Route Origin Authorization
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa
File: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (raw, json)
Hash identifier: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=
Subject key identifier: F9:AF:D9:9C:85:F6:A5:A4:B7:2A:7B:7D:D7:40:68:81:83:81:27:09
Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial: 303F00F2E74E212945174607D39CA7D5D4D8DB7C
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa
Signing time: Wed 25 Feb 2026 13:28:50 +0000
ROA not before: Wed 25 Feb 2026 13:23:50 +0000
ROA not after: Wed 24 Feb 2027 13:28:50 +0000
asID: 4842
IP address blocks: 194.127.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3f:00:f2:e7:4e:21:29:45:17:46:07:d3:9c:a7:d5:d4:d8:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Validity
Not Before: Feb 25 13:23:50 2026 GMT
Not After : Feb 24 13:28:50 2027 GMT
Subject: CN=F9AFD99C85F6A5A4B72A7B7DD740688183812709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:52:bc:7f:d4:e1:64:8c:0a:67:06:94:67:
60:62:86:dd:ca:fb:6a:16:5e:54:89:1c:f8:4a:8a:
57:86:0e:d1:27:d3:aa:32:ea:7d:3f:d4:e2:3b:ca:
b1:e9:21:a1:ee:fc:c2:32:75:44:7b:88:f3:90:c4:
a6:6b:83:c8:19:0f:0b:e3:45:29:58:42:7d:18:b8:
b0:96:08:d8:bc:d4:fe:d1:72:9c:2f:40:3c:00:ee:
0d:0a:03:15:be:25:31:fd:50:b9:1a:07:37:d0:db:
a7:74:d8:b0:6d:b9:dd:fe:5f:f3:59:ac:c9:0d:8e:
f3:56:66:a3:93:5f:4b:13:35:f4:52:cd:3d:69:45:
78:3f:bc:e0:74:32:28:fc:31:59:39:14:6b:94:fd:
c5:1c:b7:c8:6e:d9:1c:d5:44:6d:21:3f:20:b7:f8:
e7:96:0d:fe:9f:10:69:3a:cf:e2:60:ff:79:a9:fa:
15:1d:e4:5e:dc:cd:32:fb:c5:54:00:83:73:b8:e0:
8f:3c:9a:ba:1a:60:99:43:de:3b:89:59:f6:50:37:
d8:71:20:1f:69:b6:ea:8c:e4:15:60:e6:85:92:ec:
ef:8c:74:9b:0c:92:6b:ef:b8:f1:b9:1e:9b:12:d9:
6f:28:7d:7a:c6:09:c3:75:d0:2c:fd:47:74:e3:6b:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:D9:9C:85:F6:A5:A4:B7:2A:7B:7D:D7:40:68:81:83:81:27:09
X509v3 Authority Key Identifier:
keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.229.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c6:8c:16:98:03:ed:22:80:87:7f:6c:ab:8b:21:dd:ce:37:
d6:3f:c9:5f:db:d8:c5:f6:7a:32:6e:9f:d8:4d:51:04:b7:63:
70:99:82:77:d7:c1:37:34:98:a1:c2:b3:d9:e5:b9:cd:f4:c9:
44:7a:2f:ba:c7:0d:e3:e7:21:6a:0c:f7:5e:80:ea:9e:8d:53:
7c:ff:bc:46:2a:e0:f8:45:f6:5c:df:ba:5d:5f:0b:95:75:55:
10:24:5c:2c:ad:31:32:bf:82:e7:d1:f5:94:0e:b7:d2:d7:33:
d1:44:1a:b7:48:90:e3:4e:96:fe:14:b2:6f:ce:88:c6:3b:7d:
c4:2b:d1:0a:3e:9e:db:ed:96:4a:06:c7:bc:d9:df:52:a9:75:
55:17:bd:12:ed:74:04:4e:e6:16:4c:2c:d6:7d:5c:d9:2d:54:
02:fa:18:19:d7:4e:22:cd:f5:14:e1:bc:8c:6f:e8:bb:96:13:
83:93:c9:03:3c:c4:c8:42:0e:39:06:4f:14:bd:85:d6:0b:a9:
66:a7:d7:01:d2:67:77:88:12:1c:f9:c5:5c:bc:1f:43:c9:67:
a3:ed:5a:09:8a:4f:31:5b:f5:6e:cb:c4:fa:3a:4f:2b:32:99:
a6:15:3e:db:f2:99:54:da:da:1c:09:b0:09:23:79:3f:74:e7:
3d:12:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:53 2026 by rpki-client