Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/wWfjeztis2PtGOGWtYTA_XABb0I.roa
File: wWfjeztis2PtGOGWtYTA_XABb0I.roa (raw, json)
Hash identifier: kCYIxgTQ/bx/tddO3f7BrMRAfb6Qh2BAxaQiAifZLz8=
Subject key identifier: C1:67:E3:7B:3B:62:B3:63:ED:18:E1:96:B5:84:C0:FD:70:01:6F:42
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019D422905B835DA9C7FA4483A86B71854B2
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/wWfjeztis2PtGOGWtYTA_XABb0I.roa
Signing time: Tue 31 Mar 2026 04:31:17 +0000
ROA not before: Tue 31 Mar 2026 04:31:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:29:05:b8:35:da:9c:7f:a4:48:3a:86:b7:18:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 31 04:31:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c167e37b3b62b363ed18e196b584c0fd70016f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:63:01:2c:53:06:0c:ce:13:9b:5c:36:70:
bf:57:6c:1a:f5:59:57:eb:0f:6c:18:23:7b:8f:fb:
47:1e:06:d8:6c:bc:47:8f:9e:79:33:5d:09:69:c3:
4f:75:9f:6c:d8:ad:4a:80:00:72:e8:83:dc:ca:cc:
44:9f:f0:6b:a6:05:80:91:ae:0d:4c:06:85:a7:5f:
7c:ed:5f:94:d5:44:7c:f9:9a:68:8c:1f:90:48:5c:
ed:82:15:0e:3e:b0:c2:eb:c6:10:47:90:ef:99:0d:
c2:5f:53:57:d5:33:53:66:eb:c0:fa:e1:41:bd:13:
25:47:99:46:ae:4a:03:91:9b:eb:4c:eb:76:12:d6:
00:fe:ee:61:da:fc:c6:d2:ac:cf:48:42:6a:94:05:
24:c5:cf:b9:55:59:86:e1:1d:68:d8:8f:4d:82:50:
2b:53:67:4b:96:b3:6b:6d:73:f0:88:e5:71:a7:17:
d1:04:99:89:15:d5:dc:d2:e4:8e:0a:d3:d5:97:5c:
fb:4a:37:18:25:92:79:c6:96:59:83:35:19:24:09:
5e:25:fd:10:13:78:e9:23:7d:2c:48:09:9b:10:e2:
f5:93:c4:fc:d4:89:43:63:ee:28:71:dc:41:f0:6e:
eb:f6:73:8a:e6:58:24:d6:5e:65:ac:45:02:48:eb:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:67:E3:7B:3B:62:B3:63:ED:18:E1:96:B5:84:C0:FD:70:01:6F:42
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/wWfjeztis2PtGOGWtYTA_XABb0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5a:33:4f:e4:48:75:64:6e:69:b9:3e:fd:b9:b8:8e:c7:2f:
2d:77:b4:39:a1:77:2c:0f:25:8d:0b:06:d4:48:35:3f:6e:5c:
67:02:9e:e1:40:41:9e:84:38:a5:15:47:81:40:98:5c:81:42:
23:85:5c:30:ce:08:a7:0f:19:d1:7e:ba:b6:ce:81:79:94:24:
f8:12:67:26:bc:3e:e5:e0:8d:d4:e0:8a:d6:fc:79:80:a2:3a:
16:01:3d:95:7c:99:09:f4:d3:d1:21:44:34:dc:d7:54:28:01:
1f:2e:29:41:48:92:4f:45:79:17:8c:80:53:df:ef:78:27:d6:
d5:b2:83:00:ad:f6:89:52:45:20:40:f7:91:1e:4b:de:c3:82:
e8:ec:7c:f9:2e:d5:e7:29:7e:25:fd:e7:37:5b:0f:50:56:4f:
a7:76:e1:4c:ea:01:31:d8:58:45:ed:28:13:dd:fc:8e:b2:ff:
0a:9d:0c:69:33:ff:17:da:7d:8c:d6:ef:04:5f:2c:1d:29:d8:
a1:f7:be:87:97:aa:44:cf:a1:c0:8e:fb:aa:d4:62:fb:1d:b2:
60:48:69:b8:8a:f9:a9:5b:f1:65:83:92:be:bf:b1:9d:52:60:
e5:8d:87:b0:0a:33:de:01:cf:dc:52:cc:15:27:63:39:9a:89:
2c:80:8a:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1CKQW4Ndqcf6RIOoa3GFSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjYwMzMxMDQzMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTY3ZTM3YjNiNjJiMzYzZWQxOGUxOTZiNTg0YzBmZDcwMDE2ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAhjASxTBgzOE5tcNnC/V2wa9VlX
6w9sGCN7j/tHHgbYbLxHj555M10JacNPdZ9s2K1KgABy6IPcysxEn/BrpgWAka4N
TAaFp1987V+U1UR8+ZpojB+QSFztghUOPrDC68YQR5DvmQ3CX1NX1TNTZuvA+uFB
vRMlR5lGrkoDkZvrTOt2EtYA/u5h2vzG0qzPSEJqlAUkxc+5VVmG4R1o2I9NglAr
U2dLlrNrbXPwiOVxpxfRBJmJFdXc0uSOCtPVl1z7SjcYJZJ5xpZZgzUZJAleJf0Q
E3jpI30sSAmbEOL1k8T81IlDY+4ocdxB8G7r9nOK5lgk1l5lrEUCSOtOnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFn43s7YrNj7RjhlrWEwP1wAW9CMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvd1dmamV6dGlzMlB0R09HV3RZVEFfWEFCYjBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HT2MA0G
CSqGSIb3DQEBCwUAA4IBAQBIWjNP5Eh1ZG5puT79ubiOxy8td7Q5oXcsDyWNCwbU
SDU/blxnAp7hQEGehDilFUeBQJhcgUIjhVwwzginDxnRfrq2zoF5lCT4EmcmvD7l
4I3U4IrW/HmAojoWAT2VfJkJ9NPRIUQ03NdUKAEfLilBSJJPRXkXjIBT3+94J9bV
soMArfaJUkUgQPeRHkvew4Lo7Hz5LtXnKX4l/ec3Ww9QVk+nduFM6gEx2FhF7SgT
3fyOsv8KnQxpM/8X2n2M1u8EXywdKdih976Hl6pEz6HAjvuq1GL7HbJgSGm4ivmp
W/Flg5K+v7GdUmDljYewCjPeAc/cUswVJ2M5moksgIpI
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:30 2026 by rpki-client