Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/T7i-71_8KfgiHfK1cluDI6ZLn6k.roa
File: T7i-71_8KfgiHfK1cluDI6ZLn6k.roa (raw, json)
Hash identifier: g1lLKLNogKIrN/BIi+OY8QfR3HAt+ZA7BFl8/r2LQUc=
Subject key identifier: 4F:B8:BE:EF:5F:FC:29:F8:22:1D:F2:B5:72:5B:83:23:A6:4B:9F:A9
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019910212F768F7D6E86D679C61FE237A474
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/T7i-71_8KfgiHfK1cluDI6ZLn6k.roa
Signing time: Wed 03 Sep 2025 15:10:34 +0000
ROA not before: Wed 03 Sep 2025 15:10:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 212.100.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:21:2f:76:8f:7d:6e:86:d6:79:c6:1f:e2:37:a4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 3 15:10:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fb8beef5ffc29f8221df2b5725b8323a64b9fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:d8:cf:23:aa:49:d1:37:17:a5:2c:01:e5:
9b:d5:21:10:3c:01:26:fa:80:51:2b:73:27:d2:05:
01:74:65:04:7e:69:89:59:d4:22:9e:08:19:dd:8c:
5a:08:7f:63:45:10:42:60:80:b6:65:86:b9:32:2d:
02:b0:39:e0:d5:c5:af:ad:5d:5f:9f:a8:f3:e7:03:
49:f2:5e:e9:e1:22:7d:9f:17:88:2a:ec:7c:5d:41:
d1:76:1c:90:a0:f5:7d:d3:60:94:6f:22:2a:e7:08:
0e:f2:f0:36:ba:bb:90:5b:99:74:79:98:d2:6e:88:
e8:cf:4e:36:24:30:6e:6d:2b:df:7d:9d:19:d4:63:
2e:ae:5f:93:b2:00:10:b2:0a:22:d3:9c:01:bc:e4:
1a:b4:d8:f1:da:b7:a5:7d:a4:a7:e0:09:5c:57:12:
c5:63:25:e0:57:9e:20:81:86:09:54:58:80:03:41:
f4:01:c2:ac:2b:5a:fa:85:8d:fb:9a:0b:00:1d:37:
d5:fb:4c:90:21:d3:68:5c:d1:81:68:61:9d:70:6e:
54:6d:6f:24:71:63:2b:1c:49:db:ed:0a:eb:50:21:
4a:d8:62:05:1e:1a:ef:6a:c5:d4:3a:89:c0:2a:30:
a5:02:8b:b3:c3:d3:fb:ba:6a:31:90:21:b2:72:b8:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:BE:EF:5F:FC:29:F8:22:1D:F2:B5:72:5B:83:23:A6:4B:9F:A9
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/T7i-71_8KfgiHfK1cluDI6ZLn6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d2:e8:e2:db:80:85:fb:ae:09:c3:78:ba:d3:3b:21:4a:d5:
c3:4a:28:52:30:37:aa:54:5c:a4:e0:ad:3a:17:f2:6b:ee:ec:
de:44:2e:bd:51:d2:93:bd:64:a2:5b:de:84:1c:2f:b0:c0:b6:
dd:be:28:56:ec:3f:39:8c:7f:95:49:f9:18:90:61:08:e5:b4:
62:39:6e:5a:4d:2a:9b:86:cf:45:12:9f:51:b0:cc:b8:55:da:
e5:76:f9:23:1b:e4:ea:bf:2e:e5:b1:18:e5:a3:df:95:f9:85:
f5:3d:5f:16:81:11:42:90:e5:75:d5:b9:af:15:24:a7:16:51:
9c:fd:5b:8f:da:b4:9f:b6:89:11:2b:00:55:1a:57:ea:d4:7e:
3e:71:ae:16:e5:fa:f8:9d:04:d2:67:7d:76:92:a8:0b:7e:11:
f9:ce:4e:3c:4e:70:b0:bc:83:ac:68:79:18:26:91:07:2c:54:
92:85:4c:0c:1c:4f:95:6d:d3:b7:3c:a3:9a:68:aa:05:e8:c5:
7b:85:17:c9:53:ba:41:93:36:d0:a9:53:40:0a:3e:17:5a:7e:
c8:7a:2d:62:0e:4a:27:a7:98:b8:3e:45:59:78:a4:9f:30:f1:
2a:9e:3c:64:d6:3b:9b:52:63:61:e9:ae:b7:98:d3:a2:9e:98:
4c:74:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:07:29 2025 by rpki-client