Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YZMQBzYjLzhj65raabOAdewUOzY.roa
File: YZMQBzYjLzhj65raabOAdewUOzY.roa (raw, json)
Hash identifier: Q3xJTHAvNDgqJ+KWFHXvPvCwUQgz3aBDkW49Idvk72k=
Subject key identifier: 61:93:10:07:36:23:2F:38:63:EB:9A:DA:69:B3:80:75:EC:14:3B:36
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A0D82677CD73CD385CCE8749A55082586B
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YZMQBzYjLzhj65raabOAdewUOzY.roa
Signing time: Fri 25 Sep 2026 10:39:54 +0000
ROA not before: Fri 25 Sep 2026 10:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 212.100.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:26:77:cd:73:cd:38:5c:ce:87:49:a5:50:82:58:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 25 10:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6193100736232f3863eb9ada69b38075ec143b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:a2:21:6c:0a:44:64:dc:73:7e:b6:8a:c9:
3b:2a:82:c2:29:6d:67:29:3c:cc:e9:84:5a:3d:00:
3c:47:e2:8f:2e:e6:61:88:5d:81:97:df:c7:0d:c0:
b3:7e:47:c6:76:e2:2e:ca:1e:67:ec:35:50:60:bf:
0b:95:45:29:92:49:cf:20:71:7e:1e:2d:df:39:4d:
dd:3e:9c:03:b5:65:6e:8b:5f:fe:f4:2e:b2:45:94:
be:ac:b4:98:0b:a6:c9:ea:c8:51:38:50:6f:b9:a0:
b7:01:ee:0d:ed:c8:f6:31:b7:5f:da:b4:70:e6:cc:
96:e8:8e:28:76:51:60:29:4a:f8:62:58:19:5f:f7:
05:52:7d:c1:28:90:ea:03:ac:f1:a1:a4:3a:e1:46:
12:82:b6:1e:ac:b6:5b:38:cc:a7:bd:71:13:2b:72:
56:12:38:d8:53:a4:34:2b:25:b4:a9:db:98:23:0c:
79:48:5b:62:e3:95:05:a2:be:3c:a0:d9:52:81:22:
cb:0e:b1:09:8d:ce:ca:4a:c8:5b:a1:86:8f:a2:d6:
ec:0a:5f:14:d8:be:ad:51:0c:19:1b:5e:be:3a:41:
3e:5a:68:86:f1:3e:c8:06:75:dc:d8:01:40:f7:f4:
55:72:d1:00:1c:00:50:ed:78:3d:5d:7e:20:77:73:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:10:07:36:23:2F:38:63:EB:9A:DA:69:B3:80:75:EC:14:3B:36
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YZMQBzYjLzhj65raabOAdewUOzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4c:c9:df:26:91:75:93:36:e8:28:4b:c3:aa:d2:c6:4e:6c:
57:c8:12:5a:ad:b6:39:b8:7d:ff:68:06:79:54:be:8d:13:88:
a1:5f:4f:f8:75:5c:0d:08:72:fc:cd:2a:fc:b3:1c:18:7e:cb:
68:61:58:cc:f2:5d:dd:46:f9:02:4d:4b:67:77:55:be:ad:3d:
64:cb:f3:5e:6f:56:73:b7:c0:e3:3c:90:f1:21:b6:40:11:cd:
b1:b9:b8:ca:dd:3e:61:00:f9:ed:43:86:19:39:00:7d:7e:fc:
23:4f:f5:d9:5a:ca:f9:8b:d8:f8:04:d3:b7:e2:a1:d3:59:61:
19:72:61:a9:de:59:84:a9:b0:aa:c7:5a:d8:3a:40:6b:bc:41:
3e:e7:6d:30:5c:52:a2:db:15:f3:97:08:02:c9:87:c8:a4:cb:
b8:f0:85:c6:a9:87:43:0f:e2:8e:e2:ef:fa:86:99:98:3c:ba:
95:0c:68:01:16:75:65:f2:76:de:a2:6a:11:e4:a1:1d:d9:29:
b5:2f:38:90:6d:cd:1f:0b:97:d0:34:d4:42:1a:07:4c:fb:7e:
99:a9:43:7a:21:25:f2:72:01:31:dc:4d:ec:32:ab:6f:dc:7d:
2c:a2:6a:a6:ce:8d:64:f6:86:2f:07:5d:91:13:8b:5f:10:92:
b4:b9:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:32 2026 by rpki-client