Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/OMdy0Wi0NhFrb1HpbI-J8Bi2EjQ.roa
File: OMdy0Wi0NhFrb1HpbI-J8Bi2EjQ.roa (raw, json)
Hash identifier: qtUmf9EbD2abkMef7mdvs22HGXF5Nws7qs6ZujPLgX8=
Subject key identifier: 38:C7:72:D1:68:B4:36:11:6B:6F:51:E9:6C:8F:89:F0:18:B6:12:34
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 019B77C6D7465C9739E8ACEEF5B9ABB34209
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/OMdy0Wi0NhFrb1HpbI-J8Bi2EjQ.roa
Signing time: Thu 01 Jan 2026 04:17:58 +0000
ROA not before: Thu 01 Jan 2026 04:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21094
IP address blocks: 91.212.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:d7:46:5c:97:39:e8:ac:ee:f5:b9:ab:b3:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Jan 1 04:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38c772d168b436116b6f51e96c8f89f018b61234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:67:82:1b:e6:51:b1:fb:dc:1d:14:ba:ee:
fc:27:3b:fb:1f:88:d6:50:56:3e:a3:58:50:4c:6f:
8d:a3:a8:c9:0f:d2:90:21:f4:02:6e:0c:0d:c0:17:
09:f8:54:cc:c0:7b:7a:2e:7f:0d:e6:99:cc:18:2c:
d1:da:b4:08:94:3d:0e:65:9f:75:0e:31:6e:a4:03:
e2:cb:9c:1e:2a:09:47:af:75:db:6c:6c:42:27:26:
e4:13:19:57:f5:e1:71:3b:e0:7c:5c:2a:59:51:3c:
79:22:e8:b1:d3:99:dc:f3:ae:6d:09:fa:97:c3:5b:
aa:b4:d9:d5:01:11:5a:ac:af:2c:12:63:85:7d:95:
1d:54:3c:2f:b9:a8:ba:a2:2d:39:dc:c6:5a:68:d2:
79:f3:3e:55:1d:28:90:f0:53:52:12:ca:f5:55:c4:
28:26:f6:26:5c:41:46:8c:a0:1c:4a:72:1e:f5:4e:
4b:ef:46:46:2e:16:a1:cc:e5:4e:b8:ea:f7:94:53:
28:8b:9c:dc:7c:26:d2:84:41:73:76:f2:12:e0:db:
7b:f4:7c:84:f6:29:46:06:a1:6a:79:b2:d2:60:aa:
03:ee:1f:b6:76:31:48:5d:be:f5:8a:67:3e:11:a6:
43:85:3b:3d:bd:d5:10:17:a1:3f:64:07:96:87:aa:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:72:D1:68:B4:36:11:6B:6F:51:E9:6C:8F:89:F0:18:B6:12:34
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/OMdy0Wi0NhFrb1HpbI-J8Bi2EjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:15:aa:47:0d:64:46:df:c3:6f:0d:51:a0:83:5f:34:f9:20:
6b:db:02:e4:80:a7:5d:56:4f:5b:f0:5e:44:78:d3:68:e6:23:
01:65:cc:97:ff:34:41:4f:26:9b:5b:ed:db:23:c4:e8:9d:29:
e4:4b:7f:75:1b:60:05:22:e0:9d:eb:fd:9e:ae:29:f9:cd:25:
3f:8d:f5:71:8e:11:49:a4:65:03:9c:16:7a:20:4b:4c:70:53:
b5:3c:21:09:1a:a0:a4:dd:a3:73:c9:cc:0e:45:35:87:49:7f:
cc:3e:4c:c0:f2:af:0b:a9:dd:1f:b2:bc:18:1d:4b:e0:6b:59:
62:99:ac:2b:b0:ce:fd:c1:af:c9:51:58:2e:cc:83:bd:66:2e:
87:c7:ad:3a:5a:8b:c2:2a:71:f8:8f:39:91:ac:7e:99:a9:e9:
13:5d:a2:2f:5a:c9:e1:3f:f4:aa:fe:b3:c9:c5:be:29:28:e4:
27:5d:b8:92:f4:af:73:7f:0b:f7:7f:21:6c:2c:db:b4:75:9f:
a8:7e:fc:11:86:5a:0e:e1:ff:a6:00:65:c3:e1:81:9e:18:52:
9e:15:eb:0d:e5:b9:56:65:ac:ad:2e:41:9c:55:8c:c1:78:57:
6a:a1:ed:a8:b1:23:9c:cd:83:e8:de:a5:c0:79:e0:8c:22:7e:
7d:0e:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:47 2026 by rpki-client