Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/N-uiDNmlj-02AauCQ_PvQPuaJrk.roa
File: N-uiDNmlj-02AauCQ_PvQPuaJrk.roa (raw, json)
Hash identifier: VKFp1l/5SkMQ7lkE3I8UcdbYaWtuE8aRelno0nES6Qo=
Subject key identifier: 37:EB:A2:0C:D9:A5:8F:ED:36:01:AB:82:43:F3:EF:40:FB:9A:26:B9
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019CD5D1EE342695EF13449B6EA97856BF44
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/N-uiDNmlj-02AauCQ_PvQPuaJrk.roa
Signing time: Tue 10 Mar 2026 03:37:10 +0000
ROA not before: Tue 10 Mar 2026 03:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/23 maxlen: 23
212.116.237.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.238.0/24 maxlen: 24
212.116.243.0/24 maxlen: 24
212.116.245.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 03:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:d1:ee:34:26:95:ef:13:44:9b:6e:a9:78:56:bf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 10 03:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37eba20cd9a58fed3601ab8243f3ef40fb9a26b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:e3:3d:88:f4:16:93:ef:e4:65:75:cc:5c:
c3:8b:06:8b:6f:eb:6c:28:82:ee:7a:a2:ca:dd:ea:
1a:7c:31:4c:a9:e2:5f:88:f9:1c:52:8a:50:e5:0d:
f9:ea:eb:92:06:76:2c:b7:98:92:bc:b6:67:ac:db:
58:22:f4:42:3f:89:ad:94:97:c2:89:ab:0c:1b:9d:
76:2a:52:ff:56:a2:0b:c8:a1:1c:96:4f:61:cb:6a:
7c:ee:ab:e9:98:53:47:f6:fe:cb:ff:b0:33:76:08:
f5:3b:e1:b6:5b:c0:ef:7b:a2:24:fd:d7:6a:86:d1:
74:d3:ab:15:66:ee:40:0a:0c:cf:6f:ab:97:f2:62:
71:d0:59:b1:f2:28:9c:24:c8:8f:43:88:8a:0d:2b:
d8:dc:93:6a:e8:c8:6a:22:ec:66:fa:c0:d9:43:7a:
dc:4b:ca:ec:66:ea:65:ad:5f:cd:8c:4c:ad:ad:a6:
63:c5:df:da:dd:2a:1c:f8:37:31:d4:06:de:28:eb:
c8:f0:7e:8f:c4:f3:a7:bc:56:ff:85:ae:38:63:07:
ff:90:4d:ae:a5:1e:81:1e:d2:65:5a:23:26:4d:10:
e5:ca:4a:b5:47:eb:4c:31:d7:95:24:36:a4:fa:38:
cb:04:37:d5:d8:83:73:a1:62:f0:2b:f6:4e:c7:96:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EB:A2:0C:D9:A5:8F:ED:36:01:AB:82:43:F3:EF:40:FB:9A:26:B9
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/N-uiDNmlj-02AauCQ_PvQPuaJrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/23
212.116.237.0-212.116.239.255
212.116.243.0/24
212.116.245.0-212.116.246.255
Signature Algorithm: sha256WithRSAEncryption
0f:96:91:cb:0b:90:af:71:a9:ba:d0:a8:4c:7c:a9:85:7b:30:
6e:df:ff:de:f1:a3:49:f0:8e:5a:4c:b1:f5:0e:2a:81:72:88:
0a:f6:bd:1c:7b:71:07:53:54:2c:9f:5a:b1:d0:62:35:bd:9e:
da:ba:bd:c3:8b:33:28:d6:06:15:5d:ef:15:87:ef:0c:ca:9e:
4d:25:4e:fb:fd:ba:f2:cf:e9:06:c7:91:32:c5:24:a8:1c:91:
9f:b2:11:7f:13:83:ea:7e:d8:40:b4:1a:80:4b:4a:c7:bc:30:
e4:9d:c8:a5:33:9e:6c:a2:e2:17:a5:b1:cb:a3:88:da:6e:52:
54:86:5b:b7:02:22:1c:bb:e1:d9:fd:69:4d:34:47:ea:37:ef:
2b:ba:f6:bb:f3:64:87:2b:90:6a:2e:f8:08:de:6f:63:59:a9:
4f:dc:5b:da:a0:a5:00:c0:fe:f2:89:db:22:5e:eb:06:56:b1:
ae:b2:b8:a3:b7:c8:9d:27:52:e5:08:a1:3c:7e:87:e7:6e:28:
83:ee:d0:bb:ab:35:72:de:0e:6a:bf:20:71:bb:82:02:dc:dc:
a0:23:fe:8c:9e:9e:ff:2d:60:a9:92:f8:9f:fd:91:ab:52:b4:
df:b9:ad:16:88:13:94:60:f1:ba:02:53:b5:73:be:15:98:bf:
05:53:b2:8f
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZzV0e40JpXvE0Sbbql4Vr9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjYwMzEwMDMzNzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2ViYTIwY2Q5YTU4ZmVkMzYwMWFiODI0M2YzZWY0MGZiOWEyNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUHjPYj0FpPv5GV1zFzDiwaLb+ts
KILueqLK3eoafDFMqeJfiPkcUopQ5Q356uuSBnYst5iSvLZnrNtYIvRCP4mtlJfC
iasMG512KlL/VqILyKEclk9hy2p87qvpmFNH9v7L/7Azdgj1O+G2W8Dve6Ik/ddq
htF006sVZu5ACgzPb6uX8mJx0Fmx8iicJMiPQ4iKDSvY3JNq6MhqIuxm+sDZQ3rc
S8rsZuplrV/NjEytraZjxd/a3Soc+Dcx1AbeKOvI8H6PxPOnvFb/ha44Ywf/kE2u
pR6BHtJlWiMmTRDlykq1R+tMMdeVJDak+jjLBDfV2INzoWLwK/ZOx5aeMwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFDfrogzZpY/tNgGrgkPz70D7mia5MB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvTi11aURObWxqLTAyQWF1Q1FfUHZRUHVhSnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQB1HTkMAwD
BADUdO0DBATUdOADBADUdPMwDAMEANR09QMEANR09jANBgkqhkiG9w0BAQsFAAOC
AQEAD5aRywuQr3GputCoTHyphXswbt//3vGjSfCOWkyx9Q4qgXKICva9HHtxB1NU
LJ9asdBiNb2e2rq9w4szKNYGFV3vFYfvDMqeTSVO+/268s/pBseRMsUkqByRn7IR
fxOD6n7YQLQagEtKx7ww5J3IpTOebKLiF6Wxy6OI2m5SVIZbtwIiHLvh2f1pTTRH
6jfvK7r2u/NkhyuQai74CN5vY1mpT9xb2qClAMD+8onbIl7rBlaxrrK4o7fInSdS
5QihPH6H524og+7Qu6s1ct4Oar8gcbuCAtzcoCP+jJ6e/y1gqZL4n/2Rq1K037mt
FogTlGDxugJTtXO+FZi/BVOyjw==
-----END CERTIFICATE-----
Generated at Tue Mar 10 12:43:19 2026 by rpki-client