Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/P_DAL_RkexqRSvFQrwhEhp9MXMY.roa
File: P_DAL_RkexqRSvFQrwhEhp9MXMY.roa (raw, json)
Hash identifier: MqV3Ow1zmHe8yhtW+tQR8NH8pXQiTG75YigD3Gpreu4=
Subject key identifier: 3F:F0:C0:2F:F4:64:7B:1A:91:4A:F1:50:AF:08:44:86:9F:4C:5C:C6
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A099B984CD541A0745BF43822B0EA428CB
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/P_DAL_RkexqRSvFQrwhEhp9MXMY.roa
Signing time: Sun 13 Sep 2026 07:44:27 +0000
ROA not before: Sun 13 Sep 2026 07:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.170.0/24 maxlen: 24
212.100.172.0/22 maxlen: 22
212.100.176.0/22 maxlen: 24
212.100.178.0/24 maxlen: 24
212.100.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:b9:84:cd:54:1a:07:45:bf:43:82:2b:0e:a4:28:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Sep 13 07:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ff0c02ff4647b1a914af150af0844869f4c5cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:2c:29:f6:92:d6:de:aa:bf:85:e3:e7:eb:
1a:a6:a1:d3:48:39:62:f0:e2:9b:3b:47:40:e8:a0:
0c:94:aa:b8:bd:8c:00:d0:d9:a4:5e:d1:c4:6f:e7:
c6:2f:4c:09:f1:0c:0a:02:0b:25:9b:8a:c6:0b:61:
d9:27:a0:ba:8d:e5:2f:ee:45:fc:52:d1:e0:22:45:
c0:2c:bb:7f:01:83:d5:df:50:8f:87:60:8c:36:d4:
8f:83:68:ae:8c:e9:02:45:8a:e8:1c:1f:53:b0:e5:
65:e3:7f:91:52:16:f0:d4:67:84:3f:22:4f:2a:7d:
58:a6:25:5d:71:2f:59:76:fd:a0:77:42:af:08:dc:
87:cc:2c:92:6e:5c:ad:2b:5f:3b:76:d4:da:2f:99:
8a:df:25:21:a2:64:32:c7:12:16:7b:70:0b:9e:fc:
5a:9b:f8:90:88:84:3b:15:4f:16:a6:d5:af:c7:92:
bb:cd:8b:9e:81:1d:c9:e5:7a:ff:47:c2:f5:58:91:
86:80:a1:08:b1:47:01:53:f6:65:6b:e8:38:0a:25:
02:66:78:92:72:9a:34:fa:49:15:fa:39:ab:7c:bd:
8d:0a:50:58:83:e6:5d:4d:7a:0f:21:a7:28:c3:1d:
65:b9:df:1a:a7:c4:83:b3:c6:8e:6a:24:af:73:43:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:C0:2F:F4:64:7B:1A:91:4A:F1:50:AF:08:44:86:9F:4C:5C:C6
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/P_DAL_RkexqRSvFQrwhEhp9MXMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.170.0/24
212.100.172.0-212.100.179.255
212.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:78:90:c4:c2:e6:a6:b8:e7:ca:a4:40:fa:b3:54:f2:05:9b:
eb:c8:6a:90:4c:8d:a0:07:16:2c:dc:4a:e4:08:57:03:89:f3:
67:a9:fd:e0:67:3e:c7:bc:1c:d7:be:54:42:89:0d:52:95:30:
26:84:15:4e:5a:32:f4:29:df:22:56:af:93:de:b7:58:f2:ec:
96:6d:3d:30:e8:71:46:17:87:01:6e:41:f4:5a:17:2d:3a:23:
88:67:81:87:fc:3c:34:f0:57:2b:a1:05:f3:90:ec:54:a1:71:
b1:46:78:9e:21:5c:f8:52:f5:80:af:37:92:44:a2:8b:d0:c1:
be:e8:c7:49:a4:27:3b:a0:b2:74:6f:77:9a:94:8f:95:fc:02:
6b:2d:05:96:ee:6c:3f:b2:05:b4:34:c5:5e:bc:6b:f2:15:bb:
fc:33:a8:85:73:e1:b3:f6:d7:16:ec:fa:a8:2d:e9:82:03:70:
01:e7:94:6a:d3:e2:90:65:b7:e8:55:af:0f:55:93:e2:22:f7:
1c:59:e3:20:59:af:a8:14:b5:83:a1:23:bc:ba:cc:c3:95:e2:
0e:d1:4f:58:b5:71:87:9f:de:2d:e6:ec:04:14:d2:bb:01:36:
a2:d5:51:dc:ef:b1:d4:35:e3:8d:7e:af:69:ab:2e:0b:48:b5:
7a:40:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:56 2026 by rpki-client