Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/OcuQVorUCHi5WKUI39CmfdVdoWA.roa
File: OcuQVorUCHi5WKUI39CmfdVdoWA.roa (raw, json)
Hash identifier: vcMjpebS0VIkKN2bsCeCpSkVlxV67avU5muisGEFZqU=
Subject key identifier: 39:CB:90:56:8A:D4:08:78:B9:58:A5:08:DF:D0:A6:7D:D5:5D:A1:60
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019EA606483D03C3FFF13B41181F94C58D21
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/OcuQVorUCHi5WKUI39CmfdVdoWA.roa
Signing time: Mon 08 Jun 2026 06:58:10 +0000
ROA not before: Mon 08 Jun 2026 06:58:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215262
IP address blocks: 212.100.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:06:48:3d:03:c3:ff:f1:3b:41:18:1f:94:c5:8d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jun 8 06:58:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39cb90568ad40878b958a508dfd0a67dd55da160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:c9:d3:e2:a5:e1:7c:ac:bb:c1:9a:2b:76:
2b:0b:96:0c:5b:60:60:ab:3c:ad:c2:7f:34:e4:e3:
71:d6:6f:4b:ce:81:16:82:00:1a:10:06:c5:d2:f1:
8a:ea:cc:a9:67:ed:cd:db:38:2f:ce:fb:2b:1a:19:
da:96:46:71:aa:78:4d:27:9b:b8:56:9b:f3:f5:16:
f4:e7:04:ad:2d:58:9e:4f:4a:35:e7:af:92:c3:2f:
9c:27:f5:1b:06:b6:cf:1e:15:12:e4:ee:a7:d0:41:
ad:55:05:e1:05:0c:a0:bb:8a:b7:38:dc:0e:37:c0:
56:6b:c3:5f:fc:bc:84:8c:7b:ed:69:79:83:a3:93:
e0:dc:16:02:c4:06:f0:33:04:97:36:c7:a9:ad:5d:
ed:35:04:78:1a:82:8f:97:66:8b:00:d0:a2:e0:f1:
1b:0f:54:47:fe:f8:79:2f:cf:b2:f2:c2:4a:1b:c0:
c6:94:20:c9:d5:64:3d:77:01:6c:3a:0a:0b:0e:68:
c7:d3:d5:44:b8:48:1e:c1:eb:90:bf:a5:fd:d9:a4:
11:18:dc:5a:25:be:ec:e6:ef:a6:58:3a:73:26:df:
bd:25:81:75:ba:bc:52:1f:eb:09:85:30:59:fe:b7:
46:50:b9:e2:5c:18:a9:92:94:4c:4d:18:e9:28:53:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:90:56:8A:D4:08:78:B9:58:A5:08:DF:D0:A6:7D:D5:5D:A1:60
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/OcuQVorUCHi5WKUI39CmfdVdoWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.172.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:62:ff:51:a8:67:f6:c3:61:03:b8:e3:1c:7d:2e:b9:d4:f8:
47:74:2c:5c:5d:82:e0:c4:99:42:5c:60:da:dd:92:2e:e3:7e:
67:f8:b2:30:3c:a3:dd:ba:c5:b3:ea:f9:6f:1a:cd:78:2e:16:
a9:da:93:cc:e6:d8:af:b0:2a:0f:ff:64:76:5f:88:0e:53:1e:
98:e7:5f:5b:51:45:d1:ca:e0:9c:56:1b:30:bc:39:70:c7:55:
23:b3:55:39:7f:02:b4:88:55:0e:b5:a7:3f:72:61:e9:b9:40:
bc:9b:3a:be:1e:ff:cc:a6:4d:41:ab:49:4a:82:10:55:44:44:
c9:3a:b4:97:6a:c4:59:a4:2d:9b:bf:6d:eb:cc:4e:97:5c:9f:
cd:72:94:7d:08:28:0b:0b:e3:c9:5f:86:6c:88:ab:17:d7:70:
40:22:36:dd:5a:60:6d:c1:6d:0d:a4:1f:45:e4:db:47:89:aa:
98:3d:86:5e:87:83:0a:b9:a7:cc:ef:b1:41:45:b5:ab:3d:a5:
68:6b:93:2f:0b:02:74:80:29:3e:5f:16:7b:36:07:5f:05:93:
25:3c:f1:6f:16:ba:47:db:b6:bf:10:06:72:a7:4b:f8:ef:c0:
14:76:ee:11:f2:7f:20:d4:04:ea:e3:f2:7e:1c:07:a1:17:07:
8e:c0:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:23 2026 by rpki-client