e3:97:7b:
cd:8f:c3:a9:c3:e6:f8:27:cc:59:72:d4:2c:d3:98:
a0:61:2c:47:34:ef:92:86:25:4b:63:e7:fd:24:9f:
bf:30:05:82:3c:1f:58:a8:c3:f0:1a:b4:34:79:db:
10:e1:7b:a7:5c:6a:2c:7f:51:d9:38:60:68:0e:aa:
98:cd:82:e1:65:33:c4:25:7f:b8:0a:b6:72:83:d4:
f8:81:52:7f:6c:37:71:b0:f5:59:fd:4c:31:39:29:
a0:00:02:24:fe:01:aa:a3:7e:96:43:87:5c:c8:6d:
73:0f:de:51:e8:6e:19:f1:a8:70:c8:b7:21:3c:2b:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:D8:AA:23:5F:D1:B5:B9:F5:9B:7F:EB:42:8C:7D:AF:5F:2D:04
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/KiXYqiNf0bW59Zt_60KMfa9fLQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f7:98:d6:97:46:8c:23:b1:28:64:df:7c:82:e7:d7:2d:d2:
c8:3d:da:73:58:bf:b3:16:ef:5e:25:2f:3e:7f:50:6e:be:17:
14:d6:4a:96:8d:a3:94:39:ad:8b:d1:24:70:d2:03:56:0b:cb:
77:65:21:c4:09:d9:68:3e:2f:35:45:db:76:d4:9b:69:cc:9f:
aa:36:98:62:6e:a1:7c:c2:b3:f8:4e:2b:f4:5f:47:0a:26:36:
7a:f7:b5:30:c6:95:c5:4e:f4:dd:ba:52:ba:eb:92:ce:47:9b:
86:4d:cc:35:a1:5a:43:5c:53:2a:68:8e:7d:43:72:b9:0d:e1:
c3:20:f8:cd:c1:fa:74:81:a6:dd:44:93:75:14:c5:34:0d:23:
11:86:69:6f:b9:a8:5b:f5:e0:0e:a8:83:f6:1d:12:d1:25:56:
de:c0:08:18:dd:f6:3e:ee:05:f0:95:da:cd:c2:a3:1b:00:6a:
47:05:53:7e:84:4a:43:6e:99:06:2c:35:05:81:62:1a:80:f8:
33:8b:73:a2:a5:f0:6c:63:5b:8b:d2:cb:11:bb:68:29:b4:51:
55:d2:45:76:21:7f:a4:cd:2b:de:38:48:17:3a:e6:38:c5:7b:
5b:4b:b2:b6:57:0b:a3:d8:3d:a6:cc:8b:1e:47:07:bc:d3:3e:
4e:88:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:11 2026 by rpki-client