Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/839Y0AuwjIaEzlAEKxVmXLljxW8.roa
File: 839Y0AuwjIaEzlAEKxVmXLljxW8.roa (raw, json)
Hash identifier: DoJz4YlIn7zBcGhHFOvtffcBpAWW00Fg+mU17ueVsDs=
Subject key identifier: F3:7F:58:D0:0B:B0:8C:86:84:CE:50:04:2B:15:66:5C:B9:63:C5:6F
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019960A61F239199B4EFF94F75E8FACFB04C
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/839Y0AuwjIaEzlAEKxVmXLljxW8.roa
Signing time: Fri 19 Sep 2025 06:25:23 +0000
ROA not before: Fri 19 Sep 2025 06:25:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 212.100.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:a6:1f:23:91:99:b4:ef:f9:4f:75:e8:fa:cf:b0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 19 06:25:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f37f58d00bb08c8684ce50042b15665cb963c56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:b5:0f:e3:f7:3d:e0:ec:74:3a:5b:4f:8f:
34:24:a3:44:b6:28:2f:4f:3c:39:29:48:42:8f:fd:
2d:63:6a:5f:bb:c7:61:11:78:b8:ac:4c:a1:dd:0d:
af:c2:a5:9e:82:86:fa:e3:b6:e2:23:c3:6a:d2:dc:
e9:58:b2:bf:d0:4e:2a:ed:ee:4d:fe:1a:42:9b:32:
84:0f:bf:f9:11:3f:da:4d:8c:9b:67:cf:f1:66:48:
e1:6f:42:0c:1b:fe:6d:03:cb:62:5f:5d:94:aa:cf:
5d:0f:80:6a:d0:12:27:ba:01:0a:85:b5:cc:79:28:
08:8f:b9:15:b8:18:4e:d2:fe:06:af:62:8d:c7:16:
32:ca:ad:e2:f2:4c:9c:04:46:49:71:54:be:d7:a3:
0c:5e:f9:25:87:5d:43:fd:fd:9a:5e:55:b3:f4:41:
06:a1:5b:5f:c6:de:ed:71:16:9f:08:e5:f1:db:d5:
1d:15:e6:05:f0:ac:c1:85:f3:d4:59:90:5c:a9:02:
fb:fd:b9:26:25:43:28:60:ad:a1:4d:1b:c7:52:25:
9c:ea:9b:45:be:d6:dc:4b:ac:07:84:26:1e:68:69:
1d:d9:90:8b:0e:f6:23:c0:29:6d:09:53:05:3b:3d:
17:f9:40:34:98:c5:3d:9a:e8:aa:6b:9b:49:e5:36:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:58:D0:0B:B0:8C:86:84:CE:50:04:2B:15:66:5C:B9:63:C5:6F
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/839Y0AuwjIaEzlAEKxVmXLljxW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:33:88:81:8c:51:7b:85:53:43:70:e5:fe:d3:c8:a7:a7:05:
18:97:cd:8e:60:28:ea:57:a6:59:0a:d4:08:e1:b6:77:ff:2f:
8b:d6:5d:2c:c5:36:b0:62:af:c8:18:b6:c9:dc:d1:3c:19:81:
a4:e9:1a:6b:a4:9b:c9:4b:91:e1:bb:60:49:b1:8f:da:3d:9b:
ac:f0:3e:0d:9c:c8:63:d2:a9:3c:1b:ab:09:b9:44:83:c1:2f:
97:fe:d6:54:54:c7:b1:0f:de:26:e9:db:9b:1a:5b:06:6a:67:
0f:d1:d7:5a:4b:1c:92:7a:65:19:bd:ce:88:84:47:ce:7b:41:
f5:91:3d:a8:61:71:9c:c2:00:87:5c:6d:46:92:12:db:12:f1:
a4:14:b4:0a:3e:c6:e7:29:7d:04:b5:27:4b:92:69:61:df:ce:
e1:8b:c3:bb:37:51:2b:8f:be:04:01:89:28:e7:46:2d:74:ab:
08:78:8d:2f:c6:74:77:3f:eb:61:50:5d:95:f4:0b:6a:48:08:
6e:44:1b:f0:a3:00:2e:7b:79:36:ba:dd:8b:2c:ef:71:38:90:
47:49:4b:29:f1:ce:65:93:a3:8f:33:b9:0f:b3:99:72:cd:8e:
51:d0:5f:48:05:ed:0d:29:8b:d1:22:d0:87:22:53:9d:01:fa:
e5:3d:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:48 2025 by rpki-client