Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/SSlZckqJXqGK-U0na0h6hNzhlEE.roa
File: SSlZckqJXqGK-U0na0h6hNzhlEE.roa (raw, json)
Hash identifier: kfvbHYBVijLYPb2h17qWZSXhjKoWeWQSHV1wvJFbfOk=
Subject key identifier: 49:29:59:72:4A:89:5E:A1:8A:F9:4D:27:6B:48:7A:84:DC:E1:94:41
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019EFA0CF9470F7E3AB6CE9474043F723EA0
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/SSlZckqJXqGK-U0na0h6hNzhlEE.roa
Signing time: Wed 24 Jun 2026 14:33:34 +0000
ROA not before: Wed 24 Jun 2026 14:33:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/23 maxlen: 23
212.116.228.0/24 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.243.0/24 maxlen: 24
212.116.245.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:0c:f9:47:0f:7e:3a:b6:ce:94:74:04:3f:72:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 24 14:33:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=492959724a895ea18af94d276b487a84dce19441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:c8:75:e8:13:25:26:c5:aa:77:15:c5:c1:
87:22:d3:ca:88:05:67:3b:14:af:d7:1d:4d:b2:ed:
9c:aa:70:a3:d0:22:92:b3:ee:8a:eb:f6:10:ad:02:
5b:a4:a7:07:4c:ce:29:3d:70:36:c2:38:d1:cf:5b:
43:ab:a9:ff:a2:4d:98:ec:66:60:f8:03:46:57:06:
26:95:ca:b9:5c:a6:1d:e2:d9:43:30:c4:0f:d7:18:
79:bb:32:a2:9c:c8:91:60:a2:af:46:b1:40:e9:38:
6b:1d:d9:35:96:e6:35:9f:9e:82:3c:6f:a2:3f:4d:
2e:ae:a5:c7:e5:ef:c5:99:4a:40:3b:7e:8f:2f:f1:
15:03:ae:a4:83:61:cc:70:d5:26:73:40:25:8a:f7:
c1:59:9d:79:af:93:67:f2:ea:1c:67:84:63:82:8c:
d7:65:31:7f:2d:28:82:1f:97:67:9c:74:98:b1:87:
a4:31:9e:c7:5d:89:ea:01:1f:d8:6b:d4:c5:c0:80:
3b:ae:08:0a:d1:c5:43:17:d7:4c:55:f2:70:24:5f:
96:12:88:e0:47:2f:81:05:dd:1b:2c:e6:80:73:57:
d9:d1:73:56:71:74:f8:cc:15:fb:58:d1:c1:bc:da:
9c:14:27:82:ba:1f:36:9d:9b:db:70:88:d8:9d:3d:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:59:72:4A:89:5E:A1:8A:F9:4D:27:6B:48:7A:84:DC:E1:94:41
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/SSlZckqJXqGK-U0na0h6hNzhlEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/23
212.116.238.0/23
212.116.243.0/24
212.116.245.0-212.116.246.255
Signature Algorithm: sha256WithRSAEncryption
51:6b:69:21:9e:73:8b:4b:3d:d7:68:a4:a3:e1:1c:32:2b:4d:
21:36:3f:72:f0:c6:bb:dc:8b:99:e7:12:8a:40:38:fb:de:2d:
99:d1:f4:55:7c:82:69:ea:6d:df:6c:4c:47:97:88:eb:87:d2:
6b:81:fa:64:d5:e5:2f:f3:d2:73:e2:40:77:4d:f3:6c:78:21:
d3:99:d7:cd:ea:d4:4d:87:3e:cf:9e:71:e3:67:f5:45:b8:88:
a5:52:1f:9b:c9:9c:e8:3f:6a:06:5d:a3:f8:0d:bc:90:9f:4e:
db:18:7f:40:cf:4c:0b:e3:9d:eb:73:71:7d:e3:68:6b:bc:9c:
88:c1:27:1d:b4:6e:e2:08:11:2f:db:00:ab:46:5d:f0:4d:78:
3e:43:ee:e6:9d:98:b5:ed:7e:fc:cf:ad:1f:99:bc:89:2f:3f:
ac:5a:78:c1:90:3b:f6:e9:cb:ea:aa:db:1f:f7:b9:24:4e:48:
1c:cc:a0:90:17:21:27:77:a9:35:72:05:56:73:f0:94:8b:ee:
5e:d1:93:e9:dd:1e:3b:86:25:75:4e:6e:18:2d:fa:4e:9e:4e:
ef:80:62:1a:69:45:91:aa:19:b6:e0:cc:dd:f5:85:f6:5c:a1:
63:2a:81:16:fb:fd:38:f2:0a:7c:34:c3:54:d9:5c:04:46:2f:
3f:2e:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:27 2026 by rpki-client