Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/fJ-xkY5wYVqkP0YTPfviBOsTFz0.roa
File: fJ-xkY5wYVqkP0YTPfviBOsTFz0.roa (raw, json)
Hash identifier: cIpM11AXCs0m0yGY0woemoMlFskrECGjL07inofr3xs=
Subject key identifier: 7C:9F:B1:91:8E:70:61:5A:A4:3F:46:13:3D:FB:E2:04:EB:13:17:3D
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019E022B0F49A3883EE1DC7AD1DF079F6C22
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/fJ-xkY5wYVqkP0YTPfviBOsTFz0.roa
Signing time: Thu 07 May 2026 11:20:36 +0000
ROA not before: Thu 07 May 2026 11:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.167.0/24 maxlen: 24
212.100.170.0/24 maxlen: 24
212.100.172.0/22 maxlen: 22
212.100.175.0/24 maxlen: 24
212.100.176.0/22 maxlen: 24
212.100.176.0/24 maxlen: 24
212.100.177.0/24 maxlen: 24
212.100.178.0/24 maxlen: 24
212.100.184.0/22 maxlen: 22
212.100.189.0/24 maxlen: 24
212.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:2b:0f:49:a3:88:3e:e1:dc:7a:d1:df:07:9f:6c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: May 7 11:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c9fb1918e70615aa43f46133dfbe204eb13173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:15:bb:a3:49:03:8b:a5:16:fd:17:e3:0e:
88:8c:91:d4:78:a5:97:64:bd:c4:c1:fd:90:07:33:
0b:f5:4b:e7:70:df:22:4a:75:98:3e:03:e3:17:a8:
61:c2:73:2a:c4:15:5d:c5:64:5a:9c:cb:2b:7c:55:
1d:50:bd:4d:45:8a:da:a8:f2:e2:a0:0d:bb:20:b0:
14:38:5a:4d:a3:46:0f:20:68:59:9d:37:1c:04:5d:
67:7b:d8:7b:12:d6:a6:50:e1:03:1e:e0:e7:57:84:
25:bc:5e:da:59:06:f8:99:fc:8a:f2:df:05:66:80:
8c:f7:0e:66:08:3e:d8:01:ad:91:d6:d8:25:16:89:
7f:60:c3:2f:ba:af:3b:f3:d7:f9:7b:44:15:7c:de:
7e:de:56:7f:3c:9e:a9:07:c9:62:4a:e0:74:e8:96:
7d:fd:b1:e2:94:b3:94:ce:1d:a6:d7:40:b8:fa:3e:
4e:df:7b:b1:c2:d6:df:5b:bd:a4:0c:ae:5e:7a:93:
e5:6d:77:e3:15:1b:ea:22:24:15:08:17:df:0b:6f:
be:de:b6:fd:fe:60:1e:f4:ee:21:3b:a9:a5:97:c0:
f0:6c:ec:82:1c:2f:c6:13:3c:e0:88:3e:e9:ba:c9:
59:69:c3:c3:8e:91:c3:95:2a:a3:3a:08:c8:6e:e6:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:B1:91:8E:70:61:5A:A4:3F:46:13:3D:FB:E2:04:EB:13:17:3D
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/fJ-xkY5wYVqkP0YTPfviBOsTFz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.170.0/24
212.100.172.0-212.100.179.255
212.100.184.0/22
212.100.189.0/24
212.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:97:b0:75:38:58:c9:77:39:24:d5:e0:75:72:dd:e7:28:93:
96:93:40:2a:58:d9:e3:9c:06:c3:db:b5:f7:53:d1:75:29:b9:
f7:5a:a0:ad:1b:94:a4:12:c1:a4:61:cc:cd:52:19:27:78:1d:
85:8f:b4:18:c3:36:1a:1e:34:c9:cf:ba:05:c7:29:89:df:38:
ef:d6:8b:6e:bf:90:f3:a0:58:2d:c2:38:b4:a1:07:15:cc:ff:
9b:f3:2b:e3:11:29:78:78:f1:f6:8b:da:7c:ab:e6:6b:03:f4:
e0:28:d5:71:64:a5:49:8e:85:49:d7:92:73:de:69:a6:da:fc:
df:c3:2f:82:3f:39:93:0a:db:a5:08:29:c0:74:67:a0:40:91:
c6:13:e4:33:56:61:d1:07:80:93:98:cf:88:38:43:b9:27:5e:
43:48:a1:69:02:ea:39:6f:9b:0f:28:9e:49:88:b9:d3:e8:fa:
a7:7f:34:51:2b:05:e1:f3:ed:b7:1c:82:63:ed:23:e4:43:0c:
c9:d7:3f:07:1d:a2:68:83:d7:37:9d:e2:5c:49:eb:bf:52:27:
79:05:15:4d:67:b1:81:da:74:dd:38:25:94:11:76:30:3c:0c:
7d:ad:e8:83:34:96:65:62:9b:20:3d:81:36:39:38:0c:fc:ca:
e2:da:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:10 2026 by rpki-client