Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/46z-VA8ZxSIvEgTMHqo0Ukp0tI4.roa
File: 46z-VA8ZxSIvEgTMHqo0Ukp0tI4.roa (raw, json)
Hash identifier: 1lykPvwIwXLQm3HQpScKTdZPHNhg2f4sQGOIC0Vwqhw=
Subject key identifier: E3:AC:FE:54:0F:19:C5:22:2F:12:04:CC:1E:AA:34:52:4A:74:B4:8E
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019A4168DF0F66211A1D82681FC27C801385
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/46z-VA8ZxSIvEgTMHqo0Ukp0tI4.roa
Signing time: Sat 01 Nov 2025 21:53:03 +0000
ROA not before: Sat 01 Nov 2025 21:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 212.116.236.0/24 maxlen: 24
212.116.237.0/24 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:68:df:0f:66:21:1a:1d:82:68:1f:c2:7c:80:13:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 1 21:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3acfe540f19c5222f1204cc1eaa34524a74b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:85:31:6d:04:df:2f:aa:43:68:64:34:c6:8a:
86:6c:46:50:a1:ae:06:4a:4f:f1:a7:0e:2c:bb:50:
0e:84:63:5d:b9:8f:4b:d2:93:b6:51:21:da:71:67:
6b:5a:3c:d5:c2:78:3b:5b:df:c9:41:dc:a5:be:d8:
a2:6b:2b:84:b6:5d:f0:7d:ce:2b:33:37:a6:07:84:
1d:c8:1e:b4:f1:24:92:32:98:4a:90:17:d2:f7:f3:
2c:c0:49:ed:11:c7:8f:e7:66:8b:79:de:4f:22:2b:
f3:b2:9b:ce:f2:7f:bd:c3:53:58:3e:ae:ae:f8:f8:
ee:b5:80:d6:73:27:89:aa:78:23:fb:16:b0:23:ad:
b5:b6:66:b7:53:14:5d:97:7c:74:20:03:66:01:9a:
ae:49:4b:da:47:ab:f3:68:64:2c:0b:d2:46:b7:b7:
4b:a9:7b:e0:16:d1:5c:97:e5:6b:b3:1d:fb:a0:aa:
ba:8c:85:32:4f:c0:1f:c4:c3:cc:2b:16:6f:32:ce:
4d:f7:03:f2:7b:fb:c0:50:6a:ad:51:eb:0a:63:f3:
76:de:45:c2:02:d4:6c:bb:55:20:84:a3:f7:07:59:
d5:c0:77:15:6e:b7:d3:3d:87:e5:84:59:f4:f1:f5:
14:d0:16:00:d6:ba:03:77:fb:93:b4:32:11:1a:77:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:FE:54:0F:19:C5:22:2F:12:04:CC:1E:AA:34:52:4A:74:B4:8E
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/46z-VA8ZxSIvEgTMHqo0Ukp0tI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.236.0/23
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:04:f2:23:7f:30:72:bf:be:d2:05:be:11:8c:b5:68:d7:b7:
5a:3a:f8:ef:70:86:10:4c:18:12:ff:8f:58:bd:e1:ee:2e:f7:
9b:7e:7b:36:38:6f:77:80:c8:3d:3d:99:47:18:d7:0c:6a:9e:
55:bf:16:f7:19:f3:fb:0b:e7:ec:22:ea:c3:b7:f8:65:83:04:
ef:fb:18:cb:ef:5c:24:88:1c:0f:21:1f:d9:ef:ed:4a:28:b6:
b1:cc:11:5c:d8:79:d4:d6:0e:7a:92:12:44:bd:65:6c:98:1a:
f2:ce:62:cf:57:59:82:c7:dd:e9:23:fd:86:58:72:aa:4d:57:
b6:e3:f3:81:4e:d1:75:6c:c4:90:c0:f4:0e:0c:7f:79:82:e6:
59:35:70:22:5e:f7:a4:0b:8c:e6:b6:b4:0e:87:15:98:8b:1c:
2e:95:26:1d:df:37:bf:f2:2f:ad:24:ee:3e:d5:b3:4d:f8:82:
66:65:27:72:59:8b:0e:31:09:ea:c5:49:7b:81:1d:77:09:6a:
30:be:33:9e:83:93:14:bf:af:9b:f4:a5:f7:e0:4c:3e:ec:48:
f1:4d:fd:ab:80:cb:c3:d4:d9:77:ff:ef:47:a2:e8:17:a0:70:
e0:13:44:e1:2a:27:3b:39:4d:4a:d3:1d:4b:93:29:fa:58:0b:
84:37:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:12:35 2025 by rpki-client