Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/X3BRCk5Uj6XJwU1_iCf3x5Bhlrs.roa
File: X3BRCk5Uj6XJwU1_iCf3x5Bhlrs.roa (raw, json)
Hash identifier: Rqchrudl/4U8cqNm7Bdc8Cw+QsrfTHDlB88yjjTBgwc=
Subject key identifier: 5F:70:51:0A:4E:54:8F:A5:C9:C1:4D:7F:88:27:F7:C7:90:61:96:BB
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019A4DE20249C700FF0A5ED816F4E3D35EEE
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/X3BRCk5Uj6XJwU1_iCf3x5Bhlrs.roa
Signing time: Tue 04 Nov 2025 08:00:48 +0000
ROA not before: Tue 04 Nov 2025 08:00:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.172.0/22 maxlen: 22
212.100.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:02:49:c7:00:ff:0a:5e:d8:16:f4:e3:d3:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f70510a4e548fa5c9c14d7f8827f7c7906196bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:aa:a8:0e:22:bb:00:da:3d:52:66:36:40:
b5:f3:e8:6c:4d:a4:33:d9:8f:f7:0d:ae:0a:10:0c:
e9:27:2f:c4:c6:a7:bf:d0:2a:89:47:d4:47:ba:f8:
2a:bb:e7:c2:1a:87:0a:d2:90:22:f2:d5:47:7f:89:
d9:dd:c1:29:ae:15:e7:39:31:c6:d4:fe:9e:9d:ba:
ed:ac:f1:4f:ee:4e:fe:0c:db:3b:d3:1d:d0:af:d3:
b7:de:7e:53:5c:17:51:72:c0:15:2b:30:14:c4:b4:
4e:f3:04:23:3d:81:cd:5a:76:91:3b:48:02:db:f2:
7d:50:cb:bd:14:b0:00:27:d8:4e:79:eb:9d:4b:b9:
a7:f1:61:28:05:8a:5c:a5:ed:07:77:86:bc:95:d2:
be:1e:70:a0:0f:f1:2a:26:ec:ef:cb:63:32:6f:03:
92:7b:24:51:d8:ac:cf:d0:09:ce:7e:71:15:2a:bb:
3d:81:a0:f4:29:8c:d7:2f:6d:c9:08:2f:b0:a9:41:
79:c9:e1:85:0d:8a:25:75:d0:f6:2e:53:f4:35:92:
f2:8c:c1:0a:05:fe:11:95:13:da:8c:66:6a:d8:ce:
bb:fb:29:31:4d:27:3a:d2:71:c3:b4:fc:b8:e2:a5:
74:d3:b0:7e:cf:1d:5b:9f:bb:c8:d7:d4:96:10:13:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:51:0A:4E:54:8F:A5:C9:C1:4D:7F:88:27:F7:C7:90:61:96:BB
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/X3BRCk5Uj6XJwU1_iCf3x5Bhlrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.172.0/22
212.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:1e:1d:c3:87:f4:05:10:a1:9e:c7:4b:83:45:fc:6a:32:2c:
94:38:91:19:eb:23:df:19:b9:3b:be:52:60:3b:b5:49:d9:01:
3f:3a:2d:8f:33:9c:9a:6c:ac:46:52:90:da:67:19:eb:13:16:
bd:ae:3c:5a:dd:11:ec:1d:8d:1f:16:11:bb:08:a6:d0:0e:df:
cd:fe:9f:73:b2:68:d5:8b:21:ba:07:4d:52:e0:1a:ea:60:19:
02:cd:32:69:51:5e:98:be:68:51:96:2c:4d:68:c0:03:bb:00:
27:b9:a3:b8:29:a3:e0:94:3c:bd:78:14:d5:12:2a:39:03:d0:
d7:f0:56:1f:1e:5b:30:09:97:83:f3:b9:1d:6e:5e:a8:95:15:
47:4b:f0:d7:fa:e6:7e:4d:4e:c7:ec:04:15:20:f1:09:10:70:
c5:eb:23:4a:4d:a6:75:86:fb:fe:81:8d:93:c3:a9:bd:6b:e1:
82:7b:6f:cd:63:d5:eb:76:12:b7:6f:0e:6f:ca:25:e1:02:d9:
45:12:f3:ae:6c:93:63:c2:b9:e8:ae:ae:7f:73:cd:2a:82:40:
ea:ef:9b:a5:a7:c8:70:3d:f5:32:7b:9b:b6:11:b3:62:a8:91:
89:91:2f:72:e4:4d:b3:0f:34:da:26:6b:ce:bc:65:fa:f9:e2:
69:fe:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:24 2025 by rpki-client