Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/jt94S73_0ur6XF-Lm7n8ZVyLmzE.roa
File: jt94S73_0ur6XF-Lm7n8ZVyLmzE.roa (raw, json)
Hash identifier: wReRauG9GqZDs7fM5XNJuFFFdoBsrvETUenEVsNQ0UA=
Subject key identifier: 8E:DF:78:4B:BD:FF:D2:EA:FA:5C:5F:8B:9B:B9:FC:65:5C:8B:9B:31
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A0D84B164ABB7CC6C699F20BCB87714E9C
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/jt94S73_0ur6XF-Lm7n8ZVyLmzE.roa
Signing time: Fri 25 Sep 2026 11:19:54 +0000
ROA not before: Fri 25 Sep 2026 11:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40244
IP address blocks: 212.100.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:4b:16:4a:bb:7c:c6:c6:99:f2:0b:cb:87:71:4e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 25 11:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8edf784bbdffd2eafa5c5f8b9bb9fc655c8b9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:26:b8:72:01:c9:af:07:d7:df:d5:58:69:
ef:54:9f:1c:d6:85:dd:0e:1a:60:6e:db:3a:07:f6:
8c:b7:34:58:84:1b:f9:47:d9:41:98:a0:f6:35:ab:
2a:89:33:ff:7e:ce:7b:a5:ce:2f:16:8f:3c:c1:ea:
93:61:06:d1:c7:aa:43:bf:94:af:5f:65:9f:1e:78:
89:d1:d9:8e:5b:44:b6:5b:83:26:3a:cf:d1:a5:b9:
7f:1e:15:74:5a:3b:15:c4:54:50:38:47:4f:75:b7:
f6:8c:37:99:a1:37:fd:72:de:b8:ad:9c:7a:6b:97:
97:ee:d4:01:c6:11:ed:b9:19:48:9f:5b:5b:8d:7d:
63:f4:b9:07:05:c6:23:f4:da:f6:c6:07:a7:75:fb:
e3:0f:46:82:38:f2:3e:e5:c6:84:99:01:57:63:e5:
cb:9b:73:b3:ff:a4:4f:01:25:5d:15:16:2b:b0:a5:
0a:ff:15:99:ad:2a:0e:7a:e7:4f:a1:00:8b:d2:d2:
d5:56:2b:69:b1:f6:4b:23:f3:38:dc:66:a8:f4:9b:
e4:2b:7b:01:48:a8:55:9e:42:95:28:f4:6a:86:b6:
df:2d:f0:76:89:c9:33:24:d9:e7:fb:86:1d:cc:e6:
2f:7f:d5:48:54:50:40:d2:6d:bc:3a:2d:f9:54:72:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:78:4B:BD:FF:D2:EA:FA:5C:5F:8B:9B:B9:FC:65:5C:8B:9B:31
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/jt94S73_0ur6XF-Lm7n8ZVyLmzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.178.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b2:14:8f:2b:0e:87:16:61:37:10:88:01:68:58:16:ac:5c:
7d:2f:62:c4:fa:3f:8d:74:99:b9:83:89:4a:41:fa:66:c1:69:
16:0f:6c:e7:04:3c:6a:6f:8f:0f:44:ed:55:76:f9:2d:19:43:
6b:4a:9f:9e:5e:fd:ac:64:09:6b:95:2b:a1:9f:95:20:d2:2e:
aa:c7:dc:ca:48:54:31:d0:7d:b0:e5:8d:c8:29:61:2b:a9:3e:
3d:86:82:c5:e0:89:40:61:59:ac:ce:02:a0:28:c4:d1:e3:29:
d2:f5:38:44:b6:67:d8:e3:32:66:b7:bb:7a:ab:2e:be:7e:b7:
09:a2:fd:5c:c4:bf:f4:f3:60:67:7f:65:92:74:45:b3:87:1d:
41:97:72:24:91:5f:7a:5e:46:93:3c:94:b5:78:d8:ed:8a:ff:
72:99:a1:20:d6:cf:9d:7a:9a:17:d6:e9:38:ee:7e:4c:b8:4b:
bd:3d:a4:7c:94:6e:f9:5a:aa:1e:c2:25:ec:78:f5:ee:b0:5e:
85:54:35:4f:62:cd:33:49:e7:a0:ee:a9:53:64:a7:d1:59:71:
28:64:1e:b5:b7:b3:a1:9f:af:84:b9:24:f1:74:80:92:df:6c:
4a:73:42:89:e1:7e:85:69:9d:9a:0c:3f:de:bc:0e:0b:77:55:
93:e6:9a:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDYSxZKu3zGxpnyC8uHcU6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjYwOTI1MTExOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWRmNzg0YmJkZmZkMmVhZmE1YzVmOGI5YmI5ZmM2NTVjOGI5YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvEmuHIBya8H19/VWGnvVJ8c1oXd
Dhpgbts6B/aMtzRYhBv5R9lBmKD2NasqiTP/fs57pc4vFo88weqTYQbRx6pDv5Sv
X2WfHniJ0dmOW0S2W4MmOs/Rpbl/HhV0WjsVxFRQOEdPdbf2jDeZoTf9ct64rZx6
a5eX7tQBxhHtuRlIn1tbjX1j9LkHBcYj9Nr2xgendfvjD0aCOPI+5caEmQFXY+XL
m3Oz/6RPASVdFRYrsKUK/xWZrSoOeudPoQCL0tLVVitpsfZLI/M43Gao9JvkK3sB
SKhVnkKVKPRqhrbfLfB2ickzJNnn+4YdzOYvf9VIVFBA0m28Oi35VHLHTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7feEu9/9Lq+lxfi5u5/GVci5sxMB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvanQ5NFM3M18wdXI2WEYtTG03bjhaVnlMbXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSyMA0G
CSqGSIb3DQEBCwUAA4IBAQAzshSPKw6HFmE3EIgBaFgWrFx9L2LE+j+NdJm5g4lK
QfpmwWkWD2znBDxqb48PRO1VdvktGUNrSp+eXv2sZAlrlSuhn5Ug0i6qx9zKSFQx
0H2w5Y3IKWErqT49hoLF4IlAYVmszgKgKMTR4ynS9ThEtmfY4zJmt7t6qy6+frcJ
ov1cxL/082Bnf2WSdEWzhx1Bl3IkkV96XkaTPJS1eNjtiv9ymaEg1s+depoX1uk4
7n5MuEu9PaR8lG75WqoewiXsePXusF6FVDVPYs0zSeeg7qlTZKfRWXEoZB61t7Oh
n6+EuSTxdICS32xKc0KJ4X6FaZ2aDD/evA4Ld1WT5ppb
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:50:09 2026 by rpki-client