Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/xfpFgNXWKUWH5W7fvV7_pnuAWcI.roa
File: xfpFgNXWKUWH5W7fvV7_pnuAWcI.roa (raw, json)
Hash identifier: jUpYHSOp01Uvm7D09iKwwknr/PqP0KTInyYUmNoQy98=
Subject key identifier: C5:FA:45:80:D5:D6:29:45:87:E5:6E:DF:BD:5E:FF:A6:7B:80:59:C2
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01992D6DF1F8B0F691694B538464E2DBDDF1
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/xfpFgNXWKUWH5W7fvV7_pnuAWcI.roa
Signing time: Tue 09 Sep 2025 07:43:24 +0000
ROA not before: Tue 09 Sep 2025 07:43:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 212.100.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:6d:f1:f8:b0:f6:91:69:4b:53:84:64:e2:db:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 9 07:43:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5fa4580d5d6294587e56edfbd5effa67b8059c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:20:26:73:f2:02:7e:8a:56:c0:3e:70:f5:34:
10:ef:98:93:04:9a:48:ee:81:f4:94:9c:86:98:4c:
38:48:24:dd:0d:ae:9d:2f:d7:46:b5:49:bc:f1:58:
3c:89:e5:e9:a1:21:c5:7c:12:9d:bc:c7:92:d4:68:
78:71:43:03:1b:65:83:de:2b:07:5b:d9:98:d3:fd:
15:26:4c:dc:a7:b6:39:fa:55:65:f6:42:3e:9c:9c:
97:8c:b4:bf:aa:b2:a6:cd:43:9c:14:04:54:fe:ca:
a8:e3:74:94:aa:f1:5a:9c:0a:28:c8:1b:26:ba:54:
02:3e:95:f4:f8:56:1f:58:ad:dc:80:68:f8:c0:26:
81:ce:cc:a6:7f:fd:36:7e:7d:97:df:2c:1d:39:00:
05:56:3e:6a:d7:8b:8e:55:f7:9e:b0:5e:8f:27:48:
d5:52:6e:99:80:49:9c:e2:7b:9d:e9:3d:9d:08:3b:
4a:e4:09:10:e3:33:f8:49:f0:0d:7c:c5:5d:86:2f:
ff:a2:23:00:53:90:a1:a7:bb:1e:9a:a7:1c:66:b7:
57:47:8d:8c:26:7a:f1:93:c6:bd:93:28:6e:02:66:
71:cd:be:d6:ce:38:92:b9:4e:7c:33:02:fb:95:4f:
3f:34:6a:4c:e4:c1:42:22:9d:75:db:d2:0e:0c:ca:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FA:45:80:D5:D6:29:45:87:E5:6E:DF:BD:5E:FF:A6:7B:80:59:C2
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/xfpFgNXWKUWH5W7fvV7_pnuAWcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d3:17:38:7f:df:cd:32:4c:6a:28:2a:34:0b:a5:d1:1e:9f:
f8:6d:3b:79:dc:13:b5:00:8a:cd:8a:9b:f3:a5:ec:f5:52:cf:
ba:b8:60:14:01:e3:25:d9:c1:1a:ae:00:c2:c1:6b:cc:f6:d8:
bb:fe:fe:16:c9:cf:5b:bf:02:ab:62:a8:ee:43:9b:0f:65:36:
98:b8:bc:a3:89:c1:a9:18:2c:33:c4:38:2f:fe:4d:da:66:51:
55:dc:3f:48:35:67:29:0c:22:20:7b:6c:56:a6:29:e8:ac:1f:
c3:4b:1c:d6:33:c4:57:6d:f6:35:22:49:f5:31:88:cd:c2:fe:
17:00:a8:e1:eb:6f:9e:7d:c2:8b:06:72:74:cc:1d:3e:67:dd:
9f:21:9b:a6:14:84:73:05:c8:77:44:eb:d6:9c:31:36:69:9f:
4e:30:81:81:fb:4e:15:9f:cf:88:d2:b9:85:ae:cb:d1:33:95:
4c:2c:30:50:2b:f1:f6:ba:6f:1a:9b:ee:ce:21:9a:51:9a:3b:
46:a1:cf:9d:de:f4:ea:80:81:9c:3c:81:04:bd:60:a7:43:dd:
df:ed:09:23:b8:d6:1b:c4:bc:ad:ef:1c:a0:12:90:c3:eb:ac:
48:01:31:df:f0:8f:c4:92:84:02:38:76:79:74:00:06:fb:7b:
28:27:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:45:10 2025 by rpki-client