Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/z0fiabNtV6-KbjNplU1cwZs7OyQ.roa
File: z0fiabNtV6-KbjNplU1cwZs7OyQ.roa (raw, json)
Hash identifier: olohqMcSdm30D0pzjFPBQF2u4ZQMlli7o/uQrzMCIWw=
Subject key identifier: CF:47:E2:69:B3:6D:57:AF:8A:6E:33:69:95:4D:5C:C1:9B:3B:3B:24
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019FE118DE5F2FBE4FB937BAF681A072A1F1
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/z0fiabNtV6-KbjNplU1cwZs7OyQ.roa
Signing time: Sat 08 Aug 2026 11:18:51 +0000
ROA not before: Sat 08 Aug 2026 11:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 212.100.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:18:de:5f:2f:be:4f:b9:37:ba:f6:81:a0:72:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 8 11:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf47e269b36d57af8a6e3369954d5cc19b3b3b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:dc:da:9e:da:ff:f5:33:f9:ff:72:fc:97:
fc:29:e4:f8:bd:13:af:38:74:22:6e:68:6a:da:fa:
5f:0a:21:c3:86:3f:d3:3f:1f:99:ea:90:fa:56:ed:
6d:79:1c:ca:40:44:f8:5e:58:c8:b8:d9:4f:98:96:
86:7b:74:65:2e:99:2c:be:2e:7f:73:71:9d:af:d5:
a4:e1:11:3f:95:3a:ac:ca:ed:75:e1:5b:a0:77:35:
93:df:4c:2b:23:f5:22:f3:16:d1:23:b1:b5:a2:ff:
63:9f:46:f0:17:4b:45:7a:ea:8c:de:4d:fb:cd:09:
37:1d:cb:09:60:64:86:95:b8:1d:26:26:ec:64:8b:
5e:1e:5f:d7:f0:5b:e2:33:d1:3f:4b:68:4f:2f:1e:
47:7f:ca:80:0a:16:8f:19:5c:04:2f:7c:cc:3e:7f:
a7:3d:80:c0:19:89:2c:e7:28:46:5d:3a:6e:df:83:
80:c5:50:50:dc:09:ff:4d:25:67:7a:a7:b8:9b:b9:
cc:cf:4c:32:54:11:46:b7:e3:f1:c3:31:63:70:ec:
72:79:e2:d2:16:40:53:49:77:54:6e:cf:fb:b1:69:
d6:f2:d4:20:b3:80:e4:ee:b2:fc:2b:10:17:9b:28:
e7:2c:de:e0:b3:d0:2e:fc:3f:f1:0a:6b:15:e6:c9:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:47:E2:69:B3:6D:57:AF:8A:6E:33:69:95:4D:5C:C1:9B:3B:3B:24
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/z0fiabNtV6-KbjNplU1cwZs7OyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.178.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b4:ae:2c:62:9d:28:4e:69:d3:35:35:62:5b:32:0f:2e:d6:
92:33:8f:87:15:31:38:b6:0e:ae:39:2e:7e:5b:fb:ab:96:c7:
01:8b:f0:95:39:93:9c:05:f2:6e:80:5d:c4:d6:1e:2c:0c:2d:
02:a0:2b:ad:87:2c:41:97:46:1d:48:a9:e5:27:45:39:3b:73:
95:1d:99:da:5c:31:68:2d:54:d2:00:3e:7a:7e:5c:bc:ee:00:
60:4d:f7:94:da:25:e1:b2:d5:0b:b5:11:72:34:b1:c7:2b:8e:
ea:6c:2a:a4:ca:7e:8b:f2:ac:a3:c3:56:43:3f:c1:5e:dc:b5:
2a:84:11:0d:05:83:4a:0e:82:98:47:a5:bb:17:5f:e6:6b:d0:
9a:86:a7:d7:21:34:85:74:b5:1e:17:9e:5a:75:0c:81:fa:a8:
e8:74:83:7d:56:1d:5c:0e:98:43:f3:c6:a8:e3:f1:11:15:92:
47:05:fa:9f:0e:01:ea:06:b3:87:fa:5e:81:2e:e7:54:db:1c:
2b:32:01:d0:08:12:ee:ef:2d:9b:df:b0:b9:db:f2:ef:60:07:
55:f8:dc:f0:9d:25:ba:3d:fa:08:5c:a4:c3:15:9d:0e:9c:52:
8e:4c:cd:9e:fb:ec:e4:60:71:80:c4:c6:bf:e4:1f:23:d8:fb:
e7:94:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:49:00 2026 by rpki-client