Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/oGM2VnMpOCKYJ76UmtsN4bcG4AE.roa
File: oGM2VnMpOCKYJ76UmtsN4bcG4AE.roa (raw, json)
Hash identifier: u1qpcEzvc0AiMQxU9KKbQ34nUkrdcBih3dx5vdFM29g=
Subject key identifier: A0:63:36:56:73:29:38:22:98:27:BE:94:9A:DB:0D:E1:B7:06:E0:01
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FAA914359C667FA052E6EFDE919B25CDD
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/oGM2VnMpOCKYJ76UmtsN4bcG4AE.roa
Signing time: Tue 28 Jul 2026 21:11:14 +0000
ROA not before: Tue 28 Jul 2026 21:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 46.253.130.0/24 maxlen: 24
91.132.86.0/24 maxlen: 24
185.196.26.0/24 maxlen: 24
185.219.20.0/24 maxlen: 24
185.242.185.0/24 maxlen: 24
194.50.194.0/24 maxlen: 24
195.216.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:91:43:59:c6:67:fa:05:2e:6e:fd:e9:19:b2:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 28 21:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0633656732938229827be949adb0de1b706e001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:35:42:e7:4e:9e:76:26:19:e9:3c:9f:af:
b8:d5:c8:9e:e3:19:18:9d:d4:ec:d4:dd:0f:a1:60:
06:2f:ba:fe:42:08:be:48:86:cd:01:fc:49:b2:b3:
1f:d1:9c:93:ad:29:51:67:64:17:9a:53:43:8c:70:
47:82:97:70:37:ef:57:5a:43:e8:85:6c:37:7e:fd:
c0:50:03:ea:81:30:f8:ae:66:93:d6:60:95:31:3b:
15:cd:59:4d:58:7a:a8:d1:f8:a4:f2:a8:f7:40:d8:
a6:e7:92:3e:81:19:fa:e1:53:b7:c9:83:b4:95:60:
02:8b:5f:b7:e7:f9:02:f5:b9:b7:7e:55:3d:7b:d1:
dc:38:e4:5c:f3:e3:a6:2d:7e:97:af:ff:08:e4:d4:
6b:a5:f1:08:96:eb:e7:ac:3c:e8:11:fd:2d:0a:c8:
74:c3:36:cc:73:61:aa:d3:09:e2:02:b2:13:80:16:
e4:76:7e:86:de:22:80:3f:f4:0a:75:70:bb:a6:f5:
58:d2:02:ae:ad:50:69:6a:6a:19:24:a8:90:08:41:
28:e5:37:ff:91:99:84:33:23:23:1e:c3:65:9b:72:
05:a4:e6:32:af:87:c9:df:1c:26:2d:61:c1:6a:a3:
60:1b:17:08:09:d3:6f:54:e3:8c:dd:90:6a:02:d1:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:63:36:56:73:29:38:22:98:27:BE:94:9A:DB:0D:E1:B7:06:E0:01
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/oGM2VnMpOCKYJ76UmtsN4bcG4AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.130.0/24
91.132.86.0/24
185.196.26.0/24
185.219.20.0/24
185.242.185.0/24
194.50.194.0/24
195.216.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3c:d8:cc:09:25:d3:8d:85:e2:30:88:23:6b:7c:2a:34:8c:
2b:7f:a8:a8:13:ae:07:24:7e:74:04:39:b8:45:a1:1d:05:8e:
fa:ae:8a:55:d4:17:fa:d3:29:2e:fe:91:d9:94:9e:8a:4e:58:
fe:31:41:50:3d:89:85:23:93:d1:09:3f:16:03:e1:f6:5d:bd:
74:46:f4:3d:d1:2e:96:2a:2b:f7:a3:9b:7f:02:a1:2d:ba:c0:
f6:05:24:cc:e3:ee:ea:ce:53:70:42:d8:13:be:7e:2c:39:28:
ac:d2:49:80:50:57:2d:37:fb:08:f8:cb:d7:6b:7a:9d:6c:fb:
cb:8f:5c:c7:db:97:18:b8:15:3e:ae:ba:2b:86:69:f3:93:30:
57:a9:6a:13:05:fa:c6:99:75:b8:a4:42:7b:96:48:62:32:08:
c7:14:df:86:f5:14:5a:16:88:46:e8:d9:05:ce:24:80:e8:1f:
5b:46:5c:27:a4:df:54:7b:1b:db:c2:3b:a6:ed:a1:ac:ae:6f:
63:6f:7f:4f:30:fd:7e:1f:2a:a4:e4:1b:6d:3f:db:f3:ea:64:
a9:ce:64:ae:4b:81:44:de:0d:e0:8d:0d:b0:2b:b4:8e:ee:d2:
93:14:de:1d:d0:48:0c:83:b2:68:f1:c6:c3:fa:97:02:23:b9:
75:c4:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:34:25 2026 by rpki-client