Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ruS1fWtPlHmNH__1su1ISti-MpY.roa
File: ruS1fWtPlHmNH__1su1ISti-MpY.roa (raw, json)
Hash identifier: 4eb0ZnOjl95EuN6Pvn96aPW+aMxTHlzRe4XlKkA85yI=
Subject key identifier: AE:E4:B5:7D:6B:4F:94:79:8D:1F:FF:F5:B2:ED:48:4A:D8:BE:32:96
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019CF29FDFC3A667B2F35D0ED7825C3BC0D8
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ruS1fWtPlHmNH__1su1ISti-MpY.roa
Signing time: Sun 15 Mar 2026 17:51:29 +0000
ROA not before: Sun 15 Mar 2026 17:51:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/23 maxlen: 23
212.116.237.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.238.0/24 maxlen: 24
212.116.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:9f:df:c3:a6:67:b2:f3:5d:0e:d7:82:5c:3b:c0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 15 17:51:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aee4b57d6b4f94798d1ffff5b2ed484ad8be3296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:e3:42:81:84:5e:76:82:0b:29:34:23:4d:
83:69:a9:de:26:53:7a:95:02:bc:9e:9f:88:16:bf:
b4:bd:35:d0:5a:19:66:1c:c5:22:d4:59:c4:93:4b:
db:b8:ca:f1:28:5c:c3:5d:7b:40:0f:67:f2:b0:69:
1d:d9:49:23:64:9f:eb:33:f6:be:1d:e4:fb:b2:61:
80:81:4f:e9:7b:d9:62:48:fe:53:ab:5a:b1:ab:df:
06:bb:df:36:71:92:ba:c5:d0:08:e1:ac:4f:3c:8a:
7a:eb:d2:77:13:31:e6:1e:59:e4:cc:82:82:5b:a3:
42:79:27:1e:f7:f5:b5:8c:fd:6f:76:22:31:47:f3:
76:4f:f3:ab:bc:f2:8d:29:4c:84:0e:b5:8a:97:3c:
26:52:60:e2:bb:9f:55:38:5d:13:9f:08:a6:32:2d:
4e:02:97:97:8b:23:a0:eb:82:5b:27:b5:91:89:5a:
44:79:a4:04:7e:cd:25:a3:e9:37:bf:03:49:a0:12:
e7:6e:52:31:16:b9:e3:45:c4:f0:f8:25:24:11:3d:
a0:34:c6:c2:01:d8:a2:2c:32:75:a4:9f:f7:12:d0:
3f:af:09:4c:07:9b:74:c7:a8:9f:45:0b:94:be:2b:
25:e3:de:80:a4:5d:ef:6f:1a:b7:6d:ca:f0:bc:5f:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:B5:7D:6B:4F:94:79:8D:1F:FF:F5:B2:ED:48:4A:D8:BE:32:96
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ruS1fWtPlHmNH__1su1ISti-MpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/23
212.116.237.0-212.116.239.255
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:40:40:32:3a:91:08:76:9b:50:72:b3:91:6d:42:54:e2:e4:
78:6c:56:72:99:57:00:b9:86:ea:d3:75:67:e4:a1:48:7f:86:
1d:ba:34:52:be:e1:92:ba:b5:fb:9d:07:03:b3:a8:41:8e:80:
74:6e:e3:b8:47:3c:3b:8e:f2:0b:cf:c0:e3:6a:8c:60:9f:9b:
e6:4e:b5:fb:51:8e:37:c4:ba:6a:e0:2b:29:c6:f3:b2:6b:f5:
d6:5c:c5:42:ee:4f:b7:d6:62:02:c1:22:8e:02:42:cb:5f:58:
1d:93:8e:ac:ce:e0:88:8a:0c:3b:ed:5a:57:bf:7d:d4:30:d8:
93:5e:34:3a:ac:62:81:9d:d3:ce:d3:f6:fc:81:85:5b:68:1a:
5f:45:64:e1:9d:ed:51:6f:9c:56:d7:d9:d8:7e:ef:12:f8:35:
6a:4d:d3:5e:d7:e1:5b:69:fa:00:ff:dc:86:62:b3:bf:12:06:
96:4e:04:6c:91:3f:3e:4f:f5:39:ca:04:15:a5:b6:78:18:3e:
e6:1a:48:2b:0d:2a:fe:93:90:1f:33:b0:60:ec:86:fd:db:5b:
2a:b6:50:98:99:7f:ff:e3:3f:76:72:ed:00:f6:27:48:ac:df:
71:a8:83:5e:11:24:76:57:e2:ca:5c:0e:04:6e:d5:24:d1:a2:
16:21:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:11 2026 by rpki-client