Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/LQ3PG04Giw7LBiY4YA6mNNOnXxo.roa
File: LQ3PG04Giw7LBiY4YA6mNNOnXxo.roa (raw, json)
Hash identifier: B5o7NJbNa28cAI4zmn1FqRDal9cAW0cuvjHk5VDUq4k=
Subject key identifier: 2D:0D:CF:1B:4E:06:8B:0E:CB:06:26:38:60:0E:A6:34:D3:A7:5F:1A
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019DC06AEF752C44DAE44985C6AA654FA0D8
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/LQ3PG04Giw7LBiY4YA6mNNOnXxo.roa
Signing time: Fri 24 Apr 2026 16:55:26 +0000
ROA not before: Fri 24 Apr 2026 16:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 212.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:6a:ef:75:2c:44:da:e4:49:85:c6:aa:65:4f:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Apr 24 16:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d0dcf1b4e068b0ecb062638600ea634d3a75f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:c1:2e:d6:e9:34:b8:c0:72:e8:d0:af:29:
78:82:a2:25:e0:d1:80:6a:65:9c:c5:22:1a:b9:c0:
eb:73:05:70:bf:de:6a:2b:0d:61:d2:58:e5:20:55:
96:93:bc:6d:c7:10:fc:ff:00:1e:5b:e5:96:bb:71:
f8:77:f7:f8:3c:cc:f3:ef:17:fc:c0:5a:1d:3a:b8:
f1:81:3f:82:31:f9:94:97:d4:f1:12:ad:e2:ee:0b:
bd:37:10:bd:20:9a:4d:ee:d3:68:83:2c:fb:38:40:
71:f0:b2:64:1e:19:af:c1:13:a8:01:9c:f5:be:20:
a5:f6:7d:fa:37:9a:5d:d2:f1:58:3e:73:80:ec:03:
7e:9a:d3:a6:65:29:88:08:d5:35:97:9b:7b:df:20:
60:0c:52:84:82:b0:42:a9:f8:f3:17:71:53:e1:a8:
86:47:ee:05:1e:69:e6:ae:d7:07:46:01:b9:a1:54:
48:e5:d3:8e:2d:b2:b4:2b:a9:40:30:63:90:02:ac:
01:ee:44:86:28:66:72:20:e6:3f:bb:69:da:e1:a2:
ba:2d:e3:91:e1:05:34:92:20:ee:a2:df:3d:f1:49:
85:4d:48:23:d4:dc:91:41:0c:14:11:9c:62:92:56:
ec:a8:d8:50:6b:21:dc:d9:61:d0:cd:49:40:7c:70:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:CF:1B:4E:06:8B:0E:CB:06:26:38:60:0E:A6:34:D3:A7:5F:1A
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/LQ3PG04Giw7LBiY4YA6mNNOnXxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2c:cb:c3:01:66:88:c9:dc:9d:e7:9b:cc:c8:c6:12:0e:b5:
01:5d:40:c5:b8:b5:a2:5a:e5:c3:2c:dd:92:13:8b:0b:12:2f:
35:0a:ca:8c:71:43:c7:f6:ba:98:b3:d0:a7:86:db:16:f7:53:
74:78:77:9a:0c:0a:c7:36:63:5a:53:3d:af:4d:bc:28:8e:2c:
c5:f4:70:e8:05:21:44:ae:ea:6c:b8:52:18:a4:d7:63:e6:e2:
8d:b4:a2:23:67:79:c6:a1:62:7b:97:34:16:4f:10:19:7a:1b:
5f:49:80:37:5a:5c:a3:8b:12:c0:16:f0:1a:5a:a1:3c:6c:5f:
e9:20:72:dd:b8:a8:7d:e0:78:9e:9a:12:29:cf:79:99:3e:43:
fb:e3:89:94:85:83:32:56:12:89:f3:78:ac:bc:2a:6b:ea:c1:
2c:56:03:3b:38:b6:e5:53:e0:f4:f4:35:b4:6d:26:2d:fc:c3:
25:6a:4b:e6:c5:38:1b:c0:18:f3:78:a4:56:6e:17:b3:44:1d:
9d:c7:ea:b3:ef:79:59:48:bc:d3:ba:a7:e4:8f:5b:20:0f:dd:
4d:8a:0c:d0:7e:c6:64:bf:8a:21:b4:a0:3c:b8:b2:20:bf:cb:
40:f0:c5:c4:45:38:00:7a:dd:e2:e3:13:f0:db:2c:46:e1:11:
a5:fd:f7:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3Aau91LETa5EmFxqplT6DYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjYwNDI0MTY1NTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDBkY2YxYjRlMDY4YjBlY2IwNjI2Mzg2MDBlYTYzNGQzYTc1ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7TBLtbpNLjAcujQryl4gqIl4NGA
amWcxSIaucDrcwVwv95qKw1h0ljlIFWWk7xtxxD8/wAeW+WWu3H4d/f4PMzz7xf8
wFodOrjxgT+CMfmUl9TxEq3i7gu9NxC9IJpN7tNogyz7OEBx8LJkHhmvwROoAZz1
viCl9n36N5pd0vFYPnOA7AN+mtOmZSmICNU1l5t73yBgDFKEgrBCqfjzF3FT4aiG
R+4FHmnmrtcHRgG5oVRI5dOOLbK0K6lAMGOQAqwB7kSGKGZyIOY/u2na4aK6LeOR
4QU0kiDuot898UmFTUgj1NyRQQwUEZxiklbsqNhQayHc2WHQzUlAfHCjtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC0NzxtOBosOywYmOGAOpjTTp18aMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvTFEzUEcwNEdpdzdMQmlZNFlBNm1OTk9uWHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTlMA0G
CSqGSIb3DQEBCwUAA4IBAQALLMvDAWaIydyd55vMyMYSDrUBXUDFuLWiWuXDLN2S
E4sLEi81CsqMcUPH9rqYs9CnhtsW91N0eHeaDArHNmNaUz2vTbwojizF9HDoBSFE
rupsuFIYpNdj5uKNtKIjZ3nGoWJ7lzQWTxAZehtfSYA3WlyjixLAFvAaWqE8bF/p
IHLduKh94HiemhIpz3mZPkP744mUhYMyVhKJ83isvCpr6sEsVgM7OLblU+D09DW0
bSYt/MMlakvmxTgbwBjzeKRWbhezRB2dx+qz73lZSLzTuqfkj1sgD91NigzQfsZk
v4ohtKA8uLIgv8tA8MXERTgAet3i4xPw2yxG4RGl/fdz
-----END CERTIFICATE-----
Generated at Sat Apr 25 05:26:52 2026 by rpki-client