Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/beVtJzHKFjK6Tr9t766WX9OMZkU.roa
File: beVtJzHKFjK6Tr9t766WX9OMZkU.roa (raw, json)
Hash identifier: yCD9PoTbplc2BO2pqqdu5R1ia0ternlf7MiRt0DunYM=
Subject key identifier: 6D:E5:6D:27:31:CA:16:32:BA:4E:BF:6D:EF:AE:96:5F:D3:8C:66:45
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01990F23B2B039B89FF805F66ED352053424
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/beVtJzHKFjK6Tr9t766WX9OMZkU.roa
Signing time: Wed 03 Sep 2025 10:33:41 +0000
ROA not before: Wed 03 Sep 2025 10:33:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 212.100.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:23:b2:b0:39:b8:9f:f8:05:f6:6e:d3:52:05:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 3 10:33:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de56d2731ca1632ba4ebf6defae965fd38c6645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:93:9a:6e:df:92:82:3c:5c:5f:90:07:c0:
36:bd:a5:43:9f:67:2a:43:e5:21:b8:f7:14:ca:5b:
ea:fc:1e:61:40:95:ef:7b:cf:d4:d9:3d:6c:c1:00:
4c:38:f3:97:97:e9:81:93:f7:3a:94:0b:47:f1:e9:
c9:46:72:88:8a:eb:b6:3a:18:48:57:d1:b7:44:14:
c2:3f:c3:d1:42:64:8c:f5:28:7a:41:f2:c9:09:f9:
33:e0:7d:9d:86:f8:73:04:0a:87:62:56:0b:59:cc:
34:82:e1:2f:ea:40:d2:92:b7:6e:e2:1f:84:a9:31:
87:0d:97:56:26:ec:4a:f9:8a:dd:52:d8:7f:10:d9:
b0:56:9c:28:d8:ee:45:c4:55:d5:f0:33:3f:b0:d9:
a6:5c:f1:ff:32:78:04:e5:a1:fb:ea:76:df:d5:ad:
bb:63:7d:d1:5e:03:0a:4b:1d:20:b0:6d:83:2b:6e:
57:65:86:18:1d:7e:06:f6:0f:e8:f9:fc:81:a7:12:
37:ca:0e:fa:dc:25:7d:1d:ed:ce:da:33:05:a4:d0:
01:cc:60:58:e3:45:38:ca:59:13:76:21:8a:44:41:
51:13:b5:78:24:ba:90:59:ff:e3:6b:a3:e1:b1:ad:
e5:bc:23:e9:a7:7c:ba:b6:61:91:0b:24:9d:3b:13:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:6D:27:31:CA:16:32:BA:4E:BF:6D:EF:AE:96:5F:D3:8C:66:45
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/beVtJzHKFjK6Tr9t766WX9OMZkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2b:7b:c8:a3:b6:92:06:28:f1:19:d6:d3:b4:65:62:b1:33:
49:77:4b:6d:31:e9:ec:94:cf:e1:da:39:8b:17:f7:9c:3f:6f:
8e:94:69:9d:5e:1f:e4:d5:3f:06:70:13:17:a5:b0:7c:58:85:
c0:96:19:71:87:b0:fd:76:40:8d:b4:4a:db:a6:af:67:1e:67:
1c:64:25:a0:9a:2a:d0:a3:b6:c2:c1:96:31:66:ac:5a:ac:92:
eb:7d:08:7f:b5:db:43:e8:9f:7e:05:89:2d:54:31:43:77:d1:
8d:07:13:e4:b7:f6:bf:5b:e4:5d:ad:f6:f5:e1:35:f7:f3:79:
0d:f2:63:1c:20:1f:7b:33:23:b6:3e:9f:fd:5b:b2:a6:26:64:
60:0a:94:eb:ef:26:63:a6:ae:37:0d:a1:d3:48:aa:88:c4:5d:
96:2e:c8:1f:3c:35:b0:e7:f4:4f:1b:2f:31:f2:ee:5d:0e:2b:
b4:9e:f6:5c:ad:63:a0:2e:29:ff:45:e0:c8:04:49:2c:45:3c:
28:63:b5:c6:4c:3d:26:36:f6:cc:ab:e1:13:c3:70:b9:39:e5:
4f:9a:b7:4f:00:a1:48:64:97:12:22:68:ee:95:9e:02:f4:8f:
81:a2:a8:40:b0:70:9d:df:9d:1d:92:2f:51:8c:8f:ab:be:3d:
49:d2:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:09:09 2025 by rpki-client