Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fqQlRQwK-2wrNU-IeMiDlz1UUIQ.roa
File: fqQlRQwK-2wrNU-IeMiDlz1UUIQ.roa (raw, json)
Hash identifier: 2hB1XoiIKlvoTBHmFJiFMt9dWbsieH4fir3aAbxezO8=
Subject key identifier: 7E:A4:25:45:0C:0A:FB:6C:2B:35:4F:88:78:C8:83:97:3D:54:50:84
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01A060D92C3EF73ECB5E01A485AD71389622
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fqQlRQwK-2wrNU-IeMiDlz1UUIQ.roa
Signing time: Wed 02 Sep 2026 06:40:40 +0000
ROA not before: Wed 02 Sep 2026 06:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/23 maxlen: 23
212.116.228.0/24 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.245.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:d9:2c:3e:f7:3e:cb:5e:01:a4:85:ad:71:38:96:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 2 06:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ea425450c0afb6c2b354f8878c883973d545084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:54:00:d5:6d:9e:c4:4d:63:d4:4e:09:10:
c6:b4:a2:19:82:27:81:94:ff:1e:18:cd:80:51:9b:
49:e2:7c:c3:d2:37:87:3e:40:ef:18:37:36:dd:98:
06:94:71:e0:ab:09:ca:0d:37:0a:13:24:ef:55:6b:
e3:21:79:02:d5:96:28:5a:4c:f0:da:ff:be:c4:01:
84:e2:84:c0:ab:3b:23:7f:1b:b4:ba:26:de:a0:c0:
9a:82:86:cf:22:5c:8e:4b:32:8a:e0:bb:ac:69:8f:
3a:37:a3:6d:2a:94:eb:74:27:4c:40:0e:3e:ab:5a:
30:15:d3:67:6d:1c:20:42:6d:6b:4d:42:5a:e3:74:
dd:d5:fc:07:f7:e1:f5:5c:29:a4:cd:b0:58:88:49:
b4:8c:bc:68:10:60:e9:87:99:03:74:96:78:2a:b0:
49:f2:51:6f:fc:55:ff:2c:84:9f:3d:ba:10:34:fe:
ce:99:04:50:50:c7:f3:ed:91:de:cb:4b:f2:3d:cf:
7c:13:12:cd:74:74:f9:9e:69:da:ae:0f:6f:05:90:
19:c6:9a:67:ff:c7:ea:6e:78:41:e0:2f:f0:d9:a9:
72:80:df:fa:2b:af:c5:21:bc:d4:be:fe:d3:fa:a3:
68:52:48:dd:1a:03:b8:9e:8a:5f:52:43:e3:a6:e0:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:25:45:0C:0A:FB:6C:2B:35:4F:88:78:C8:83:97:3D:54:50:84
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fqQlRQwK-2wrNU-IeMiDlz1UUIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/23
212.116.238.0/23
212.116.245.0-212.116.246.255
Signature Algorithm: sha256WithRSAEncryption
27:88:69:ec:c1:05:82:ba:7f:a4:85:27:f7:02:c8:3f:0b:08:
8d:a6:f3:b6:2d:30:7b:5c:8f:13:e9:27:bd:b8:31:6e:67:77:
60:5f:78:a5:4d:96:7e:b5:e7:fe:bc:29:03:b0:8e:c7:8b:8c:
fc:27:0d:55:3b:84:e8:20:ed:4e:00:18:29:f3:04:67:9d:9c:
e7:79:a0:0c:44:10:f7:a0:ad:d3:34:88:0c:4d:bb:0c:2c:e3:
eb:17:95:14:0a:81:18:0c:e6:16:7e:97:55:f8:42:84:3c:1c:
60:e9:94:e5:83:be:6b:d4:f7:9a:6e:72:00:51:9e:e9:c3:13:
e4:89:9e:07:fb:04:fa:84:50:2a:d0:1e:80:cd:4c:26:10:51:
d7:ca:f6:79:ee:53:9c:43:00:ed:dc:f8:58:6c:9c:4a:5c:c4:
05:4e:b4:77:e8:fd:40:d7:ad:c3:15:13:a7:74:f4:51:a5:cb:
56:ad:16:ef:35:89:b1:9d:22:6b:40:4c:56:cb:cb:ea:38:f9:
82:9c:ef:7f:b3:84:20:25:95:c2:c8:60:63:af:21:44:7a:87:
a3:df:d3:81:0c:65:40:ae:da:dc:87:41:6c:51:ec:1d:76:3b:
fb:d4:93:af:e4:24:db:5c:f1:0b:e9:c6:ba:df:91:1f:41:61:
eb:f6:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 05:37:31 2026 by rpki-client