Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/bSU8P3Ab5BhC52s8mvo6Gjhap2I.roa
File: bSU8P3Ab5BhC52s8mvo6Gjhap2I.roa (raw, json)
Hash identifier: Y7nzUpJ3HulC8mXXETILgbKfFwIyvw2y6s1V4bxMQac=
Subject key identifier: 6D:25:3C:3F:70:1B:E4:18:42:E7:6B:3C:9A:FA:3A:1A:38:5A:A7:62
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A04558E89F3BC5F2F9C0C89F534C8FD5AD
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/bSU8P3Ab5BhC52s8mvo6Gjhap2I.roa
Signing time: Thu 27 Aug 2026 22:30:49 +0000
ROA not before: Thu 27 Aug 2026 22:30:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 212.100.167.0/24 maxlen: 24
212.100.175.0/24 maxlen: 24
212.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:58:e8:9f:3b:c5:f2:f9:c0:c8:9f:53:4c:8f:d5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Aug 27 22:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d253c3f701be41842e76b3c9afa3a1a385aa762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:d1:fa:3a:df:68:14:16:c5:2d:f0:d0:9e:
c4:89:e9:c2:ef:c5:78:f9:f8:42:c7:04:84:01:bb:
76:80:74:fc:41:38:7c:58:df:28:17:5c:a3:20:d5:
47:93:e5:ae:65:0f:c0:43:a7:88:0b:e8:64:a8:06:
43:bc:cb:67:74:75:dc:57:92:2e:d8:da:05:c2:fa:
eb:8a:8c:53:57:fd:e4:0b:31:34:12:29:e4:f2:19:
9c:5f:8d:07:49:55:58:83:aa:96:f8:95:ce:82:82:
ff:eb:47:27:26:d4:e6:d4:e1:b9:c4:72:88:51:f4:
1f:b3:85:46:a0:16:e1:04:48:2d:1c:5f:86:3b:30:
a6:31:fb:27:60:04:f7:94:4c:d4:5f:9f:53:8d:e3:
3f:77:fe:6b:a2:ba:20:92:31:36:8a:dc:cd:05:af:
26:cd:20:9f:2a:ea:eb:ac:9e:7d:f5:ee:a2:a0:05:
12:b7:7d:14:e0:ce:7b:82:e5:c0:7c:0c:e3:9d:33:
f2:0e:b1:15:1f:12:f9:ca:88:d6:be:5d:ce:86:84:
f3:f9:9b:7e:73:7a:5b:96:71:48:cd:57:58:61:f1:
1f:1d:84:73:4d:94:c2:0c:20:73:f0:da:8c:7e:3e:
ea:41:09:20:7e:08:51:17:1a:17:c7:01:1b:55:07:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:3C:3F:70:1B:E4:18:42:E7:6B:3C:9A:FA:3A:1A:38:5A:A7:62
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/bSU8P3Ab5BhC52s8mvo6Gjhap2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.167.0/24
212.100.175.0/24
212.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7d:3a:ad:84:51:35:9c:86:d8:20:5d:ab:c8:a7:b2:29:94:
9b:43:0e:30:32:81:49:69:da:8f:a3:66:44:b5:de:f3:67:70:
41:f5:70:0c:0d:0c:f6:ef:f0:82:71:4e:23:f2:01:8c:59:77:
3d:7e:9f:6d:4d:3e:cd:50:02:aa:4c:4c:5b:c8:03:43:3f:51:
cf:91:a2:a6:00:07:32:db:33:97:e7:ac:78:9b:dd:a6:d5:57:
d5:d6:aa:42:36:76:dd:49:07:e8:94:e6:d3:85:1c:e8:0b:d1:
d4:1f:8c:91:e8:1c:cb:61:94:bd:5c:2e:ce:11:4f:ca:a9:bc:
36:e9:ad:b5:45:2d:c2:79:86:cd:45:5b:52:25:35:4b:61:dc:
63:dc:f5:53:68:61:95:ba:f3:1d:01:54:e8:06:74:55:05:ac:
f1:4d:22:79:31:8f:e0:37:a1:2d:01:86:7b:fa:c8:8c:be:03:
aa:30:f2:08:43:10:b0:4f:8c:cd:16:f4:ca:4f:4b:57:52:8c:
0b:89:e8:db:5b:03:06:85:c6:30:33:c5:20:51:e8:86:13:8c:
23:ff:40:35:6d:f2:76:94:7e:a3:75:24:92:07:bd:35:4f:36:
20:34:14:fd:15:3b:ed:d4:4c:1c:48:84:12:31:5b:d7:da:76:
0e:52:d4:1a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBFWOifO8Xy+cDIn1NMj9WtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjYwODI3MjIzMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDI1M2MzZjcwMWJlNDE4NDJlNzZiM2M5YWZhM2ExYTM4NWFhNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs7R+jrfaBQWxS3w0J7EienC78V4
+fhCxwSEAbt2gHT8QTh8WN8oF1yjINVHk+WuZQ/AQ6eIC+hkqAZDvMtndHXcV5Iu
2NoFwvrrioxTV/3kCzE0Eink8hmcX40HSVVYg6qW+JXOgoL/60cnJtTm1OG5xHKI
UfQfs4VGoBbhBEgtHF+GOzCmMfsnYAT3lEzUX59TjeM/d/5rorogkjE2itzNBa8m
zSCfKurrrJ599e6ioAUSt30U4M57guXAfAzjnTPyDrEVHxL5yojWvl3OhoTz+Zt+
c3pblnFIzVdYYfEfHYRzTZTCDCBz8NqMfj7qQQkgfghRFxoXxwEbVQerJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG0lPD9wG+QYQudrPJr6Oho4WqdiMB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvYlNVOFAzQWI1QmhDNTJzOG12bzZHamhhcDJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1GSnAwQA
1GSvAwQA1GS/MA0GCSqGSIb3DQEBCwUAA4IBAQBbfTqthFE1nIbYIF2ryKeyKZSb
Qw4wMoFJadqPo2ZEtd7zZ3BB9XAMDQz27/CCcU4j8gGMWXc9fp9tTT7NUAKqTExb
yANDP1HPkaKmAAcy2zOX56x4m92m1VfV1qpCNnbdSQfolObThRzoC9HUH4yR6BzL
YZS9XC7OEU/Kqbw26a21RS3CeYbNRVtSJTVLYdxj3PVTaGGVuvMdAVToBnRVBazx
TSJ5MY/gN6EtAYZ7+siMvgOqMPIIQxCwT4zNFvTKT0tXUowLiejbWwMGhcYwM8Ug
UeiGE4wj/0A1bfJ2lH6jdSSSB701TzYgNBT9FTvt1EwcSIQSMVvX2nYOUtQa
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:37 2026 by rpki-client