
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/kvfcSwJmOPsGaE4UqRy5AFACNvk.roa
File: kvfcSwJmOPsGaE4UqRy5AFACNvk.roa (raw, json)
Hash identifier: mCRRZZho096ABVffpIbHwpLxCtigtZ+8SR52PBec3Zk=
Subject key identifier: 92:F7:DC:4B:02:66:38:FB:06:68:4E:14:A9:1C:B9:00:50:02:36:F9
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0199C24CD1B8C2C347CE3000D7E7EA9C6E91
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/kvfcSwJmOPsGaE4UqRy5AFACNvk.roa
Signing time: Wed 08 Oct 2025 05:30:38 +0000
ROA not before: Wed 08 Oct 2025 05:30:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/22 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:4c:d1:b8:c2:c3:47:ce:30:00:d7:e7:ea:9c:6e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 8 05:30:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92f7dc4b026638fb06684e14a91cb900500236f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:21:05:5c:17:02:84:b8:b2:8b:0f:26:b9:
a7:3a:38:0f:96:6b:5c:dd:5f:20:56:6d:7c:7b:08:
ec:85:53:d9:5b:92:17:6b:e3:c5:3a:de:9d:8e:b5:
33:74:72:50:76:72:4d:7c:e8:3f:3e:21:3c:b2:ca:
7f:69:1f:d5:11:2e:44:ea:2a:9c:29:53:d5:61:50:
29:a4:4d:a5:ee:65:a6:e9:06:94:c1:9e:b8:f5:80:
d1:dc:fc:02:ba:37:4e:a5:6e:4c:d3:cb:35:c9:7f:
1a:10:32:66:cd:00:91:6b:63:0f:41:c8:9e:95:8a:
87:cc:28:ef:50:66:d5:4e:e4:e6:34:76:8f:da:ed:
fd:05:5a:2c:80:e3:40:c5:8f:41:48:49:c3:48:e5:
88:92:39:0a:16:56:79:d4:b3:1e:e6:79:aa:61:de:
15:96:c7:c4:bb:21:0b:cb:77:50:4e:51:57:1e:78:
e1:7f:d5:be:40:85:e5:44:6a:e8:65:a4:10:5a:48:
16:ad:54:cc:ae:c0:b3:71:20:6d:78:07:88:c2:ec:
ad:9c:b4:e3:dd:17:3a:63:ed:f3:4a:eb:14:2d:14:
3a:63:c3:66:86:f5:cb:21:b7:bf:40:03:28:84:43:
58:70:0d:c5:75:64:f3:f3:ae:51:06:61:d6:00:53:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:DC:4B:02:66:38:FB:06:68:4E:14:A9:1C:B9:00:50:02:36:F9
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/kvfcSwJmOPsGaE4UqRy5AFACNvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/22
212.116.238.0/23
Signature Algorithm: sha256WithRSAEncryption
12:dd:fe:0e:b6:54:ba:aa:f1:ad:c1:7f:1c:9b:89:f3:04:45:
e6:5c:36:74:3f:2e:3e:c0:c2:fc:b2:c8:da:1d:71:fb:25:4d:
b0:f1:97:a4:1c:45:28:c4:8d:a3:3a:6e:38:7a:69:06:07:73:
f4:87:3d:08:c0:b6:e9:4a:8f:b6:d2:5d:42:21:1f:4c:ad:bf:
08:d5:9d:fe:d4:0f:2f:85:4b:d7:d3:96:05:28:f0:ad:3e:28:
a9:5e:8a:c9:54:8e:61:55:4c:81:8f:54:69:dd:89:c7:2f:d1:
43:86:8d:c8:b3:ea:b7:46:d3:8e:63:41:ec:fa:3d:fe:04:f4:
ab:7f:2a:d6:65:37:f3:19:34:30:1d:af:f1:e6:2f:e9:88:5b:
b2:58:9d:92:e0:bc:69:1a:4c:5a:2b:89:b4:db:fa:ad:d7:36:
87:19:2d:ee:be:f7:ee:0e:ce:99:3e:f4:30:bb:18:ce:5a:e7:
fb:2f:90:1c:bf:51:5d:47:03:91:08:db:6b:28:6a:be:43:41:
99:6f:a9:02:6e:bc:40:e7:e3:42:36:f9:f6:61:3f:48:d7:a5:
73:83:e3:70:32:12:de:63:98:c9:86:0a:c2:d0:18:75:fa:b8:
a4:90:b9:6b:a7:25:7f:de:94:5c:b8:14:24:d9:6a:8b:fb:bf:
0a:1f:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:47 2025 by rpki-client