Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/mFybFv0xAOKhmtYbkfWEbQ-BafY.roa
File: mFybFv0xAOKhmtYbkfWEbQ-BafY.roa (raw, json)
Hash identifier: a10zrLxE54aopxRKfR7SZZMZCydOmIWLhpfVdiLm1BY=
Subject key identifier: 98:5C:9B:16:FD:31:00:E2:A1:9A:D6:1B:91:F5:84:6D:0F:81:69:F6
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0199DCC84CC70AFAB090322E026E53EBEEB3
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/mFybFv0xAOKhmtYbkfWEbQ-BafY.roa
Signing time: Mon 13 Oct 2025 08:55:38 +0000
ROA not before: Mon 13 Oct 2025 08:55:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401903
IP address blocks: 212.100.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:c8:4c:c7:0a:fa:b0:90:32:2e:02:6e:53:eb:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 13 08:55:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=985c9b16fd3100e2a19ad61b91f5846d0f8169f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:b6:82:a1:f1:45:5a:0a:b8:21:02:c6:09:
fa:4f:c7:16:78:c1:e2:bf:f4:be:e0:05:02:9e:68:
be:f5:e6:7f:f5:d4:bf:2c:72:9f:fd:37:4c:dc:ba:
2a:26:72:d7:48:d6:36:25:38:bd:e6:ce:08:c5:21:
d2:df:70:3a:c9:f0:3f:4c:7c:e5:ce:c4:c4:d7:0d:
ef:89:78:01:a3:79:b3:87:87:bb:2d:e1:8d:4b:c6:
04:3e:15:99:8b:3b:16:d2:41:73:05:99:72:8c:07:
40:23:70:e5:f3:01:28:c3:a7:b2:f9:65:1a:25:ef:
51:ec:68:c2:87:54:6b:14:ee:21:48:0a:fd:c4:72:
0f:15:ff:65:ca:a0:7e:07:d1:8e:7d:9a:1b:e5:a7:
2f:f8:67:46:2f:37:98:fb:f6:f7:85:24:ae:61:f5:
2d:e8:7e:5c:d5:e0:04:38:a6:b3:7e:f7:a8:eb:c6:
28:13:29:aa:8b:b9:fc:2b:cb:cc:cf:e6:97:19:da:
dd:a4:d7:d5:9a:ca:0a:62:74:ee:7c:2f:72:4f:7d:
12:ba:b9:ef:f3:de:55:b3:6d:30:26:88:fd:45:cc:
94:c7:32:9d:e7:3b:9b:04:4d:be:eb:c2:65:c0:cf:
72:d3:7f:54:d4:63:7d:70:98:93:d4:1c:f9:a4:48:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:9B:16:FD:31:00:E2:A1:9A:D6:1B:91:F5:84:6D:0F:81:69:F6
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/mFybFv0xAOKhmtYbkfWEbQ-BafY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
54:67:34:79:38:0e:d4:8c:ea:d4:47:99:1f:8e:d1:21:ba:93:
31:8f:ee:71:97:9d:5b:b2:34:eb:84:c2:d5:bb:f8:04:1f:35:
e0:00:e7:a9:d9:31:ee:6c:7f:04:29:d0:c9:b7:e5:4d:d8:ea:
fe:5e:36:85:c0:0a:02:06:75:2e:c7:5e:1c:b9:b3:16:4b:b9:
e4:42:8e:78:7b:36:76:a4:f1:10:14:8a:cf:b4:66:2b:06:b2:
44:41:81:1a:e6:77:d0:74:ef:1d:15:0e:d0:2e:22:28:7b:40:
d0:5f:64:2d:96:26:d9:5f:bb:6d:21:4b:eb:ba:d4:64:50:94:
f6:eb:61:26:12:f9:f4:76:6f:1d:47:52:b1:d0:04:4a:d5:f3:
36:af:ec:24:fd:59:e7:95:0e:66:f2:21:59:b7:59:1a:0f:3f:
16:48:cd:b8:e9:28:98:f9:63:68:58:60:e4:03:65:92:99:87:
1b:ca:81:cc:75:fd:0e:f5:83:b8:5f:d1:8a:0e:be:6e:86:89:
8a:91:c4:0b:ca:c0:9c:40:02:89:2f:4a:2a:cd:ee:88:ac:60:
e7:52:86:9b:0a:df:e0:5b:7a:7a:c3:73:34:54:22:eb:24:c9:
13:df:bc:d8:ed:20:61:ee:e7:21:f2:9a:e2:70:e1:16:26:c4:
8c:a5:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:50 2025 by rpki-client