Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/W413wTMSfpipoWnS1NkZYjnjz0w.roa
File: W413wTMSfpipoWnS1NkZYjnjz0w.roa (raw, json)
Hash identifier: 3/MLTWoXa4JyYKRQm4RSn/5j9dxMt6F+2fm2kuPs59o=
Subject key identifier: 5B:8D:77:C1:33:12:7E:98:A9:A1:69:D2:D4:D9:19:62:39:E3:CF:4C
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019E8710DE79B763CF2923E133E2718EA73A
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/W413wTMSfpipoWnS1NkZYjnjz0w.roa
Signing time: Tue 02 Jun 2026 06:41:30 +0000
ROA not before: Tue 02 Jun 2026 06:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203054
IP address blocks: 212.100.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:10:de:79:b7:63:cf:29:23:e1:33:e2:71:8e:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jun 2 06:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b8d77c133127e98a9a169d2d4d9196239e3cf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:81:dd:eb:a6:0b:0c:d5:ca:75:7f:8f:e0:
cb:e1:88:77:e2:bf:83:38:da:d8:1d:f9:8b:ef:c1:
92:e4:7a:8d:ae:c2:7f:b1:32:6f:22:ed:8a:3b:92:
5e:4b:4c:a7:71:30:7d:6b:d3:fc:50:17:1c:7d:d4:
d2:89:6a:68:08:9d:e3:f3:fc:cb:23:ca:a7:3d:4e:
d0:fa:5e:c7:ca:72:b6:f0:15:c8:59:b8:ba:c5:5a:
78:7c:03:5d:74:db:3e:18:ea:39:ba:38:b1:e2:f8:
ed:b7:54:68:ff:79:0f:a3:6f:8e:6a:24:3e:d7:4b:
64:5b:f5:5b:41:83:3b:c0:78:26:34:6c:a4:4f:25:
ab:b3:9f:4d:36:3e:7f:a9:6e:ed:e8:5b:dc:11:4f:
a3:ca:32:6d:b0:9d:33:6d:58:4f:e9:c6:ea:2a:d2:
c5:9e:48:8e:8a:13:cf:d0:bc:56:e9:57:08:cf:9c:
27:66:01:ee:32:40:ce:08:0d:6d:33:dd:54:ad:91:
67:5a:e0:bc:3a:d9:a5:87:83:c9:e7:7a:c6:b0:d2:
ff:b8:90:85:33:60:2a:9b:a0:21:09:cf:37:e8:1e:
ce:bd:af:d3:26:9c:8a:27:73:5b:35:dd:b7:56:7e:
51:b4:9f:a8:29:df:8a:16:50:ec:97:24:cd:b6:f4:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:77:C1:33:12:7E:98:A9:A1:69:D2:D4:D9:19:62:39:E3:CF:4C
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/W413wTMSfpipoWnS1NkZYjnjz0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.175.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:86:3f:cb:ba:77:55:a7:ec:00:9f:8b:17:d6:fb:6f:89:c7:
a9:20:84:0e:ff:a6:73:1f:3a:b1:94:0b:10:e0:e8:10:85:35:
da:8c:15:eb:d1:e3:5e:bc:0d:f7:d6:77:05:ca:ca:50:22:a9:
41:f1:13:8b:72:c9:3d:6d:3a:29:2e:34:ff:cf:c5:09:27:ec:
fb:cd:a0:ae:e1:dc:2c:18:c0:23:2b:8f:6c:86:6a:19:fd:5c:
55:d2:8e:23:c5:33:8a:5b:72:d8:15:95:4f:8b:65:00:33:3b:
10:c3:8d:45:50:cb:25:62:dd:cd:d1:cf:37:67:26:9c:33:f0:
78:2c:ce:09:1d:03:ae:c0:c5:40:80:d6:2a:a8:2f:60:c5:51:
9e:f1:f8:89:04:35:26:91:54:72:b7:6c:74:f7:a2:17:ba:31:
b0:d9:c0:10:b5:ac:d2:9b:ac:a8:0e:d4:96:44:0e:d5:c5:75:
a5:1d:d7:b6:30:dd:6e:92:cf:bd:b2:c9:87:45:8b:81:ef:10:
3c:0d:e1:c0:df:74:22:fb:9a:9d:80:4d:3e:48:47:6c:ad:bc:
ac:db:44:4f:74:0d:d6:5b:00:43:58:56:2c:be:0d:1f:f5:fc:
4f:43:9e:7c:da:52:5c:61:3a:0a:b8:63:55:ee:69:98:94:bd:
8b:c0:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:43 2026 by rpki-client