Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/B95qEzCa8_VCgOeDf531wzOg0PU.roa
File: B95qEzCa8_VCgOeDf531wzOg0PU.roa (raw, json)
Hash identifier: zcHbiEClQwH9tlXEcx+NqPQLy11jnI712KLpeE43NMw=
Subject key identifier: 07:DE:6A:13:30:9A:F3:F5:42:80:E7:83:7F:9D:F5:C3:33:A0:D0:F5
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019A398621CA85C5B7BF1F122B7C0B7AD28D
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/B95qEzCa8_VCgOeDf531wzOg0PU.roa
Signing time: Fri 31 Oct 2025 09:08:03 +0000
ROA not before: Fri 31 Oct 2025 09:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 212.100.165.0/24 maxlen: 24
212.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:86:21:ca:85:c5:b7:bf:1f:12:2b:7c:0b:7a:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 31 09:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07de6a13309af3f54280e7837f9df5c333a0d0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:7a:f2:07:a8:42:2c:b0:f8:ea:1c:8b:08:
9a:36:17:03:1f:36:3d:a2:25:b1:c6:01:11:38:97:
d6:2c:23:96:f0:ec:d7:04:1e:5a:82:17:9f:53:0a:
5c:ba:a5:5e:ad:f6:3b:9d:73:73:f1:42:f5:34:e7:
ef:0b:eb:1b:0a:09:23:63:d9:ae:34:b7:b3:71:c3:
cb:38:27:ac:cd:ca:d7:f4:6b:c4:69:34:ff:7e:0c:
4c:a6:72:cb:2f:f8:c2:b7:70:50:6d:f2:0c:89:b0:
cc:e3:f2:03:07:fa:ae:16:a7:38:98:00:dd:b8:16:
50:0c:b0:13:ff:c4:a2:57:a2:05:c6:36:aa:28:2d:
40:ae:fd:5b:2e:18:91:f3:ad:7a:51:5e:db:66:df:
1e:a4:b1:85:5e:f5:b1:6c:86:05:d0:22:15:5f:1e:
97:6a:c3:39:79:55:2a:47:73:56:52:95:ee:6f:b0:
d1:82:07:39:44:fe:ea:b9:a1:16:d7:35:0b:a6:c7:
c0:65:6a:9f:42:69:bc:53:fa:f3:c0:02:63:3d:66:
43:48:73:6a:d5:6c:31:3e:c6:79:f9:c1:67:ee:37:
89:50:b1:ae:10:22:30:fd:d3:dc:21:a9:2e:ec:9c:
7d:ab:06:fc:24:2e:b0:0c:59:b6:a0:33:c3:74:cb:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DE:6A:13:30:9A:F3:F5:42:80:E7:83:7F:9D:F5:C3:33:A0:D0:F5
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/B95qEzCa8_VCgOeDf531wzOg0PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.165.0/24
212.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f6:ee:19:08:08:5a:77:2a:1b:4e:e3:5c:00:ef:66:6a:bf:
bf:7a:e8:05:87:5b:9d:d7:68:4b:87:a8:1e:ee:08:95:c7:f8:
34:e2:f5:82:f6:84:43:92:10:9a:a9:36:1d:30:fe:46:cb:d5:
6b:9f:d1:0c:2d:65:ee:27:5a:b6:33:38:bd:29:40:0f:ac:aa:
c5:cc:68:c3:94:e5:97:e2:b2:67:bb:9c:95:37:3f:d5:18:b8:
9b:f2:45:d1:af:b0:7d:ff:3b:da:23:b2:11:0d:2e:3d:05:3b:
a0:f3:33:7d:a8:59:b2:84:66:71:7a:ed:bc:25:16:55:dc:7c:
81:5f:19:60:09:b8:cb:7b:5f:b7:6c:65:e3:43:b4:cf:b0:63:
66:33:b8:1b:14:48:2d:75:b4:95:d3:26:fb:6e:4f:90:c5:23:
a3:19:26:ac:8c:9d:35:46:10:34:12:7b:da:9d:c6:6d:42:d5:
ad:41:9c:06:ce:87:d1:ad:9c:09:62:a0:70:d8:15:dc:49:05:
26:8b:66:df:28:0d:f5:65:7b:89:ef:67:58:1c:2f:05:4a:07:
f5:b0:6c:89:51:e1:d8:ec:85:b2:d9:89:1e:11:96:34:0a:b4:
90:58:50:ad:67:79:71:7e:c0:ea:66:f4:7a:0f:78:05:a6:c0:
3c:75:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:34 2025 by rpki-client