Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa
File: JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa (raw, json)
Hash identifier: fb4DYVb7xf+ej8L7lVMYzB+36KaoNm7ycChtN8C1vqA=
Subject key identifier: 25:8E:62:F0:4C:C1:64:1C:44:24:71:5F:AD:E8:48:70:78:95:E5:1A
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0198C6177AEAC9FF856518A4834DD6675D76
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa
Signing time: Wed 20 Aug 2025 06:08:04 +0000
ROA not before: Wed 20 Aug 2025 06:08:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:17:7a:ea:c9:ff:85:65:18:a4:83:4d:d6:67:5d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 20 06:08:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258e62f04cc1641c4424715fade848707895e51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:56:cf:07:1b:f2:69:a7:25:df:96:19:c9:
7f:8e:33:fe:61:8a:e6:b7:f4:ae:68:e1:2c:f2:01:
09:ec:af:04:91:90:71:c9:ce:85:c9:6d:75:b1:b0:
23:10:f3:ed:1c:ef:64:1c:c3:41:42:f2:fb:e2:c0:
18:83:45:a3:83:cb:9e:40:4f:b6:b2:ce:35:5e:32:
29:05:ec:f3:d7:75:cf:a2:3d:df:b9:ee:b7:e1:08:
c8:6f:80:a1:93:76:e6:39:a3:13:c6:8d:03:05:32:
7d:bf:32:48:ee:7a:15:94:ef:a8:0f:6f:a7:94:47:
23:5f:44:2a:95:04:69:d8:b3:65:2d:67:f8:42:e6:
9b:50:4e:e5:08:7e:8b:c1:bd:f4:3b:d0:f8:89:7e:
6c:41:dd:c2:60:6d:a4:a9:f8:02:39:4f:1d:2d:a8:
e8:e8:aa:1a:3a:e9:ff:9f:fb:cd:16:e8:e6:c7:c6:
3f:04:ce:ee:07:43:7c:fb:34:fb:c9:b6:d7:7c:99:
11:15:d9:12:10:2c:e7:6a:29:6e:c4:e1:8f:a1:f3:
66:3d:ce:6d:c0:32:2f:bf:ff:bc:3e:af:d6:96:f0:
c7:84:07:e6:f6:e6:56:77:30:b4:f8:e0:c3:42:9a:
ef:6d:d3:95:a1:38:d9:fe:32:31:3d:57:2c:d9:30:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:62:F0:4C:C1:64:1C:44:24:71:5F:AD:E8:48:70:78:95:E5:1A
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:7a:90:72:f1:49:81:62:d0:8d:cd:3e:33:66:49:4b:5c:e6:
d2:bf:8e:ae:01:a8:7f:c5:74:65:2f:8c:24:7e:18:49:e5:1b:
0d:ac:9a:51:a3:ed:2e:f1:f9:9e:d8:2e:00:75:b6:95:dc:84:
d8:0b:6a:22:6a:db:95:60:d9:65:ab:0d:10:4a:52:1f:37:e3:
c2:27:6a:f4:cd:7f:16:21:89:a6:b3:bf:8e:85:1b:ac:d3:da:
41:ee:85:00:51:e2:4e:71:53:6a:a5:d1:54:a8:a1:07:76:0c:
32:a1:b2:27:63:f7:99:5f:d3:f3:e7:e4:9e:36:14:a7:32:e3:
29:0d:76:51:9d:d0:09:eb:eb:d6:ca:32:d3:90:41:14:8a:1a:
10:f4:5d:bc:62:1f:c5:de:28:06:14:4f:6d:3e:7c:fa:e8:29:
09:49:f9:f9:b8:c9:b7:02:77:34:04:b2:4d:24:f0:38:76:5a:
f2:c8:3a:52:18:24:a6:3e:b8:30:90:17:69:de:24:98:a6:c2:
5e:19:83:37:2f:fd:9d:22:b5:2a:0d:24:23:8b:95:6d:67:f7:
2f:37:ec:d2:ea:30:2b:7c:84:4a:80:99:1e:49:fd:1f:ac:2e:
23:42:40:fa:9d:0a:4c:56:fc:1b:83:31:2b:78:09:68:b9:be:
f3:db:51:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjGF3rqyf+FZRikg03WZ112MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjUwODIwMDYwODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNThlNjJmMDRjYzE2NDFjNDQyNDcxNWZhZGU4NDg3MDc4OTVlNTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI9Wzwcb8mmnJd+WGcl/jjP+YYrm
t/SuaOEs8gEJ7K8EkZBxyc6FyW11sbAjEPPtHO9kHMNBQvL74sAYg0Wjg8ueQE+2
ss41XjIpBezz13XPoj3fue634QjIb4Chk3bmOaMTxo0DBTJ9vzJI7noVlO+oD2+n
lEcjX0QqlQRp2LNlLWf4QuabUE7lCH6Lwb30O9D4iX5sQd3CYG2kqfgCOU8dLajo
6KoaOun/n/vNFujmx8Y/BM7uB0N8+zT7ybbXfJkRFdkSECznailuxOGPofNmPc5t
wDIvv/+8Pq/WlvDHhAfm9uZWdzC0+ODDQprvbdOVoTjZ/jIxPVcs2TCVlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWOYvBMwWQcRCRxX63oSHB4leUaMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvSlk1aThFekJaQnhFSkhGZnJlaEljSGlWNVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HT2MA0G
CSqGSIb3DQEBCwUAA4IBAQDjepBy8UmBYtCNzT4zZklLXObSv46uAah/xXRlL4wk
fhhJ5RsNrJpRo+0u8fme2C4AdbaV3ITYC2oiatuVYNllqw0QSlIfN+PCJ2r0zX8W
IYmms7+OhRus09pB7oUAUeJOcVNqpdFUqKEHdgwyobInY/eZX9Pz5+SeNhSnMuMp
DXZRndAJ6+vWyjLTkEEUihoQ9F28Yh/F3igGFE9tPnz66CkJSfn5uMm3Anc0BLJN
JPA4dlryyDpSGCSmPrgwkBdp3iSYpsJeGYM3L/2dIrUqDSQji5VtZ/cvN+zS6jAr
fIRKgJkeSf0frC4jQkD6nQpMVvwbgzEreAloub7z21Gr
-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:21 2025 by rpki-client