Route Origin Authorization
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830323a3a2f33362d3434203d3e20323039333036.roa
File: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (raw, json)
Hash identifier: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=
Subject key identifier: D0:E1:7D:24:6F:52:E6:3E:DB:CD:04:BD:24:69:CF:6B:F4:2D:6B:AC
Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial: 216A4280473156353CFDDCF9F1C606ABB8E74959
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830323a3a2f33362d3434203d3e20323039333036.roa
Signing time: Wed 25 Feb 2026 13:28:50 +0000
ROA not before: Wed 25 Feb 2026 13:23:50 +0000
ROA not after: Wed 24 Feb 2027 13:28:50 +0000
asID: 209306
IP address blocks: 2a13:1802::/36 maxlen: 44
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6a:42:80:47:31:56:35:3c:fd:dc:f9:f1:c6:06:ab:b8:e7:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Validity
Not Before: Feb 25 13:23:50 2026 GMT
Not After : Feb 24 13:28:50 2027 GMT
Subject: CN=D0E17D246F52E63EDBCD04BD2469CF6BF42D6BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:8e:27:d4:22:44:b4:57:73:c2:6e:e3:f2:
4b:46:18:39:a8:22:a7:c3:4a:d6:21:06:02:87:d1:
c8:23:c9:db:05:46:fa:b5:1c:68:9f:e9:47:1b:86:
48:50:8d:76:b6:b5:26:09:2c:60:4c:e6:b8:eb:a4:
74:52:e1:9f:4b:db:90:a1:9a:c2:dd:68:84:1c:5a:
90:58:13:36:db:c6:df:7e:9d:61:1f:17:cc:db:97:
6a:8b:7e:d6:2c:b8:3e:ee:e1:f4:5b:aa:fb:44:21:
17:9f:30:80:12:58:92:7b:a0:c4:87:fe:c6:4b:59:
e2:69:82:d3:bd:64:d2:08:17:29:f4:ac:29:d9:06:
f0:57:40:b4:35:1b:92:66:65:e6:31:35:93:c8:9b:
f7:81:b3:58:62:60:b6:8b:cb:0e:96:d4:63:af:f7:
38:64:26:43:43:d2:a5:41:a4:93:c4:e9:40:6f:cb:
49:9f:a0:32:4e:73:99:bc:d5:e4:ac:59:71:15:32:
5d:4a:38:2a:13:12:e4:13:b0:2c:3c:ed:2e:a6:39:
8f:4c:d2:f4:80:56:48:18:8c:34:54:6e:52:58:4a:
51:79:29:d5:f0:6a:23:f6:99:b4:4a:cf:f5:0f:75:
68:9b:1a:1c:53:fd:55:94:7e:05:5a:c1:27:e0:15:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:7D:24:6F:52:E6:3E:DB:CD:04:BD:24:69:CF:6B:F4:2D:6B:AC
X509v3 Authority Key Identifier:
keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830323a3a2f33362d3434203d3e20323039333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1802::/36
Signature Algorithm: sha256WithRSAEncryption
62:93:2f:fd:ed:3d:c5:47:49:1b:e8:c8:40:fd:c5:dc:29:12:
80:2f:56:51:4e:a4:7b:d0:65:4a:7c:18:5d:d3:84:61:e4:18:
f4:54:0b:c7:4c:21:b6:d9:47:5f:6f:92:fa:45:3a:36:68:ea:
60:9e:b1:ba:13:50:e1:1d:fe:4c:1a:ce:3e:51:62:85:51:27:
e1:d9:65:a0:42:af:db:2d:ac:84:5a:a3:5e:5e:ee:fd:1a:83:
d4:5a:ba:af:12:25:a2:b9:c6:0a:a2:23:aa:2f:39:49:ae:ee:
b4:8e:ef:ba:35:2e:19:ab:ce:d5:7d:e4:d2:24:1c:22:c8:a1:
cb:69:dd:fd:0f:52:68:36:c5:17:e7:77:ba:eb:f2:ea:b3:8a:
15:51:c6:5e:dc:4f:98:8a:62:ad:3f:97:56:64:67:7e:d4:75:
e7:51:ac:9f:71:1d:09:4b:e8:87:6a:77:f5:bf:3d:20:df:39:
57:33:6b:fd:4d:40:52:e3:73:0b:bb:c2:57:a8:18:5e:75:59:
8c:fc:b9:31:90:d8:d4:a8:b3:bf:02:34:68:2c:97:e7:76:48:
51:93:f0:7b:46:b3:f5:04:b3:d5:08:44:d8:e7:ec:04:33:9c:
f6:0e:89:ab:cd:fc:66:15:2c:24:ba:77:01:d6:75:83:2b:1e:
f5:f5:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:30 2026 by rpki-client