Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/8_wnOuS18GM1ao7nxvTA4qStDkE.roa
File: 8_wnOuS18GM1ao7nxvTA4qStDkE.roa (raw, json)
Hash identifier: 2heDhd7j7cVBxa65WvdNzSCrZaRYSPWEzGdI91hFVro=
Subject key identifier: F3:FC:27:3A:E4:B5:F0:63:35:6A:8E:E7:C6:F4:C0:E2:A4:AD:0E:41
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0198C6B9876019D1BDDA21704831EC11A935
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/8_wnOuS18GM1ao7nxvTA4qStDkE.roa
Signing time: Wed 20 Aug 2025 09:05:04 +0000
ROA not before: Wed 20 Aug 2025 09:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153726
IP address blocks: 212.100.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:b9:87:60:19:d1:bd:da:21:70:48:31:ec:11:a9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 20 09:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3fc273ae4b5f063356a8ee7c6f4c0e2a4ad0e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:51:2a:c0:0a:e8:4c:1f:84:93:cb:33:c3:
f2:7c:15:9a:08:88:05:a4:df:41:13:db:bd:5e:4d:
ac:7b:82:3e:0a:ee:a1:cb:74:f8:30:3d:d2:c2:18:
9f:77:98:d1:5e:53:44:77:c6:a5:f9:ef:ed:fa:27:
33:36:a2:f0:ef:40:0d:e9:e5:82:a9:85:c1:e0:9b:
2e:bd:1f:f1:9c:63:43:48:29:77:ad:da:b1:fb:59:
83:16:06:59:c9:01:ec:73:d7:81:87:7e:b7:1d:c7:
44:63:0b:b2:55:e2:18:d4:f1:1d:fd:2a:63:fb:f4:
a5:3b:a9:c9:8c:b0:72:ca:b2:66:be:c9:83:c7:a2:
6a:a5:6b:9b:6b:cc:d9:f8:fa:18:92:24:c4:3e:21:
3b:82:ac:5c:ec:72:98:20:0a:81:1f:e7:d3:1e:63:
e3:ce:ab:ad:11:04:31:76:68:84:4f:08:96:26:04:
3a:d8:e4:24:95:d6:d6:af:15:77:b5:03:2b:48:69:
5b:ac:64:81:a7:4c:8f:5e:fd:86:bf:f2:bc:27:a7:
01:e5:cd:6c:6d:68:4e:8c:dc:9e:b2:ef:c4:39:42:
58:98:85:17:76:9a:82:fe:6f:93:e8:9a:42:0c:df:
f5:a1:79:9c:1e:4a:9a:1a:dc:5e:35:4e:83:a3:87:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FC:27:3A:E4:B5:F0:63:35:6A:8E:E7:C6:F4:C0:E2:A4:AD:0E:41
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/8_wnOuS18GM1ao7nxvTA4qStDkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.190.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1c:b5:30:a8:df:ec:ea:12:d2:25:66:ca:d8:d8:f7:db:db:
7f:08:0b:6f:c0:b4:99:28:30:17:6d:94:49:90:5a:73:ce:c4:
0a:2a:ee:0b:da:95:2d:71:c9:e0:b7:f4:72:2a:0d:b4:4b:e7:
57:cb:0c:41:2a:e2:3b:19:2a:e6:53:14:23:ad:55:b2:7a:29:
04:c7:e1:17:26:03:de:b7:60:0b:18:bc:34:c5:d8:6c:c8:f9:
9d:57:b6:f2:d4:e2:8d:3c:05:d2:c8:dd:e9:52:3a:4a:54:47:
97:40:45:7b:4e:f0:17:82:97:a9:8d:dd:d5:5b:e8:a9:d4:b8:
64:22:02:15:80:68:42:e4:a7:3a:62:ce:df:d1:9c:6a:71:4a:
1c:dd:17:80:0a:27:33:00:25:54:f6:35:6b:09:71:9a:0b:2e:
7a:80:2c:52:bf:c9:6d:38:76:c9:62:ae:8b:be:b5:8e:dc:7f:
24:66:0b:e2:2f:cb:5a:3b:65:d4:4b:4c:ac:b9:d4:59:01:91:
82:c9:29:a9:a1:9d:e9:a6:5e:4f:6f:c8:1b:51:61:a7:ce:1d:
53:17:81:34:34:45:a2:b5:f1:57:2f:24:c0:f9:d3:80:65:79:
72:00:e6:a5:b7:ce:6e:b4:3c:9a:c7:2b:48:88:13:b2:46:65:
cd:4e:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:29 2025 by rpki-client