Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Km4hDOg0NbnFT0nsO7NSUDVxcaQ.roa
File: Km4hDOg0NbnFT0nsO7NSUDVxcaQ.roa (raw, json)
Hash identifier: ZCLR8jB5C2O5+EVArhApY0n3E/d8OXX+wwPGL3MYfFg=
Subject key identifier: 2A:6E:21:0C:E8:34:35:B9:C5:4F:49:EC:3B:B3:52:50:35:71:71:A4
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019F218A5CD2AED2C8309AC7FBAF43CE7FE6
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Km4hDOg0NbnFT0nsO7NSUDVxcaQ.roa
Signing time: Thu 02 Jul 2026 06:35:43 +0000
ROA not before: Thu 02 Jul 2026 06:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.167.0/24 maxlen: 24
212.100.170.0/24 maxlen: 24
212.100.172.0/22 maxlen: 22
212.100.175.0/24 maxlen: 24
212.100.176.0/22 maxlen: 24
212.100.176.0/24 maxlen: 24
212.100.177.0/24 maxlen: 24
212.100.178.0/24 maxlen: 24
212.100.179.0/24 maxlen: 24
212.100.184.0/22 maxlen: 22
212.100.189.0/24 maxlen: 24
212.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:8a:5c:d2:ae:d2:c8:30:9a:c7:fb:af:43:ce:7f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jul 2 06:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a6e210ce83435b9c54f49ec3bb35250357171a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:5d:d3:4e:19:b9:ec:d3:2d:b4:db:68:47:
00:e5:57:9d:b3:ac:7b:3f:15:fb:29:46:5d:ae:08:
b8:24:c6:d1:55:10:c9:33:f3:61:dd:8e:4a:43:ce:
c0:da:f0:ef:de:7b:f5:64:d3:4c:be:c0:d6:34:ae:
b5:b4:06:59:c5:89:ba:f1:cf:67:f0:e7:7e:2b:0b:
5e:da:50:56:d5:fe:c9:78:ee:9c:1d:05:e6:c0:99:
3b:c6:8b:f5:4a:e5:c8:d5:47:15:be:84:f1:75:5b:
35:b3:eb:3d:22:88:74:2a:6c:c9:21:b8:60:2e:5d:
68:46:c7:f9:34:db:30:2e:70:fd:e8:e2:0d:cc:b8:
11:cc:63:60:62:d0:60:a1:e2:ed:0f:ab:96:d0:60:
eb:1a:6c:43:b8:57:d4:e7:d4:78:65:a7:7c:f7:82:
ca:1f:ed:0e:7d:f4:33:a0:29:64:f3:9d:6a:43:93:
f1:f2:29:e7:e0:a9:25:45:7b:c9:10:59:25:28:c0:
65:e4:c2:cf:90:57:df:7a:3a:19:8a:e8:44:c6:4f:
f5:36:fa:fc:2c:d8:51:cb:96:a6:59:34:a7:3e:b8:
c6:aa:4a:c2:f3:65:77:f7:ef:df:31:78:96:93:93:
95:98:ae:0e:09:31:cc:8f:f9:29:4b:f9:45:01:b6:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:21:0C:E8:34:35:B9:C5:4F:49:EC:3B:B3:52:50:35:71:71:A4
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Km4hDOg0NbnFT0nsO7NSUDVxcaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.170.0/24
212.100.172.0-212.100.179.255
212.100.184.0/22
212.100.189.0/24
212.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3c:d5:03:05:e3:f0:3f:56:58:6c:ea:15:77:b0:a1:0b:05:
7f:00:12:fb:44:ff:17:bb:9e:4f:c7:b7:82:3e:d3:de:b9:76:
7b:45:fd:dd:90:84:59:f4:5f:dc:85:82:6e:f7:d2:0f:5e:ac:
3a:6e:87:96:5d:8c:44:75:8a:af:b3:1e:b2:78:03:3d:16:02:
1e:a3:87:0b:b5:de:8e:14:28:9a:83:e2:a6:30:1e:ea:1a:f5:
6d:67:56:98:78:a1:3d:94:62:2f:8c:fc:c0:96:9d:e5:5d:ad:
35:c0:e8:9c:7c:ad:cb:7b:84:15:48:c6:04:5f:89:e5:49:e1:
20:cc:0b:b7:f0:34:ae:5f:91:2f:f7:29:44:8b:e9:98:fe:f7:
6a:ce:ae:3b:e6:ba:44:cd:ca:86:29:ac:b8:97:26:7d:63:d7:
ad:07:3f:79:58:f9:6d:e6:30:23:1d:86:63:72:11:b7:0e:2f:
f5:0a:89:f9:d4:f4:88:d2:50:22:36:f2:a8:30:0d:ce:b4:f7:
b8:31:1c:59:12:7e:cd:2d:f0:90:d8:52:53:ec:a1:cb:04:b7:
ce:61:69:84:89:17:3a:fb:0e:ab:18:34:b0:c7:72:04:bc:27:
c9:89:d9:88:30:35:e9:5f:9a:65:49:65:24:56:ef:10:15:80:
56:2e:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:32 2026 by rpki-client