Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/at6Njp_LSdm-6vSZZn0Y2wUTW9w.roa
File: at6Njp_LSdm-6vSZZn0Y2wUTW9w.roa (raw, json)
Hash identifier: /L/XMnqbV49Tm12Uts9p2wICgYYXmFtgyFTFjXCqUzc=
Subject key identifier: 6A:DE:8D:8E:9F:CB:49:D9:BE:EA:F4:99:66:7D:18:DB:05:13:5B:DC
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0198B46489CB5DDCAEBC05A9A243B54D81F1
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/at6Njp_LSdm-6vSZZn0Y2wUTW9w.roa
Signing time: Sat 16 Aug 2025 19:39:04 +0000
ROA not before: Sat 16 Aug 2025 19:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 212.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b4:64:89:cb:5d:dc:ae:bc:05:a9:a2:43:b5:4d:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 16 19:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ade8d8e9fcb49d9beeaf499667d18db05135bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:8d:6b:54:cc:38:84:25:34:b0:18:5f:0a:
b4:a3:76:dc:41:18:c5:e1:ca:f5:1d:80:5d:ca:aa:
25:66:87:40:e6:e6:6e:21:19:84:fa:e0:72:24:63:
ca:84:6b:eb:4e:ec:55:27:33:79:ec:a5:91:3d:af:
f4:fc:60:7c:48:74:9b:d9:fd:c3:9a:02:17:47:8f:
d5:e1:ce:70:d3:ec:b3:df:96:82:f2:4a:7f:d2:98:
40:14:52:60:32:1d:92:0f:22:4d:33:b8:ea:1c:4a:
9c:f3:26:ff:de:01:b0:46:6c:51:71:43:42:83:89:
1f:f6:1c:bb:63:9c:23:13:85:1b:7d:30:30:2d:68:
50:94:0b:9c:e2:43:83:9f:12:da:23:91:eb:54:29:
a8:1c:c3:13:41:ff:3a:c1:77:f7:24:b0:31:e8:01:
4b:bf:6e:c5:3a:b0:d5:5f:f2:d3:1d:a8:a9:81:fb:
7a:9e:ac:46:74:44:c5:fa:94:66:93:ac:e5:e6:7a:
0c:4f:c7:5a:2c:ee:52:e2:d7:0c:b1:54:b2:0b:00:
72:c4:7d:f0:1c:17:59:59:03:5c:c3:43:bc:16:a1:
91:fa:6a:b6:51:43:cd:62:3f:e0:6b:f6:ad:28:19:
c8:0c:0e:c1:35:ed:be:bb:19:80:0e:c8:04:c5:ac:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DE:8D:8E:9F:CB:49:D9:BE:EA:F4:99:66:7D:18:DB:05:13:5B:DC
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/at6Njp_LSdm-6vSZZn0Y2wUTW9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:99:3c:52:ac:11:e7:d6:81:39:f9:77:99:18:f6:43:45:90:
ca:2e:14:7e:70:84:f1:e1:56:8b:55:de:f2:0e:dd:8c:85:5f:
c5:1f:97:6c:a5:bb:0e:ac:40:ce:ad:67:58:3f:71:e2:b6:7e:
69:8f:d5:6f:0c:30:62:3f:78:d5:f5:55:41:d4:20:c7:47:d8:
6d:fc:eb:09:14:8d:6a:14:6d:af:c8:81:f6:e3:47:e3:55:d6:
56:9a:85:74:54:62:13:72:09:0f:fc:a5:3e:10:2b:b5:83:8a:
ac:5f:d2:b5:7c:10:20:c8:de:c7:e7:e7:bf:4f:5b:b5:79:94:
58:be:0c:83:c3:16:22:f7:ba:54:6b:de:66:0f:3d:7a:f4:5d:
60:5a:eb:62:5a:1a:49:16:b3:5b:2f:8b:cf:3f:8d:35:05:ff:
a0:bf:c8:68:3d:ad:7e:e5:c9:18:18:0c:11:70:98:06:a7:27:
5d:04:7a:b4:57:ef:d9:08:68:28:9c:55:78:1d:ae:16:30:18:
3d:e1:52:49:c3:44:2c:5f:08:1b:cf:2a:ef:15:9f:3f:b5:96:
90:0c:46:aa:ff:1b:cd:be:fd:99:8f:6b:f5:63:68:27:2d:79:
78:f7:76:5b:5d:65:c6:f7:ed:56:05:db:61:c0:8e:9b:36:bb:
81:64:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:04 2025 by rpki-client