Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/w3Kp3s-sTEuoH4oX7JnGBKn3s-8.roa
File: w3Kp3s-sTEuoH4oX7JnGBKn3s-8.roa (raw, json)
Hash identifier: 0MKKDPIYI2wCqbxNuvdGAiCQ40jdnrfiT6qIjV19qZg=
Subject key identifier: C3:72:A9:DE:CF:AC:4C:4B:A8:1F:8A:17:EC:99:C6:04:A9:F7:B3:EF
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01999B31E76F42FC2B52FFC74A2E16B2B940
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/w3Kp3s-sTEuoH4oX7JnGBKn3s-8.roa
Signing time: Tue 30 Sep 2025 15:16:02 +0000
ROA not before: Tue 30 Sep 2025 15:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 212.116.227.0/24 maxlen: 24
212.116.236.0/24 maxlen: 24
212.116.237.0/24 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:31:e7:6f:42:fc:2b:52:ff:c7:4a:2e:16:b2:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 30 15:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c372a9decfac4c4ba81f8a17ec99c604a9f7b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:ce:9d:cd:53:64:74:8e:43:d7:39:90:5f:
c9:87:e3:e7:85:70:f0:06:9b:02:4f:0d:73:a5:43:
4d:49:6f:81:d8:1e:50:d7:40:34:92:31:09:60:c9:
cc:12:f0:cc:fa:fb:fd:4b:f5:c2:09:64:a5:45:5a:
62:41:16:83:2b:fd:0d:d8:5c:07:c2:83:78:b0:e7:
a7:c5:e4:fe:88:33:63:28:9f:8c:60:e9:a4:28:ff:
38:29:65:42:3e:b4:32:84:89:c2:ef:54:7a:56:f7:
e6:2f:b9:4e:94:36:b7:60:6d:08:b2:ef:9d:ab:6e:
6c:bd:16:e5:c3:e7:1e:48:ff:84:e7:9e:5d:38:c2:
f4:a2:6c:0d:af:3c:77:f5:69:b7:ad:9f:0a:5a:96:
1e:da:df:94:df:1a:86:e4:e2:54:8c:50:bd:2c:f3:
4f:73:a0:cd:05:e3:53:79:4b:06:08:d3:51:03:62:
46:3e:66:05:d6:13:c5:55:08:39:2a:29:8d:c7:55:
f8:c1:bd:de:e6:65:11:9c:87:7f:60:4f:8c:5a:df:
e7:16:5b:fb:4c:fc:1f:3e:da:fa:ef:bd:b7:85:41:
42:66:9b:6d:0b:40:27:16:79:fc:e0:22:0b:ca:28:
9e:86:82:3d:8a:70:06:af:83:cb:dd:36:74:f8:16:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:72:A9:DE:CF:AC:4C:4B:A8:1F:8A:17:EC:99:C6:04:A9:F7:B3:EF
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/w3Kp3s-sTEuoH4oX7JnGBKn3s-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.227.0/24
212.116.236.0/23
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:02:82:ee:e0:ce:23:52:0c:f6:10:65:be:2e:7d:c8:b1:91:
b6:cf:a8:03:1f:54:0b:34:58:35:03:13:c4:1f:31:c8:32:91:
e4:a5:e1:8e:68:54:5a:fd:ec:b0:63:cc:81:bb:d7:74:5b:97:
12:60:ad:21:59:15:a1:78:11:43:39:76:bc:ea:80:1d:86:e9:
07:19:fa:02:fd:96:25:5f:47:2a:73:74:5b:20:ef:6a:0e:1a:
bd:fb:17:62:fe:52:2c:de:db:a7:e8:ef:04:de:8b:f1:9f:93:
52:0c:c3:8c:94:6f:ac:74:72:23:ac:32:48:6d:e4:f5:46:8e:
06:ee:28:4a:c9:38:c2:20:9f:60:a4:cf:85:c9:b8:b7:ec:b0:
4e:59:35:57:16:b2:6c:ed:1c:cf:47:4f:be:5d:5e:01:e2:b7:
b5:ed:db:95:a6:f3:1b:fe:80:38:3b:fa:76:a7:6b:11:fa:f9:
4b:21:ec:34:f9:5f:d3:eb:0b:40:b2:3b:7d:d0:e5:fa:4f:7e:
5e:0c:7c:8b:5f:e7:cd:fa:0f:ac:6a:9a:95:f4:39:1a:08:9a:
a4:32:c4:f0:de:fb:15:a8:82:89:91:03:5c:bb:08:34:6e:d5:
45:f7:da:aa:dd:08:47:fe:8c:0e:f4:e3:e8:c6:63:d0:cc:b8:
ef:24:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:21 2025 by rpki-client