Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/wzaWKuWu-WRyiy1xaW8adXMAD-s.roa
File: wzaWKuWu-WRyiy1xaW8adXMAD-s.roa (raw, json)
Hash identifier: vBfeRQR1FGJpPp6ROuodYQCro+s8nwVJ8cu8pfKhj8c=
Subject key identifier: C3:36:96:2A:E5:AE:F9:64:72:8B:2D:71:69:6F:1A:75:73:00:0F:EB
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019CD5D1EE747B34246FDEE0EFC8D65BCCE2
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/wzaWKuWu-WRyiy1xaW8adXMAD-s.roa
Signing time: Tue 10 Mar 2026 03:37:10 +0000
ROA not before: Tue 10 Mar 2026 03:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 212.116.228.0/24 maxlen: 24
212.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 03:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:d1:ee:74:7b:34:24:6f:de:e0:ef:c8:d6:5b:cc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 10 03:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c336962ae5aef964728b2d71696f1a7573000feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:7a:04:7c:77:be:a8:3e:13:30:08:a5:fd:
83:10:6f:97:b7:5d:1d:0f:9b:db:a2:bf:f2:75:e4:
8f:a5:23:e6:f8:02:7d:20:2e:26:39:39:51:7d:db:
fe:f2:40:22:5f:1c:f0:c9:d2:cc:8c:a6:f2:cf:cb:
80:88:ff:e0:96:89:74:4c:5f:e3:bd:53:ec:36:71:
68:cd:ad:e0:e3:eb:fc:f3:1d:04:cf:59:06:4d:99:
13:9b:df:3e:a4:f6:c3:5a:0d:b6:c3:0c:0a:a2:c5:
53:dc:77:e1:6f:29:49:37:fd:d2:0b:6d:b3:99:5f:
20:58:8e:ba:8d:48:ae:f7:62:69:80:4b:7d:1f:32:
6e:68:bd:47:88:c7:07:fc:5e:2b:dc:97:d8:70:f8:
83:dc:67:3f:c0:93:01:14:ac:1c:17:2d:3b:00:fc:
20:34:5d:f1:51:06:aa:28:f9:58:8c:23:02:c7:a3:
af:0d:ad:ec:c9:e2:8d:18:5b:3a:bb:e5:1f:56:e3:
13:db:a0:fb:a4:6f:c1:bd:af:63:dd:84:e8:d2:12:
08:37:b6:5c:ae:cf:4d:3e:67:61:fe:4f:d0:6e:f3:
c5:b8:ad:5e:7b:2d:c8:fa:9e:78:37:ba:1c:f8:b7:
73:31:6c:f6:b5:27:6d:aa:e5:68:89:3e:4b:9c:5a:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:96:2A:E5:AE:F9:64:72:8B:2D:71:69:6F:1A:75:73:00:0F:EB
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/wzaWKuWu-WRyiy1xaW8adXMAD-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/23
Signature Algorithm: sha256WithRSAEncryption
67:d0:a5:a3:bd:b2:6b:83:af:47:4a:cc:61:d8:82:7e:63:f0:
0c:2b:7a:e5:1f:fc:a9:f7:83:89:4f:25:78:e6:f5:82:10:88:
8f:1d:3e:d1:a5:cb:ea:ba:9f:74:ba:16:9e:6e:19:08:d8:a5:
55:54:09:4d:59:3c:62:a4:7e:33:3c:66:a0:6d:04:94:b8:18:
e4:68:65:4d:8b:44:49:ce:39:e6:ea:e4:3e:86:77:07:56:de:
b9:5b:aa:09:4a:c3:50:6c:fe:e6:0c:6d:6f:cb:12:83:57:6e:
fe:36:bf:6d:02:5c:e5:e8:00:5b:07:d7:6d:d2:0c:c5:a0:a5:
a6:91:28:c2:c4:70:7a:07:af:88:10:ae:44:17:2a:83:31:e0:
94:1b:13:b1:61:ee:81:fa:e5:bc:2f:c2:16:78:89:6d:a8:a8:
c0:60:2f:53:dd:0f:12:37:3b:ba:de:d0:b0:6e:fb:40:eb:6d:
3a:ef:1d:90:a9:5f:85:0e:d4:0d:76:2d:e3:22:d1:89:46:e0:
38:cc:66:b1:e2:78:61:74:15:b8:7a:06:3d:65:d3:dc:fa:e9:
0c:51:08:9a:fa:c3:70:60:25:1a:5d:97:e4:13:b5:1f:06:32:
e4:38:38:b9:37:03:93:bc:cb:70:79:2a:9d:e3:a8:c5:98:a9:
0e:e7:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 12:43:24 2026 by rpki-client