Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Qt101tukrTYayNyc9qbkl_Xaoi0.roa
File: Qt101tukrTYayNyc9qbkl_Xaoi0.roa (raw, json)
Hash identifier: 18hW/yEhJGNwA42TvFvKQjrARb9o7lg2SaGcRPVqWrI=
Subject key identifier: 42:DD:74:D6:DB:A4:AD:36:1A:C8:DC:9C:F6:A6:E4:97:F5:DA:A2:2D
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A099B9855BCE1AE580FB2117809A01EF30
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Qt101tukrTYayNyc9qbkl_Xaoi0.roa
Signing time: Sun 13 Sep 2026 07:44:27 +0000
ROA not before: Sun 13 Sep 2026 07:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 212.100.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:b9:85:5b:ce:1a:e5:80:fb:21:17:80:9a:01:ef:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 13 07:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42dd74d6dba4ad361ac8dc9cf6a6e497f5daa22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:73:bb:fa:c7:ce:35:ac:2e:e4:3b:4f:0b:
7e:32:ea:8c:cc:db:be:a4:68:00:a3:31:6a:c6:5f:
a0:c1:95:12:8c:63:5b:ff:5d:26:d4:ac:da:dd:4e:
16:20:f9:1e:91:96:2f:d3:03:2e:da:48:be:f1:f0:
f2:1d:77:7c:02:66:c9:22:f5:5f:05:30:22:67:bf:
9a:8f:7e:ea:b0:69:36:4d:35:55:3b:d2:9e:f4:3b:
f0:16:80:8f:75:b0:c2:24:fc:06:3d:8f:43:ef:af:
69:3e:95:42:af:fe:bd:72:69:08:d7:d4:90:40:d1:
50:18:ec:5f:7d:2f:40:ef:f9:48:74:4a:fb:ef:cc:
59:bc:81:13:8b:6f:70:67:f8:b3:50:2a:c4:9c:42:
00:06:7c:67:82:70:f3:a2:03:0f:ee:4d:fe:fd:38:
c7:f1:36:99:35:15:ed:c8:b2:99:0f:7b:9c:b9:71:
2e:69:ce:88:2f:b8:19:12:9c:ee:1e:09:cd:04:f0:
95:04:bc:3b:5a:1e:fc:e2:6f:63:bb:03:76:c4:1b:
02:04:bf:15:82:d5:f9:c8:90:f3:b2:eb:90:5b:f5:
98:ac:ce:f2:56:35:fd:83:f4:1f:c2:15:98:e0:10:
1f:61:5a:25:e0:2b:e9:50:5e:fd:9d:25:d7:05:86:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:74:D6:DB:A4:AD:36:1A:C8:DC:9C:F6:A6:E4:97:F5:DA:A2:2D
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Qt101tukrTYayNyc9qbkl_Xaoi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ee:7c:0c:16:53:56:0f:39:9d:dd:53:e0:e6:d6:cb:03:9f:
ac:b7:dc:d2:bd:3c:2d:26:4d:c0:4a:07:4f:3f:c1:f5:c2:db:
ac:af:49:f7:53:ca:91:7f:fb:7f:de:5d:95:3f:38:5c:88:9a:
bf:0d:fc:23:3e:2b:40:0d:80:e2:9a:09:d2:08:18:37:12:84:
7a:a7:2e:74:5b:7e:94:fb:05:b6:2b:d0:37:9a:12:9f:0b:07:
6d:17:a4:c0:1b:35:20:93:02:70:16:8e:33:f3:37:62:d3:42:
47:9c:39:58:92:fd:89:d0:9c:9b:e5:6e:5e:4d:03:77:7b:30:
27:e5:27:1c:c9:63:98:f5:36:b9:d1:8e:43:fb:8f:19:c6:8c:
af:c0:24:e2:80:f5:9a:16:ec:60:b6:c0:19:cd:01:3c:35:6e:
fd:cd:1b:cc:a8:d0:f0:18:77:0e:29:07:63:aa:cb:54:07:d8:
25:70:fb:b8:f3:2c:32:f4:54:a6:78:5c:96:71:14:0d:5a:59:
b6:a5:9c:96:fc:da:07:8a:2b:7b:a8:cc:60:5d:13:c7:91:ef:
b9:71:0d:85:98:e3:34:67:19:28:79:22:e7:81:15:fc:ae:d9:
37:0c:a6:c2:77:d1:c2:8f:71:f1:20:2e:c2:b2:fb:5d:e3:dd:
f4:b1:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:31:23 2026 by rpki-client