Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bSOSgLkVeL8Z_HtbPYJZyp0B3P0.roa
File: bSOSgLkVeL8Z_HtbPYJZyp0B3P0.roa (raw, json)
Hash identifier: nzLnS8vvn/wdeM6w6EfJqZQN/FgWQe/04T1B/jmaqtk=
Subject key identifier: 6D:23:92:80:B9:15:78:BF:19:FC:7B:5B:3D:82:59:CA:9D:01:DC:FD
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019DF8EE2E9224B2F0D5CA05F2184C0FC98E
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bSOSgLkVeL8Z_HtbPYJZyp0B3P0.roa
Signing time: Tue 05 May 2026 16:17:32 +0000
ROA not before: Tue 05 May 2026 16:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201386
IP address blocks: 212.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:ee:2e:92:24:b2:f0:d5:ca:05:f2:18:4c:0f:c9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: May 5 16:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d239280b91578bf19fc7b5b3d8259ca9d01dcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:80:34:d1:e8:2c:9f:8a:83:8d:f9:e7:7a:
17:1d:8f:43:ee:10:88:d0:36:d5:04:ae:ed:11:e1:
c9:69:57:84:cf:95:49:f5:46:69:a7:4f:b1:60:25:
0e:99:61:28:ac:cd:33:2d:7e:87:1b:0b:e8:4c:de:
3e:ec:74:f9:c4:57:9f:8d:d6:15:62:11:cf:34:2e:
92:3f:ef:aa:bc:21:f8:ef:5a:4a:9d:3e:11:48:e0:
22:30:99:98:e6:03:da:ee:83:23:4f:16:41:88:17:
21:eb:e3:c5:84:96:23:8b:d4:dc:a4:48:72:7b:1d:
0f:00:27:72:75:bc:cf:a4:03:b5:6b:65:26:18:ec:
90:89:39:43:74:ec:6b:5f:3b:1c:d5:f6:fe:34:48:
8a:3e:27:bb:22:b9:1b:91:9b:24:fc:b1:fc:de:04:
8d:4b:af:eb:f5:89:85:65:a3:3b:2a:2a:33:ea:53:
9a:e0:eb:f4:ff:64:f4:85:8d:af:72:64:0b:9e:c5:
ba:d0:82:aa:64:c4:f2:7c:23:ff:de:a3:8b:fb:42:
8a:f0:56:5a:60:15:dd:ef:96:77:f2:c2:f0:d7:92:
62:38:62:ac:c3:b3:01:78:20:c4:2e:24:bd:dd:e2:
c5:d9:9e:08:63:d8:0b:76:aa:c4:3e:e0:c6:10:7a:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:23:92:80:B9:15:78:BF:19:FC:7B:5B:3D:82:59:CA:9D:01:DC:FD
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bSOSgLkVeL8Z_HtbPYJZyp0B3P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:3b:e4:9f:99:c8:03:53:9b:f7:bf:01:06:6f:30:23:5d:99:
a2:e7:eb:4c:5d:94:dd:9a:4b:12:57:82:98:81:1e:d4:c7:a2:
a3:77:09:59:70:3e:17:e1:2b:fc:22:6e:e7:6c:21:8f:02:84:
81:9e:50:bd:45:5f:6d:50:f3:87:52:cd:ec:4f:1b:0d:7e:50:
73:60:f8:32:49:40:a6:32:88:ab:d0:00:27:c9:83:68:e3:45:
8c:a1:61:6c:87:9f:18:21:41:54:46:db:0c:79:47:03:57:2d:
7e:9a:ea:3f:61:78:81:1e:26:d6:80:36:36:d0:e6:df:85:53:
f2:9f:8a:e5:fd:5a:88:1f:45:16:db:5c:01:65:0a:eb:93:f9:
40:3c:0c:44:d5:03:28:98:ba:2e:d2:6a:97:26:13:78:49:bc:
75:70:12:84:c3:9f:ea:fe:45:8c:79:e1:fb:0b:96:9d:dd:16:
91:a8:98:ba:66:b0:39:ae:19:b0:3e:e6:dd:f8:7d:7a:fa:f3:
bf:7f:c0:95:83:36:85:69:61:0a:96:0c:4f:a0:57:9a:56:4b:
7b:3d:a8:30:60:75:7f:fd:c3:30:7f:d5:0d:13:fe:da:b6:78:
31:4a:94:91:33:63:4d:5d:9b:b1:06:9b:f6:92:9d:6c:13:a0:
64:84:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:29 2026 by rpki-client