Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Lzke47kTynS9Tlm8xovGZF-uhMc.roa
File: Lzke47kTynS9Tlm8xovGZF-uhMc.roa (raw, json)
Hash identifier: XZJRdymGtgEG+z5FoXpBBPMmMhsNKUy8NvO1I6J3wfs=
Subject key identifier: 2F:39:1E:E3:B9:13:CA:74:BD:4E:59:BC:C6:8B:C6:64:5F:AE:84:C7
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01A1009C559745FE812B61D794D87108AE5E
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Lzke47kTynS9Tlm8xovGZF-uhMc.roa
Signing time: Sat 03 Oct 2026 07:13:27 +0000
ROA not before: Sat 03 Oct 2026 07:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/23 maxlen: 23
212.116.228.0/24 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.243.0/24 maxlen: 24
212.116.245.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:9c:55:97:45:fe:81:2b:61:d7:94:d8:71:08:ae:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 3 07:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f391ee3b913ca74bd4e59bcc68bc6645fae84c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:b2:00:b1:4a:76:0b:d6:e2:d7:d4:53:69:
03:95:c8:5e:89:fc:ac:f5:ba:c2:a6:66:06:12:bb:
64:f4:bf:fc:b0:62:cb:16:3b:1f:d9:8e:eb:26:85:
43:2d:ee:b9:88:6d:44:a4:7a:6c:cd:7a:54:37:de:
36:c9:25:63:ed:3f:34:f2:9d:e8:fc:b5:97:37:df:
6f:a5:5c:b6:56:bb:3d:f3:77:ad:1f:3c:c0:ed:d8:
cb:cd:23:b6:11:a2:c0:79:b3:a1:c4:2d:43:10:fd:
b5:34:35:4c:6f:5e:b6:5f:c9:ea:bb:7d:0e:a0:86:
a5:12:44:40:2e:3a:d5:19:e7:1a:97:af:c8:c7:8f:
2c:9f:56:e6:d7:aa:a0:61:d3:30:b0:79:4e:64:92:
e7:60:87:86:82:ba:0f:b8:ca:96:79:6a:2a:ea:71:
5d:fb:d3:cf:84:2e:3d:3b:07:cf:92:b3:60:b8:48:
a3:3b:0a:c0:be:99:15:ec:57:fc:7e:63:6b:81:a7:
56:de:9a:e7:6c:98:3d:50:2f:10:2c:61:55:bf:5d:
da:42:2f:15:15:67:e6:68:f5:87:cf:1d:22:b1:03:
cd:2f:1f:c0:9a:37:2c:e1:11:a3:da:fc:60:76:6a:
ba:d9:fd:16:f4:06:34:e5:c2:cf:93:fd:af:97:51:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:1E:E3:B9:13:CA:74:BD:4E:59:BC:C6:8B:C6:64:5F:AE:84:C7
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Lzke47kTynS9Tlm8xovGZF-uhMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/23
212.116.238.0/23
212.116.243.0/24
212.116.245.0-212.116.246.255
Signature Algorithm: sha256WithRSAEncryption
70:b9:4a:8e:a3:ee:98:86:86:26:d4:04:e2:83:80:c0:49:40:
e8:be:5f:96:64:f8:7a:c9:6c:14:19:0c:46:94:70:bd:0e:e4:
ca:0a:5a:7f:e3:b4:6c:b4:84:42:63:48:0b:ae:68:38:52:3c:
d4:d0:2d:12:e2:58:07:7b:ee:df:21:94:e3:ae:b7:94:45:b5:
78:be:e9:af:61:1e:77:f3:c0:51:eb:44:2f:2b:da:a6:c0:e3:
02:aa:40:45:b3:47:35:ec:72:d6:88:f8:96:3e:df:6b:75:6b:
9b:e8:28:3e:14:f7:33:63:b5:40:42:39:ab:e9:8b:9b:d7:9b:
19:68:57:34:8e:21:56:ce:1a:87:35:27:b9:74:4c:38:0b:a7:
b8:4c:4d:93:4b:df:60:c2:5e:d3:b4:e3:2f:cf:19:fc:c1:b8:
5c:de:dd:f5:b7:4e:d4:bc:12:e8:3a:85:92:a9:61:51:23:df:
b5:6b:56:60:a3:17:eb:17:df:8c:db:f7:d5:00:06:03:fd:ef:
9e:48:8e:f8:e3:d2:e0:9c:3a:18:1d:ec:82:58:10:ad:9e:b0:
a1:13:24:b1:31:cb:8d:dc:0e:20:2c:8c:3f:9a:86:a2:0e:d0:
17:a5:62:bf:21:a4:cb:40:1d:b9:52:40:a7:15:71:2f:2a:4c:
1f:bb:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:47:53 2026 by rpki-client