Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MUjvCDA7aVK4-ErytTaAZtZzYlk.roa
File: MUjvCDA7aVK4-ErytTaAZtZzYlk.roa (raw, json)
Hash identifier: OuKOYZUfCFq/ckN0Kj+v8IVs5sxo6efgWzrLPFUnXXg=
Subject key identifier: 31:48:EF:08:30:3B:69:52:B8:F8:4A:F2:B5:36:80:66:D6:73:62:59
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0198D82A8E43E3BEB1A919E9A7DEEF9D15C9
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MUjvCDA7aVK4-ErytTaAZtZzYlk.roa
Signing time: Sat 23 Aug 2025 18:22:04 +0000
ROA not before: Sat 23 Aug 2025 18:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/22 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.238.0/24 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:2a:8e:43:e3:be:b1:a9:19:e9:a7:de:ef:9d:15:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 23 18:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3148ef08303b6952b8f84af2b5368066d6736259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:37:13:fa:ab:37:e5:c9:dc:35:2e:2e:f5:
c4:b4:28:d3:4e:0c:ea:f5:fe:20:8f:7d:d9:a6:27:
8c:fb:f2:94:ad:06:73:2c:df:71:a8:2d:31:45:b9:
97:9c:70:c1:0d:fc:c2:a4:91:fb:01:8f:d0:f3:b6:
3d:08:23:48:40:b9:88:1a:64:f4:6a:e7:79:11:f9:
1a:6c:5d:77:6e:f4:31:08:cd:5d:86:c2:56:f9:75:
50:b4:be:dd:b7:62:99:d5:8d:89:c4:48:73:28:06:
fd:78:d9:b1:79:62:3e:cb:99:5e:dd:55:13:1f:be:
50:87:98:ca:ba:70:ba:b0:d4:a1:23:17:4d:46:bc:
b1:63:9a:fe:d0:52:80:a1:0c:08:6e:fa:8b:5d:91:
68:a9:7c:03:97:89:d0:18:78:ef:27:a9:55:64:d0:
f8:7a:6a:1b:5d:cd:06:13:69:45:f7:b5:d5:0c:2d:
9c:64:12:87:7d:26:a9:55:45:2a:78:6a:5c:1c:05:
f8:35:74:a9:31:4f:76:89:16:59:c1:2f:26:12:0c:
97:bb:33:89:51:67:e1:f3:f3:7d:23:c4:ba:d8:24:
ea:9b:dc:a8:d6:47:b0:56:e9:f2:58:b7:8e:ce:d6:
c0:5c:ed:c8:48:ad:55:fe:4b:4a:93:9c:22:16:2a:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:EF:08:30:3B:69:52:B8:F8:4A:F2:B5:36:80:66:D6:73:62:59
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MUjvCDA7aVK4-ErytTaAZtZzYlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/22
212.116.238.0/23
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8e:fa:29:04:c0:b9:d5:00:7a:10:bf:7e:c1:68:2b:ee:f0:
38:fd:4f:3f:ed:3d:10:d0:e9:6a:f6:86:b6:3c:e8:86:19:f4:
b0:b9:87:d2:ef:8c:82:d9:58:8c:65:17:cf:2f:d0:3a:a9:05:
2b:1a:45:31:ba:8c:ed:e4:8d:6a:71:49:cb:25:22:b0:a9:ce:
66:44:50:7c:df:b9:03:2c:a2:ca:e6:cf:e3:ab:25:7c:90:f8:
49:6f:b9:e3:9b:8e:2c:7d:36:66:a0:59:90:a7:07:00:ac:a2:
2d:a7:4f:d0:54:db:5a:95:d2:d3:16:7a:32:b6:20:11:88:7f:
e2:1e:5c:c4:52:29:e2:41:e6:e0:07:9f:0c:a7:f9:d6:8e:9e:
31:a5:7e:87:bf:52:c4:57:6f:dd:1d:de:d1:b5:da:18:f4:69:
74:c1:aa:88:ff:da:46:03:c9:dd:cc:10:4a:7c:7f:02:79:12:
02:bf:31:31:1e:8c:50:85:fe:57:12:09:a5:4b:4b:da:11:38:
71:96:18:30:03:e5:b9:dc:3d:ef:ab:1f:fd:ba:c4:7f:f6:30:
c2:f3:55:8f:36:5d:02:47:a7:8b:9e:66:a1:54:63:49:ad:b2:
1b:5d:da:86:e4:b7:e8:18:90:41:96:48:90:55:de:7c:7c:e2:
b1:8b:b6:b8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZjYKo5D476xqRnpp97vnRXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjUwODIzMTgyMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTQ4ZWYwODMwM2I2OTUyYjhmODRhZjJiNTM2ODA2NmQ2NzM2MjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlk3E/qrN+XJ3DUuLvXEtCjTTgzq
9f4gj33ZpieM+/KUrQZzLN9xqC0xRbmXnHDBDfzCpJH7AY/Q87Y9CCNIQLmIGmT0
aud5EfkabF13bvQxCM1dhsJW+XVQtL7dt2KZ1Y2JxEhzKAb9eNmxeWI+y5le3VUT
H75Qh5jKunC6sNShIxdNRryxY5r+0FKAoQwIbvqLXZFoqXwDl4nQGHjvJ6lVZND4
emobXc0GE2lF97XVDC2cZBKHfSapVUUqeGpcHAX4NXSpMU92iRZZwS8mEgyXuzOJ
UWfh8/N9I8S62CTqm9yo1kewVunyWLeOztbAXO3ISK1V/ktKk5wiFipx3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDFI7wgwO2lSuPhK8rU2gGbWc2JZMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvTVVqdkNEQTdhVks0LUVyeXRUYUFadFp6WWxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQC1HTkAwQB
1HTuAwQA1HT0MA0GCSqGSIb3DQEBCwUAA4IBAQCFjvopBMC51QB6EL9+wWgr7vA4
/U8/7T0Q0Olq9oa2POiGGfSwuYfS74yC2ViMZRfPL9A6qQUrGkUxuozt5I1qcUnL
JSKwqc5mRFB837kDLKLK5s/jqyV8kPhJb7njm44sfTZmoFmQpwcArKItp0/QVNta
ldLTFnoytiARiH/iHlzEUiniQebgB58Mp/nWjp4xpX6Hv1LEV2/dHd7RtdoY9Gl0
waqI/9pGA8ndzBBKfH8CeRICvzExHoxQhf5XEgmlS0vaEThxlhgwA+W53D3vqx/9
usR/9jDC81WPNl0CR6eLnmahVGNJrbIbXdqG5LfoGJBBlkiQVd58fOKxi7a4
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:26:07 2025 by rpki-client