Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/vOWo1GQ1w68tjwUzx0l9rWhFA_U.roa
File: vOWo1GQ1w68tjwUzx0l9rWhFA_U.roa (raw, json)
Hash identifier: QjCNNacz3W8ZP7gcVbXQu/IR68WGrwMKhSESak/wE6A=
Subject key identifier: BC:E5:A8:D4:64:35:C3:AF:2D:8F:05:33:C7:49:7D:AD:68:45:03:F5
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019EE0C551CE4D42CFA14E611FB315C1FD45
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/vOWo1GQ1w68tjwUzx0l9rWhFA_U.roa
Signing time: Fri 19 Jun 2026 16:44:48 +0000
ROA not before: Fri 19 Jun 2026 16:44:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 212.116.237.0/24 maxlen: 24
212.116.238.0/24 maxlen: 24
212.116.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:c5:51:ce:4d:42:cf:a1:4e:61:1f:b3:15:c1:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 19 16:44:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bce5a8d46435c3af2d8f0533c7497dad684503f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:a3:69:67:74:df:aa:fe:a8:f5:d6:c7:00:
36:d3:d8:fc:44:29:d8:8e:83:a7:66:53:37:e4:34:
e9:1e:e7:d3:7d:4c:8b:1c:51:9c:98:36:17:85:bc:
05:1e:3d:e3:a8:28:0e:07:c0:ef:f0:df:81:a2:6e:
9f:b5:f4:41:2d:2c:e8:b5:29:67:d4:40:8c:5c:34:
fe:2f:be:79:2f:15:40:f0:e7:50:b6:f3:42:27:c6:
50:da:d8:5c:54:9d:fa:8a:86:59:95:ea:52:59:71:
4e:d7:51:47:fa:a3:11:6d:5c:55:c7:16:07:61:cd:
ba:c5:be:6f:97:19:74:55:d0:fd:73:79:c9:4e:b2:
09:e3:1a:da:9c:a9:35:f5:73:80:b4:8f:3e:64:1c:
d6:e5:cb:22:e0:2d:a8:ff:26:0b:89:12:e7:aa:2b:
9d:f8:8a:ec:ca:09:d0:47:d7:de:6f:34:8b:97:e5:
f5:b0:07:61:1a:95:65:9d:d7:13:12:f0:3b:92:5d:
17:8e:99:83:2c:d7:eb:f0:1a:f3:7e:b5:83:74:32:
8e:ff:c8:a9:43:17:04:de:00:d8:6b:42:55:27:b7:
18:f1:4b:a8:b1:cc:d1:18:21:25:99:37:e0:71:bf:
d1:a6:f8:a6:2f:3c:89:57:33:6a:76:7f:6b:0f:c7:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E5:A8:D4:64:35:C3:AF:2D:8F:05:33:C7:49:7D:AD:68:45:03:F5
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/vOWo1GQ1w68tjwUzx0l9rWhFA_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.237.0-212.116.239.255
Signature Algorithm: sha256WithRSAEncryption
94:89:d9:38:83:f5:79:28:04:4d:f9:26:b4:12:5f:9a:f6:4f:
49:5a:04:6d:09:94:e1:ea:4e:56:c3:51:28:6e:4b:68:6d:3a:
51:af:bf:be:3d:17:0f:13:1e:bd:29:7d:9b:1e:6b:01:15:6c:
93:8f:b8:3a:f6:a5:cc:e8:10:ea:d0:47:45:2d:50:2b:fe:3b:
9c:8a:55:10:a2:35:28:c3:b3:ce:41:bb:ff:ea:ce:a2:c1:76:
81:6f:07:88:8a:b4:30:63:e9:13:7e:04:5c:06:e9:e8:90:68:
c7:32:69:e6:bb:c0:53:c6:00:46:c9:f9:75:7b:d3:31:e8:74:
43:6d:b9:cc:ae:5a:c9:89:66:cf:6f:02:9f:8f:3b:df:30:95:
21:5f:ac:6b:93:e6:0e:00:af:49:c0:48:09:e6:77:49:ca:bb:
3e:17:62:7b:ff:0a:0d:ec:25:0f:90:9c:b6:9a:1b:e5:c6:8e:
ed:84:d6:dd:a7:c5:94:36:b1:2e:89:6b:81:57:63:3c:67:45:
bf:04:a8:6e:3b:0c:21:86:f1:4e:b3:04:a4:47:1f:a8:b2:dd:
85:49:b8:5b:4f:d5:ce:59:be:97:12:b5:ca:8c:72:85:0a:42:
82:60:53:b5:67:4c:a6:99:1b:38:a2:14:8a:41:23:b6:b2:fb:
f8:a4:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:46 2026 by rpki-client