Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Y24Y3kKADY1nbemTye2brauTH7E.roa
File: Y24Y3kKADY1nbemTye2brauTH7E.roa (raw, json)
Hash identifier: tsG+LLoqVQ8an0ajvux26hOmrMmZOl2QgNOlaQHx6pc=
Subject key identifier: 63:6E:18:DE:42:80:0D:8D:67:6D:E9:93:C9:ED:9B:AD:AB:93:1F:B1
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0199C7A930E1386F3A93A011CC55124F13AE
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Y24Y3kKADY1nbemTye2brauTH7E.roa
Signing time: Thu 09 Oct 2025 06:29:38 +0000
ROA not before: Thu 09 Oct 2025 06:29:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213060
IP address blocks: 212.100.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:a9:30:e1:38:6f:3a:93:a0:11:cc:55:12:4f:13:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 9 06:29:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=636e18de42800d8d676de993c9ed9badab931fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:b7:41:3f:8a:84:d9:9c:25:60:fd:7c:f9:
5d:29:b9:08:22:83:14:99:27:45:2f:9d:48:51:a9:
3c:77:a8:a4:e4:94:a8:d1:bd:69:cd:b9:0d:7a:ed:
b5:6f:5b:18:ee:ba:f1:d6:20:27:46:bc:2e:60:69:
b3:83:09:f8:5a:5b:4b:5d:27:86:64:bf:3e:27:62:
9c:89:5d:cc:fc:77:cf:93:e2:94:33:f8:ad:ee:7c:
ca:5b:57:ee:fc:2c:b5:75:13:67:7f:c9:1a:ea:71:
d0:ff:f4:8a:d1:d7:00:d3:5e:ba:82:97:d4:73:ad:
f7:03:ef:76:07:38:a7:e3:94:5f:07:a6:2a:a4:41:
38:21:8d:bc:43:7f:8f:e4:f4:48:57:41:d1:40:83:
e6:5c:6c:62:d1:6d:cc:da:c1:d1:b7:91:5b:f4:03:
5e:1e:cd:03:cb:e6:9c:49:82:99:53:50:a8:5f:65:
5f:10:df:41:b9:30:cc:94:4a:ba:16:04:b3:54:49:
f6:a9:f1:63:00:e9:6d:35:50:da:7f:2a:fd:0c:f0:
0e:3b:4d:09:3a:03:3d:ce:d6:bc:bf:dc:b3:74:75:
c9:f3:b0:89:b7:02:5c:e6:10:69:02:36:bf:f0:a0:
61:37:aa:06:e7:71:e4:e4:f5:c4:3c:ce:4a:be:f0:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6E:18:DE:42:80:0D:8D:67:6D:E9:93:C9:ED:9B:AD:AB:93:1F:B1
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Y24Y3kKADY1nbemTye2brauTH7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:00:6f:52:dc:0d:81:26:85:8b:be:06:20:b2:df:1a:01:14:
77:6c:b4:16:41:e0:45:4d:4a:ca:0c:56:2c:45:ff:0b:b3:80:
08:1c:63:7d:d5:de:60:f7:ce:64:8d:f3:cf:77:e9:96:4d:db:
9a:3d:02:10:20:3a:8f:08:33:46:6b:e0:84:90:d9:32:c3:61:
bb:ae:06:8c:67:87:d7:ba:16:31:ba:b7:ed:a4:a6:16:f1:7e:
6d:04:cf:3c:d3:e7:3f:09:66:4e:b1:ba:14:8e:1c:e4:57:92:
fe:ef:6a:af:09:fc:36:25:be:6a:93:9a:27:ed:dd:7c:c3:4a:
d5:4f:2e:3c:5a:5f:ee:31:3a:da:28:c9:f1:f3:98:8b:8b:ab:
4b:52:43:15:b9:3c:5f:a7:a7:ba:b4:fa:80:b8:bc:fe:25:44:
f6:2a:0c:76:09:fd:50:cf:d0:22:74:34:a1:4f:e4:1a:48:ed:
5f:8f:b4:66:07:cb:0f:e3:06:93:e0:5f:71:c3:3c:4d:bb:05:
96:7a:83:84:6c:aa:2e:5e:a3:cb:8f:f0:23:43:4c:23:90:c3:
7c:f5:81:b7:62:a9:50:eb:1e:36:09:0e:33:df:07:01:51:30:
ce:12:de:34:71:5e:76:76:07:b6:e9:50:24:ae:87:2f:e8:fe:
a8:a4:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:01 2025 by rpki-client