Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1ewytVdvkaafPfQ2IdA2tDRvUU4.roa
File: 1ewytVdvkaafPfQ2IdA2tDRvUU4.roa (raw, json)
Hash identifier: MY1d/lVNgtRkNROfq7QgxtjcXANQ0bnSWuFghTPDvw0=
Subject key identifier: D5:EC:32:B5:57:6F:91:A6:9F:3D:F4:36:21:D0:36:B4:34:6F:51:4E
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01999EA9F6C93E0109531600DFDC5A4FCD8A
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1ewytVdvkaafPfQ2IdA2tDRvUU4.roa
Signing time: Wed 01 Oct 2025 07:26:02 +0000
ROA not before: Wed 01 Oct 2025 07:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139880
IP address blocks: 212.100.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:a9:f6:c9:3e:01:09:53:16:00:df:dc:5a:4f:cd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 1 07:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5ec32b5576f91a69f3df43621d036b4346f514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:a6:d8:94:1d:5b:38:ea:ef:16:fe:c3:a5:
86:04:99:79:53:49:93:9b:39:c8:56:7f:a0:7d:93:
d6:56:00:e8:f1:fa:30:39:54:3e:8a:6e:e1:9e:3c:
0e:5d:7e:cd:8e:92:0c:0a:a1:5a:02:74:ce:e9:7e:
32:7a:d2:65:d7:27:77:0e:3c:72:7e:6c:42:ea:83:
97:4f:e0:3f:71:fd:c9:f0:18:54:15:07:60:90:5e:
4b:0e:39:7b:c3:04:0c:b3:1f:30:98:62:ae:63:52:
de:f7:4a:e6:9c:3f:67:33:e8:dc:1c:6c:b2:75:31:
62:57:c5:b1:6c:54:77:f0:66:22:a1:31:bf:af:cc:
ff:29:20:0b:90:47:7f:cc:15:62:04:89:f9:e8:0a:
95:23:fb:7b:7f:e9:28:a7:04:2a:7e:6a:30:c4:a0:
17:8b:3f:91:71:55:f8:3a:68:0f:99:73:af:7d:8c:
fb:b7:67:2e:89:d7:6e:28:ae:6c:99:1a:51:88:8d:
d2:b9:20:de:e7:5b:2c:16:03:fc:ed:7b:7c:bd:78:
ba:2d:38:9a:a9:d7:0a:30:e1:1e:48:7e:5f:5d:90:
66:03:3d:d1:34:20:97:7c:c2:03:e8:0c:3f:9d:00:
de:23:0a:4d:d4:66:d0:c0:0e:e5:7a:e4:df:ce:8c:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EC:32:B5:57:6F:91:A6:9F:3D:F4:36:21:D0:36:B4:34:6F:51:4E
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1ewytVdvkaafPfQ2IdA2tDRvUU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:6c:46:cd:2f:f8:d1:df:f6:d5:a1:75:d3:b8:c4:58:38:6d:
29:13:11:aa:a2:65:05:cd:43:ad:2b:26:c3:3e:a1:e6:77:26:
0c:7c:11:b8:c2:ea:57:b1:81:3b:c1:25:97:13:1d:31:b1:a1:
72:9b:b1:0d:c9:e3:5e:dc:ab:4b:84:c2:a0:90:c9:e6:ab:d0:
40:2d:56:7a:94:08:fe:60:e4:4d:f1:28:59:ce:46:f6:d2:f5:
cd:49:76:2e:7b:46:09:76:e3:80:d3:a8:a0:df:93:15:9a:00:
70:4d:3b:64:13:ab:18:f7:ed:16:26:9c:e9:35:8f:10:d1:14:
e7:82:97:c0:50:db:52:dc:47:4f:20:bf:ee:e5:dc:0a:45:ed:
fa:ff:d1:e7:18:d6:ca:73:3f:91:92:c0:c9:a3:9a:59:a8:db:
e3:9e:50:33:03:3f:da:ca:59:fe:5c:a1:cd:57:54:5e:0e:45:
36:76:ef:55:17:ba:81:b5:2c:9e:09:56:66:c8:2f:61:8c:3e:
43:39:2a:9f:3b:8c:d0:b2:8a:32:31:61:15:84:e0:d2:a5:93:
74:4f:0a:77:3c:4f:36:10:61:a1:a7:27:54:7b:12:e3:9b:23:
9a:31:3e:9d:e7:dd:a6:13:d6:c2:34:d9:e1:9f:fd:a7:89:e6:
f1:08:54:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmeqfbJPgEJUxYA39xaT82KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjUxMDAxMDcyNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWVjMzJiNTU3NmY5MWE2OWYzZGY0MzYyMWQwMzZiNDM0NmY1MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/qm2JQdWzjq7xb+w6WGBJl5U0mT
mznIVn+gfZPWVgDo8fowOVQ+im7hnjwOXX7NjpIMCqFaAnTO6X4yetJl1yd3Djxy
fmxC6oOXT+A/cf3J8BhUFQdgkF5LDjl7wwQMsx8wmGKuY1Le90rmnD9nM+jcHGyy
dTFiV8WxbFR38GYioTG/r8z/KSALkEd/zBViBIn56AqVI/t7f+kopwQqfmowxKAX
iz+RcVX4OmgPmXOvfYz7t2cuidduKK5smRpRiI3SuSDe51ssFgP87Xt8vXi6LTia
qdcKMOEeSH5fXZBmAz3RNCCXfMID6Aw/nQDeIwpN1GbQwA7leuTfzoztbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXsMrVXb5Gmnz30NiHQNrQ0b1FOMB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvMWV3eXRWZHZrYWFmUGZRMklkQTJ0RFJ2VVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1GSkMA0G
CSqGSIb3DQEBCwUAA4IBAQCNbEbNL/jR3/bVoXXTuMRYOG0pExGqomUFzUOtKybD
PqHmdyYMfBG4wupXsYE7wSWXEx0xsaFym7ENyeNe3KtLhMKgkMnmq9BALVZ6lAj+
YORN8ShZzkb20vXNSXYue0YJduOA06ig35MVmgBwTTtkE6sY9+0WJpzpNY8Q0RTn
gpfAUNtS3EdPIL/u5dwKRe36/9HnGNbKcz+RksDJo5pZqNvjnlAzAz/ayln+XKHN
V1ReDkU2du9VF7qBtSyeCVZmyC9hjD5DOSqfO4zQsooyMWEVhODSpZN0Twp3PE82
EGGhpydUexLjmyOaMT6d592mE9bCNNnhn/2niebxCFTM
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:59 2025 by rpki-client