Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/XvYUEc8BiCo6UyWMPlX6FMGkNI4.roa
File: XvYUEc8BiCo6UyWMPlX6FMGkNI4.roa (raw, json)
Hash identifier: 13obfYsge9QlFhexp1q8SLRiMV2IS2/1XQZEtpI9L4E=
Subject key identifier: 5E:F6:14:11:CF:01:88:2A:3A:53:25:8C:3E:55:FA:14:C1:A4:34:8E
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0199629E9380F6C7508DEBA7D0021BE7FD25
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/XvYUEc8BiCo6UyWMPlX6FMGkNI4.roa
Signing time: Fri 19 Sep 2025 15:36:23 +0000
ROA not before: Fri 19 Sep 2025 15:36:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210495
IP address blocks: 212.100.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:9e:93:80:f6:c7:50:8d:eb:a7:d0:02:1b:e7:fd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 19 15:36:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ef61411cf01882a3a53258c3e55fa14c1a4348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:48:83:c4:df:53:77:bf:65:22:2b:cd:ab:
93:2c:2a:3a:3f:b2:09:c6:72:9f:62:ef:f5:06:2f:
fe:d6:fb:68:e6:95:96:75:b5:b2:86:ca:a4:91:80:
67:32:d1:09:9c:cd:8e:4d:d7:f9:3a:58:3a:d1:56:
82:03:0b:a2:09:23:3c:5b:f6:89:fa:f1:d8:e8:2c:
66:a5:75:fe:d0:4e:3a:cb:df:8d:0d:11:c1:ca:4b:
ba:9a:9f:cb:d7:55:f8:b3:a3:84:4c:94:3b:fe:b8:
37:e7:30:bc:59:31:34:90:85:4f:87:cd:74:80:a4:
0d:c1:ae:f1:f5:4a:22:33:72:79:0c:f5:ac:46:c9:
45:4f:c3:02:53:84:fa:b8:d5:6a:9c:f2:80:0e:d6:
50:d6:a9:ca:1f:72:52:b2:c4:30:75:3d:05:8b:0d:
94:d5:f4:fa:00:73:0a:38:ea:22:52:49:7a:21:c8:
b0:57:9c:49:6f:76:a6:e4:cb:6b:1a:47:b0:8a:02:
a6:96:09:d5:18:71:4b:d9:9b:ed:7e:91:d5:5e:b8:
54:28:58:4a:e8:65:3b:12:8f:40:28:5b:df:75:4a:
cb:b9:fc:23:7c:ca:b2:02:91:f2:e6:b8:ae:85:38:
4b:f6:4c:62:42:d1:9d:0c:bc:b9:7e:b8:57:a6:89:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F6:14:11:CF:01:88:2A:3A:53:25:8C:3E:55:FA:14:C1:A4:34:8E
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/XvYUEc8BiCo6UyWMPlX6FMGkNI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.184.0/24
Signature Algorithm: sha256WithRSAEncryption
92:27:97:f7:3c:e8:7c:65:61:ae:99:e9:b9:32:94:c0:a0:cb:
86:42:a7:2b:0f:a4:ba:ab:f8:b1:5c:87:11:fe:71:71:28:50:
1f:c9:b5:18:e4:1a:f9:e2:d8:ad:ab:86:22:ed:45:24:a1:66:
e9:96:d8:f5:a6:07:02:64:7e:ff:55:51:68:e7:a9:4d:5f:72:
1f:9a:15:05:f9:04:2b:a9:11:ba:84:37:ca:2b:4f:ce:28:3b:
1a:74:11:7a:f3:8d:86:90:26:42:5b:a9:58:a7:75:a4:ac:8d:
93:a6:fd:ff:17:16:b8:f9:c8:c6:d9:fa:5c:1d:68:c5:a8:b8:
62:03:4f:8b:b3:de:21:b9:ee:d8:a6:94:13:12:d5:4d:f0:3c:
ec:76:6e:e3:9d:9a:57:39:dd:02:45:67:de:0b:f9:84:16:0d:
8a:d1:18:5c:31:e6:d6:d4:61:66:f2:7f:0c:b1:bc:06:5c:68:
16:02:76:1c:03:75:ad:b4:1d:43:dd:ac:d8:71:b6:48:50:ca:
36:91:27:0c:f7:17:7a:fc:de:72:28:0e:8a:dc:49:5e:73:5d:
3b:8e:39:20:c9:80:75:75:e9:e9:8f:dc:72:09:4c:2f:f9:e2:
ec:00:69:84:fc:8f:02:86:9b:d0:b3:e0:a8:56:e2:20:0e:80:
32:0f:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:06 2025 by rpki-client