Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/zo6G0Y9UPoHVswt3oHfvLrTVfMM.roa
File: zo6G0Y9UPoHVswt3oHfvLrTVfMM.roa (raw, json)
Hash identifier: /hZvfcK+4NJwZBTy4hFuAn1JJaQAl3wZfQNBn0vPIVg=
Subject key identifier: CE:8E:86:D1:8F:54:3E:81:D5:B3:0B:77:A0:77:EF:2E:B4:D5:7C:C3
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01990F23B228DDA135DCB6989B53257D8B66
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/zo6G0Y9UPoHVswt3oHfvLrTVfMM.roa
Signing time: Wed 03 Sep 2025 10:33:41 +0000
ROA not before: Wed 03 Sep 2025 10:33:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26141
IP address blocks: 212.100.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:23:b2:28:dd:a1:35:dc:b6:98:9b:53:25:7d:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 3 10:33:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce8e86d18f543e81d5b30b77a077ef2eb4d57cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:ea:ac:43:b4:0b:ee:13:c7:fa:c2:02:3e:
71:91:50:a3:8b:6b:cf:3f:58:a2:b3:f3:a1:f0:6b:
18:29:6a:27:96:1e:6c:a0:15:0f:b9:a0:b9:8a:3a:
89:0e:ee:e8:14:9b:8e:89:14:62:46:8f:0f:5d:a1:
4d:d1:b2:08:88:05:4b:2f:6a:02:b3:79:7a:10:14:
96:ae:15:ed:da:8b:c6:53:01:b8:8b:45:62:34:1e:
45:bc:7c:24:46:ca:b8:b1:99:5b:63:59:e2:76:f6:
3d:a6:70:65:c0:95:2f:96:52:26:46:56:ae:a0:c5:
3b:dd:c9:fa:43:a4:c7:08:a1:74:57:f7:05:f6:67:
30:57:05:3d:31:e1:6f:2d:c4:36:89:4f:b7:99:5e:
18:4d:99:73:45:33:c9:87:27:64:7c:f6:cf:b8:50:
79:28:23:2a:19:36:42:0e:4d:6c:82:5f:55:b6:9a:
9e:10:5b:be:74:a7:b6:d6:3b:3f:24:f3:1b:e7:77:
f0:04:e2:5c:af:f7:33:46:12:c5:91:37:2d:4a:2d:
a4:e3:f1:80:63:33:79:de:b7:15:94:93:7c:e6:4d:
f5:27:c4:da:eb:2c:8b:a2:e4:b8:bd:b7:d2:a4:6a:
04:56:b6:59:af:40:c7:b8:fa:e3:1f:d2:a9:2b:b3:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:86:D1:8F:54:3E:81:D5:B3:0B:77:A0:77:EF:2E:B4:D5:7C:C3
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/zo6G0Y9UPoHVswt3oHfvLrTVfMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:55:c8:82:b1:0a:34:be:7d:65:b6:72:d7:34:99:fd:1f:
f7:d8:83:d7:0a:ce:11:f9:44:01:2f:fe:d0:bd:30:0f:01:b9:
7b:1f:0c:15:d2:17:fd:1d:1c:9c:58:25:8c:59:2f:88:e8:93:
b3:08:e9:78:84:c5:4a:7b:b0:f8:0e:02:6d:07:fe:9b:49:07:
8b:09:75:33:b6:c3:89:89:58:bf:06:a1:1d:a0:31:6c:43:d6:
6a:01:c9:72:8f:db:68:83:ae:75:92:07:f4:a4:69:72:8b:0a:
f2:20:47:9e:23:32:c4:38:70:83:0d:22:3f:c4:fc:11:cc:83:
7d:26:25:05:5e:77:4c:84:c8:8b:ba:0c:9b:48:a7:8c:7a:fe:
89:19:aa:38:3c:b1:59:98:00:84:7b:64:92:0f:0b:bd:35:0f:
49:98:b2:c5:b0:8c:b4:e6:96:98:c9:e9:91:de:44:f6:b2:97:
78:ca:e0:b5:06:21:9f:18:e4:e5:df:19:dc:f9:cd:5a:c0:e6:
40:2e:df:15:40:38:26:bd:f2:b4:37:94:22:de:78:72:b6:53:
3c:70:80:91:ae:48:2e:ef:66:06:e8:10:e3:dd:fe:20:29:93:
4f:11:7f:79:53:b8:38:44:33:25:f8:30:82:f9:a5:64:ab:e7:
a6:7c:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:13:34 2025 by rpki-client