Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/zY5zGY_mVlRIh3fiGgOVz7n907o.roa
File: zY5zGY_mVlRIh3fiGgOVz7n907o.roa (raw, json)
Hash identifier: gdZyoc0C7hbMaJsc7SfKWxOt+IHwC9+OBkBEiM0H/nU=
Subject key identifier: CD:8E:73:19:8F:E6:56:54:48:87:77:E2:1A:03:95:CF:B9:FD:D3:BA
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019FD7A701C0D5B99FA1A551438F64E42F1E
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/zY5zGY_mVlRIh3fiGgOVz7n907o.roa
Signing time: Thu 06 Aug 2026 15:17:54 +0000
ROA not before: Thu 06 Aug 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.167.0/24 maxlen: 24
212.100.170.0/24 maxlen: 24
212.100.172.0/22 maxlen: 22
212.100.175.0/24 maxlen: 24
212.100.176.0/22 maxlen: 24
212.100.176.0/24 maxlen: 24
212.100.177.0/24 maxlen: 24
212.100.179.0/24 maxlen: 24
212.100.184.0/22 maxlen: 22
212.100.189.0/24 maxlen: 24
212.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:a7:01:c0:d5:b9:9f:a1:a5:51:43:8f:64:e4:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 6 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd8e73198fe65654488777e21a0395cfb9fdd3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:a4:4a:dc:b6:56:8b:d5:7a:c7:99:72:be:
f9:e2:4f:1e:f7:22:27:fe:88:34:ed:3e:8b:66:26:
e0:3e:09:67:11:5f:74:b7:f7:5c:00:a3:a1:14:b3:
e9:25:73:bb:ef:20:5a:d4:b8:97:5f:fb:fe:37:36:
c4:5d:28:50:57:42:a3:eb:a9:3a:fd:11:f9:7e:e5:
fa:19:42:4c:97:66:04:da:c8:f0:57:cd:a9:85:0b:
8e:0c:50:8a:09:ae:25:88:43:be:ea:a7:fb:13:3b:
ae:3d:53:32:a9:75:aa:29:3a:c3:0b:24:c0:f7:5b:
63:ae:12:82:44:dd:43:62:97:d4:cf:ec:50:28:7b:
f6:bb:4c:19:90:26:82:cc:6a:73:aa:b9:02:5a:a0:
eb:8a:bf:e1:99:59:83:98:4b:ae:9a:5c:d0:22:d7:
bb:dc:a5:eb:86:fe:d3:2a:96:f8:0c:23:ce:73:bd:
90:8b:60:60:fe:af:2f:be:a3:1f:6a:f0:b4:df:92:
47:fb:52:5a:30:6c:e3:2c:4d:72:da:28:26:bb:c5:
30:a6:47:14:42:d1:84:2b:e7:37:75:4c:5b:63:6f:
5b:72:d9:07:c3:34:5b:aa:c5:4b:6c:d5:56:87:16:
24:5c:c3:5d:eb:cc:ee:d9:6a:e0:74:a1:2e:44:e9:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:73:19:8F:E6:56:54:48:87:77:E2:1A:03:95:CF:B9:FD:D3:BA
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/zY5zGY_mVlRIh3fiGgOVz7n907o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.170.0/24
212.100.172.0-212.100.179.255
212.100.184.0/22
212.100.189.0/24
212.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:08:d7:c9:9e:ad:8f:a4:8b:29:06:57:aa:69:2c:d8:87:58:
41:86:ab:ff:3d:01:7b:bd:a2:7c:6b:d8:53:3c:e0:36:08:26:
39:5a:14:40:d9:72:f8:8b:9e:55:80:e7:64:43:e7:12:a7:4b:
90:47:6e:3d:2a:a8:47:ed:0e:11:47:59:4a:61:ca:c6:01:69:
90:2b:18:eb:51:7d:b7:1e:24:25:f7:42:8e:04:ab:e3:1a:6f:
87:b8:81:ff:6c:c2:b2:31:54:d3:da:28:6f:93:d7:ba:c1:42:
f8:a3:00:50:8d:ad:3b:fa:35:5d:4d:93:ce:ac:56:5e:5a:d7:
4b:bc:a6:5d:25:65:2b:62:88:f4:3b:21:85:2a:f0:c9:8f:85:
57:53:84:5d:31:66:09:eb:dc:de:51:a9:74:e1:96:34:84:34:
1f:22:4b:a8:5e:6c:6f:91:d0:c5:90:e3:1c:e8:da:a9:53:5d:
c7:46:3e:89:cb:49:df:c4:47:48:a6:f9:fe:f3:a9:eb:fc:2b:
7f:e2:cf:e0:fa:1a:f1:0b:1a:b8:00:7d:3f:65:63:b0:b7:90:
92:cf:d0:b3:88:d5:34:d0:47:57:01:d7:02:bd:34:b5:04:d1:
e3:39:7c:34:bb:25:72:84:26:36:51:14:04:3b:db:8c:8e:19:
8c:2c:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:44 2026 by rpki-client