Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3nJk1Ft7Kx_R3zheusafBOcx5hw.roa
File: 3nJk1Ft7Kx_R3zheusafBOcx5hw.roa (raw, json)
Hash identifier: hIkuuXc6whQrC1ZxJZ25fCLrhhkESr63PBnZ/qCfJGY=
Subject key identifier: DE:72:64:D4:5B:7B:2B:1F:D1:DF:38:5E:BA:C6:9F:04:E7:31:E6:1C
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019E5D7DF6A366102E3B91B7A4010942C675
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3nJk1Ft7Kx_R3zheusafBOcx5hw.roa
Signing time: Mon 25 May 2026 04:56:36 +0000
ROA not before: Mon 25 May 2026 04:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/23 maxlen: 23
212.116.229.0/24 maxlen: 24
212.116.237.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.238.0/24 maxlen: 24
212.116.243.0/24 maxlen: 24
212.116.245.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:7d:f6:a3:66:10:2e:3b:91:b7:a4:01:09:42:c6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: May 25 04:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de7264d45b7b2b1fd1df385ebac69f04e731e61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:3e:e0:3e:68:1b:d1:51:e6:f5:a0:da:66:
23:c8:f9:d4:26:83:7f:88:58:e2:31:c7:97:d2:36:
9d:51:9b:7c:41:76:a0:bc:c5:ab:98:84:33:52:2a:
6b:15:f1:ff:ce:aa:10:61:c0:b5:38:7c:3e:1b:d1:
14:88:93:a1:50:65:00:ff:ca:53:2d:aa:d5:60:5f:
8e:c4:7e:dc:5f:a0:0b:00:67:da:b6:e3:52:ad:25:
1b:cc:14:ab:5f:e6:94:06:ad:38:cf:bb:da:cf:19:
57:d0:c9:2e:b5:2f:f6:84:dc:19:ba:d3:50:c3:f5:
5a:d6:e0:88:55:d5:61:45:fe:d1:ac:96:c8:df:3b:
a3:b6:14:59:41:75:8a:15:d7:48:9a:05:a2:97:a4:
2c:d4:54:a1:e4:20:ec:79:99:fb:9b:dc:ae:b5:32:
4f:aa:f8:2b:46:1a:ea:1d:17:31:7f:08:0c:08:f6:
25:80:c1:42:8c:62:42:0f:a8:6d:47:4c:dd:42:ce:
55:5a:90:30:7a:7f:0b:b7:ea:e2:b9:36:d3:6e:7b:
12:ed:70:da:e4:4b:71:2c:24:14:c9:d3:9a:3e:37:
3f:8d:17:ec:c9:a5:4c:6e:ee:92:df:2f:dc:91:b3:
76:f3:ac:67:66:99:75:91:b3:8a:9c:7b:8d:31:61:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:64:D4:5B:7B:2B:1F:D1:DF:38:5E:BA:C6:9F:04:E7:31:E6:1C
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3nJk1Ft7Kx_R3zheusafBOcx5hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/23
212.116.237.0-212.116.239.255
212.116.243.0/24
212.116.245.0-212.116.246.255
Signature Algorithm: sha256WithRSAEncryption
2d:ba:4f:91:f3:f6:7d:8a:6b:e6:ea:eb:e9:49:1a:9a:3e:ba:
55:f1:58:c2:8f:6c:59:1a:f1:ac:45:c1:55:57:42:43:65:76:
5c:7d:a6:a5:08:e3:47:75:4c:24:cf:a1:d0:52:40:3d:90:c6:
41:34:cf:04:1a:31:5e:40:a5:76:58:99:f9:e1:38:b2:a8:10:
c2:a8:66:b9:ae:dd:2a:fc:54:fb:c1:29:7c:13:fb:35:1e:8c:
39:b1:f5:84:e1:3a:5b:75:bf:22:27:5d:6b:29:cc:97:a7:69:
df:f1:92:77:d3:46:ab:30:27:4e:6f:d3:87:ff:e4:1c:08:11:
ff:d1:df:5d:a8:be:9c:40:56:9f:7f:8f:69:7d:de:32:37:a5:
60:fa:2b:00:e5:a8:43:5a:7c:2d:16:b6:86:0a:d5:41:ff:30:
13:6a:41:13:6b:f7:82:1a:ee:7f:c9:f7:37:7f:f6:63:b3:41:
97:4f:10:aa:94:ee:14:18:0f:35:13:db:64:0d:d0:b6:27:34:
2d:d5:0e:7d:03:63:2e:4c:bd:f7:1d:f1:65:5d:54:22:bc:9f:
5b:7d:28:9d:1a:72:f2:67:54:84:ee:47:51:ba:50:09:f7:7d:
8d:f3:43:4a:29:c1:a0:7f:b0:3a:24:1d:ce:27:d2:1f:63:42:
34:d2:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 17:42:28 2026 by rpki-client