Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CHqRoDaelZYXokFAxmmLu86gTR8.roa
File: CHqRoDaelZYXokFAxmmLu86gTR8.roa (raw, json)
Hash identifier: reDT0VhOaoL82NsSaEKJFUQTWhFiRIRc+n0HzxUgb/8=
Subject key identifier: 08:7A:91:A0:36:9E:95:96:17:A2:41:40:C6:69:8B:BB:CE:A0:4D:1F
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019DBF8C76B468C7740FE674B006AE51258A
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CHqRoDaelZYXokFAxmmLu86gTR8.roa
Signing time: Fri 24 Apr 2026 12:52:26 +0000
ROA not before: Fri 24 Apr 2026 12:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402309
IP address blocks: 212.116.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:8c:76:b4:68:c7:74:0f:e6:74:b0:06:ae:51:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Apr 24 12:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=087a91a0369e959617a24140c6698bbbcea04d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:30:c8:2b:1a:da:5a:93:15:e5:46:cd:84:
4f:63:8b:fd:de:de:fc:d1:76:2b:a7:5f:1b:4d:d6:
db:cc:93:28:14:f5:ce:a2:3c:a8:37:9e:f4:33:8f:
c9:8f:f8:9f:00:9f:cb:c6:3d:ce:84:58:ca:2b:7f:
4d:42:fa:dd:03:7c:cd:8a:78:85:9f:91:64:9a:0d:
57:fb:37:86:ca:f3:44:70:77:00:c5:75:63:43:c1:
0e:2c:15:d2:1e:58:ce:6a:bf:a4:56:aa:4a:f2:a2:
86:39:51:5e:3a:c6:32:b8:99:27:0b:4f:e9:d8:ea:
25:27:70:bd:6e:ca:3c:d1:25:19:e9:cd:ed:60:c2:
c0:7b:a4:03:bf:c2:97:55:d7:98:11:23:ce:56:a9:
cc:8b:49:5b:42:de:96:6f:80:d2:9f:98:e3:9a:fd:
00:7e:22:8b:a0:dd:c4:9a:66:29:30:0f:27:6f:bb:
04:a4:2a:0e:e7:fa:6f:7e:b9:9b:87:50:02:61:a7:
c6:04:06:f8:5c:22:e7:54:f4:d3:97:a7:53:61:2f:
ff:55:0d:31:3d:34:d4:7c:46:b4:17:77:e8:e9:50:
3f:94:b8:ad:12:b4:95:d5:54:5c:4e:be:53:18:95:
3c:c8:39:9e:b2:b6:7d:9a:a1:85:07:74:e7:11:75:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:91:A0:36:9E:95:96:17:A2:41:40:C6:69:8B:BB:CE:A0:4D:1F
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CHqRoDaelZYXokFAxmmLu86gTR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/24
Signature Algorithm: sha256WithRSAEncryption
17:10:8a:cc:22:d6:dd:72:c8:d2:97:b5:b1:99:a9:26:dd:08:
f4:86:1e:64:b7:27:42:71:10:cd:34:4a:68:e3:00:0b:12:e3:
b8:78:0b:c5:42:33:d9:3b:48:11:59:75:16:53:0a:1b:6e:e9:
13:ad:5a:8e:78:5c:ea:4e:19:84:05:b6:cd:fa:bb:a5:9e:fe:
bb:e5:f1:0c:c7:c4:38:31:8a:04:8c:01:2f:04:db:53:a5:fb:
84:62:f6:33:fc:6b:69:9a:37:3a:19:90:3c:99:b3:cb:74:74:
e1:5d:fe:d6:f5:44:5e:fd:4b:80:bb:9c:cf:c1:b2:61:98:25:
1c:57:f2:95:d5:65:c1:2e:6e:65:c4:ec:98:3e:34:b0:82:38:
59:ea:20:1a:7e:66:27:46:ac:6b:74:e9:3b:9c:fe:5b:aa:f2:
17:9b:65:44:5c:d0:1e:71:7e:87:e4:7e:6f:8f:27:ac:f1:75:
6d:34:3c:9a:b5:c4:81:5b:0b:c7:00:e3:11:8b:03:1f:aa:16:
ea:3a:02:35:ba:78:6e:0f:b0:0d:cc:cb:02:73:56:5b:47:81:
4c:35:ec:46:62:cc:2a:08:fb:53:03:e7:f9:27:0e:8d:df:c0:
59:5c:1c:5b:99:5d:f3:66:aa:a0:d6:95:eb:b9:5e:33:5f:ac:
dd:d2:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 02:54:40 2026 by rpki-client