Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/uZSHMj6rMqwV9L49EGLY9GuDPOs.roa
File: uZSHMj6rMqwV9L49EGLY9GuDPOs.roa (raw, json)
Hash identifier: kC+a3j74Pmhq98wInwLoJCpYOssVm8Vdf5eKa6qH1gI=
Subject key identifier: B9:94:87:32:3E:AB:32:AC:15:F4:BE:3D:10:62:D8:F4:6B:83:3C:EB
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019999DD52C224389B6CB642E139FA5D1EFB
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/uZSHMj6rMqwV9L49EGLY9GuDPOs.roa
Signing time: Tue 30 Sep 2025 09:04:02 +0000
ROA not before: Tue 30 Sep 2025 09:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 212.100.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:dd:52:c2:24:38:9b:6c:b6:42:e1:39:fa:5d:1e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 30 09:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b99487323eab32ac15f4be3d1062d8f46b833ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:1c:28:89:6b:98:ae:0a:d9:8e:71:97:94:
b6:1d:0a:49:ec:bb:8f:dd:a3:5c:f5:ec:e4:a0:23:
a5:45:5f:58:46:36:0c:f0:13:4d:b4:2e:f9:9d:f0:
e1:51:03:3f:81:78:84:53:3e:53:02:d8:a0:a4:ef:
e5:a0:03:4f:21:a2:d0:b2:e4:ea:ba:eb:90:25:23:
28:a9:6d:63:65:99:28:17:a2:bf:0a:a7:a1:02:f8:
e2:b5:f0:c9:70:26:9b:9b:0d:0d:f3:42:2f:8e:cd:
9f:36:83:90:19:a3:02:cd:a4:8b:cc:43:80:54:a9:
a4:d8:fd:f7:f9:48:4b:88:5e:7f:b5:fa:a0:e8:3e:
62:f4:af:9c:80:48:c4:42:9d:89:2d:cb:f7:16:c5:
9b:2e:fd:63:1e:dc:11:a2:00:19:b8:47:07:e9:90:
05:43:7e:00:07:23:01:4e:04:5e:ef:2a:1d:f5:9d:
a2:6e:d1:70:33:d3:80:dc:b8:e3:ad:7d:b3:91:21:
10:b1:6a:81:de:f0:da:db:af:a6:36:35:7c:91:cd:
74:a2:b3:26:9f:ac:05:48:14:a8:97:ab:61:0f:ba:
51:70:48:9f:b7:35:26:d4:53:ee:b1:54:8e:19:08:
bb:b5:83:a1:b5:4d:1c:8e:12:5c:50:bd:17:d5:c7:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:94:87:32:3E:AB:32:AC:15:F4:BE:3D:10:62:D8:F4:6B:83:3C:EB
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/uZSHMj6rMqwV9L49EGLY9GuDPOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c6:48:ed:1c:d7:2f:76:ec:01:b2:5b:da:40:cf:d1:01:a9:
6b:87:4d:f6:6f:0c:dc:dd:2f:84:2b:48:eb:92:0c:92:11:59:
0d:df:1a:05:4b:1d:fb:86:24:5f:e0:65:e7:6a:f8:a5:ef:cc:
3c:a6:0b:74:29:61:9c:4b:50:b1:5b:a1:85:f8:f2:1e:bc:93:
25:4c:5f:63:e5:90:ea:09:6e:50:65:fe:95:c7:b3:54:29:4b:
ed:23:27:44:0a:6a:70:17:7a:53:5a:ef:5b:fd:31:0a:6c:4a:
04:bd:04:23:8d:8e:0b:6e:01:62:c2:0a:0f:c7:9c:43:1b:03:
56:7a:1b:ae:1f:04:49:a7:a3:ef:ca:35:fd:34:31:66:f0:f6:
b6:48:b4:da:b7:fe:f2:00:9e:f0:da:f1:a2:c9:32:54:d4:f0:
1a:44:38:ae:5a:df:eb:a9:3f:e1:e6:84:a8:9a:ee:b5:c2:64:
92:46:27:c4:5a:eb:53:20:11:59:27:ad:d1:aa:22:ed:3e:a0:
66:5a:d7:83:2f:21:fa:0f:ea:46:02:78:21:99:4b:44:95:ee:
07:88:55:43:6e:60:f5:94:c6:6d:5c:cc:0c:7a:9c:ea:72:f3:
6b:13:b8:98:6b:6f:16:62:2e:ac:38:77:9e:59:a7:cf:c9:20:
00:e6:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:00 2025 by rpki-client