Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/NZOAJ-Cjlv8kGxRwg0QteNMeWms.roa
File: NZOAJ-Cjlv8kGxRwg0QteNMeWms.roa (raw, json)
Hash identifier: UqYL0vjRJbWNRd7stQJm0Wg9Aqf4G5MUNJ/6w4Z++p4=
Subject key identifier: 35:93:80:27:E0:A3:96:FF:24:1B:14:70:83:44:2D:78:D3:1E:5A:6B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019928FEB0BB51130A1861BF0D8FB009BB06
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/NZOAJ-Cjlv8kGxRwg0QteNMeWms.roa
Signing time: Mon 08 Sep 2025 11:03:23 +0000
ROA not before: Mon 08 Sep 2025 11:03:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/22 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.237.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.238.0/24 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:fe:b0:bb:51:13:0a:18:61:bf:0d:8f:b0:09:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 8 11:03:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35938027e0a396ff241b147083442d78d31e5a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:9d:18:6e:49:1e:5d:6f:31:5d:7b:95:4a:
b9:3d:25:00:22:4d:11:f9:67:e7:b0:f4:8c:af:67:
fe:f4:30:d0:7d:ff:9b:ea:d7:19:fe:f2:be:5c:b2:
43:d9:60:8b:10:57:f5:ec:c7:ae:0c:e9:43:d3:24:
06:aa:8e:2e:89:18:6c:cc:ba:d8:75:7e:70:3e:43:
b2:06:35:1a:1d:0a:16:c1:8f:21:e3:9e:0e:7e:1c:
20:d4:09:2e:a2:ed:11:8c:3d:f7:61:c5:09:45:ab:
2b:d5:59:0c:e6:0f:67:05:f2:9d:20:3e:ae:67:c6:
26:c7:52:73:37:7e:f9:69:d3:a4:7c:aa:d8:87:23:
7d:a6:8c:f4:3b:e9:74:a7:d9:1e:16:35:0d:08:da:
77:37:02:fa:e4:77:6b:5c:69:b8:85:1c:7b:fb:ad:
92:7f:b4:78:bf:b8:3b:65:83:98:cf:cf:0a:63:46:
03:87:51:bd:4d:cb:4c:8f:9d:bb:43:14:6f:19:4d:
5d:a0:e9:d0:22:fd:a0:98:d6:2b:a5:a1:bf:20:21:
eb:06:5a:51:6e:62:da:1b:36:26:78:83:f8:8b:6c:
09:d9:33:96:48:98:5a:2d:31:43:fe:96:66:6f:57:
a5:17:de:9a:46:fa:6f:56:3c:63:ed:3c:96:d0:cf:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:80:27:E0:A3:96:FF:24:1B:14:70:83:44:2D:78:D3:1E:5A:6B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/NZOAJ-Cjlv8kGxRwg0QteNMeWms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/22
212.116.237.0-212.116.239.255
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
30:04:3c:ad:0e:cc:a2:fb:cd:ae:26:27:45:99:b8:21:dc:a6:
86:67:eb:df:11:19:c8:3f:a4:27:81:d8:b2:00:aa:dc:1e:3a:
f5:cd:11:f6:8e:f2:c0:23:e0:c2:c8:7e:82:ac:34:7a:eb:bf:
c8:1b:49:e3:df:40:81:90:64:0e:e3:96:9e:56:76:f9:b4:78:
98:ff:02:88:ad:2d:b8:03:a5:cd:39:66:dd:da:61:60:49:6b:
44:f7:2c:8f:59:e5:51:52:c9:f8:cb:3b:62:6b:46:f9:9d:a4:
53:eb:ed:98:09:4f:a3:9a:be:35:e3:d8:5d:1e:ea:43:fc:4f:
33:b8:ae:5d:c9:6b:27:76:ae:ed:4d:1b:9e:91:0b:10:38:da:
aa:23:99:db:4d:9f:f7:ea:ab:f5:9a:bc:62:25:85:27:1b:4a:
6b:97:e5:fe:be:fb:75:03:2b:30:c3:f0:a8:fc:30:30:00:53:
83:0c:84:ee:c1:16:c4:de:7e:19:2d:c5:ce:00:14:4c:7c:1c:
3c:f9:93:68:d0:4b:3b:e0:b5:5d:3a:4f:36:56:ec:29:15:73:
8b:67:13:85:e5:52:70:5b:17:f3:5b:9c:2d:f6:1b:c7:95:21:
78:9c:d5:2a:36:09:67:fb:e9:08:e2:e6:d5:6e:78:19:68:b0:
e4:f4:81:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:37:52 2025 by rpki-client