Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/omdp9o_gUvR8pHglA_MM3P_2mrI.roa
File: omdp9o_gUvR8pHglA_MM3P_2mrI.roa (raw, json)
Hash identifier: 5DA44aR9CbMP0OyTi/8bkActkWf4JkxDerCl5VEmEiA=
Subject key identifier: A2:67:69:F6:8F:E0:52:F4:7C:A4:78:25:03:F3:0C:DC:FF:F6:9A:B2
Certificate issuer: /CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Certificate serial: 019EEE6E232C5EEC9BFB6D11C27A00BE93D0
Authority key identifier: 98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/omdp9o_gUvR8pHglA_MM3P_2mrI.roa
Signing time: Mon 22 Jun 2026 08:24:15 +0000
ROA not before: Mon 22 Jun 2026 08:24:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60584
IP address blocks: 193.200.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:6e:23:2c:5e:ec:9b:fb:6d:11:c2:7a:00:be:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Validity
Not Before: Jun 22 08:24:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26769f68fe052f47ca4782503f30cdcfff69ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:7b:a8:ff:ed:76:c7:03:7c:7c:85:92:8a:
0c:4b:30:cc:6a:c9:5d:2c:61:58:76:11:b6:2e:ae:
34:77:25:02:ab:86:96:85:f7:a6:23:1a:7f:19:15:
79:54:06:fd:df:0d:09:4f:3b:6d:9d:45:0f:8e:a3:
a1:ae:51:16:da:66:ff:45:27:90:67:4b:10:18:e3:
fa:6c:f3:75:56:0f:d2:71:36:a9:6a:68:88:08:37:
5a:21:08:48:12:99:94:62:56:ed:b1:3a:46:bc:6d:
99:d2:1b:26:70:5e:88:89:43:9d:81:ef:da:18:e9:
1e:fc:04:1e:c3:bb:8c:cc:c8:35:61:81:5a:04:4d:
4e:e8:63:64:ab:fe:33:b8:fa:e0:4e:d0:8c:94:9a:
63:e7:52:bb:68:1d:5d:7d:bf:76:e0:de:c4:73:2a:
f3:e9:90:fc:66:4e:08:47:7a:90:db:61:e9:39:0e:
c5:41:b7:0b:91:6f:af:54:5b:e1:f6:b9:54:54:5a:
47:35:c0:b2:bb:af:dd:54:98:3b:d5:5f:60:76:22:
68:1d:24:56:55:d1:26:45:91:37:ad:d7:f8:74:a7:
62:e3:d5:8f:04:47:a5:86:dd:20:23:b2:e0:78:b4:
49:6e:b5:96:02:1c:d8:1c:a6:2f:a4:93:e7:8a:b7:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:67:69:F6:8F:E0:52:F4:7C:A4:78:25:03:F3:0C:DC:FF:F6:9A:B2
X509v3 Authority Key Identifier:
keyid:98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/omdp9o_gUvR8pHglA_MM3P_2mrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:73:80:5d:94:80:77:66:81:cf:27:4d:e5:dd:60:bf:0e:3b:
f4:d8:39:5f:67:f7:7b:31:42:2e:5d:55:be:4f:88:3d:ba:9d:
18:d2:42:99:d9:6d:72:cc:17:95:f8:d8:1b:6a:58:12:e9:94:
c4:3f:17:72:61:02:d9:39:ef:0f:17:f6:cd:34:2d:e4:fa:99:
e4:86:72:59:99:3e:6a:f9:8d:c2:40:ee:48:7b:7c:78:68:b6:
90:84:d5:9e:29:1a:44:bb:c2:30:43:21:4e:02:79:85:d3:87:
1b:aa:ea:c0:c9:66:9b:ad:ec:46:03:52:f6:df:5d:ae:15:da:
c0:1e:0a:ef:e6:1a:54:29:82:ed:26:7f:6c:c5:76:b4:02:c2:
82:68:16:ec:77:37:34:fa:bb:65:fb:18:1b:1b:15:01:85:ce:
be:95:5a:5c:aa:18:e5:b6:72:48:a8:9a:2c:50:ad:27:73:a2:
19:0a:34:73:d6:12:56:a1:94:58:14:75:ac:ff:21:da:76:64:
b9:d0:76:f1:70:16:71:02:df:74:83:02:14:2e:57:b6:bf:53:
6d:56:87:b8:9b:df:ed:d2:84:3f:a9:5c:d8:53:67:80:60:8e:
6e:1c:4b:a0:27:af:d6:ea:2a:e1:dd:1b:32:67:14:1d:5c:5a:
75:1c:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:48:42 2026 by rpki-client