Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OmwLJQSTnBEef8YiJyy3vHeNNZ0.roa
File: OmwLJQSTnBEef8YiJyy3vHeNNZ0.roa (raw, json)
Hash identifier: nXRJF8GSGVftBJX0NpNorUWjicV35MGzGuSyOIxO7fY=
Subject key identifier: 3A:6C:0B:25:04:93:9C:11:1E:7F:C6:22:27:2C:B7:BC:77:8D:35:9D
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 019B7CED17809CE70399C65AE337D6DD8957
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OmwLJQSTnBEef8YiJyy3vHeNNZ0.roa
Signing time: Fri 02 Jan 2026 04:17:51 +0000
ROA not before: Fri 02 Jan 2026 04:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52106
IP address blocks: 91.238.56.0/22 maxlen: 22
194.247.62.0/24 maxlen: 24
195.3.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:17:80:9c:e7:03:99:c6:5a:e3:37:d6:dd:89:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Jan 2 04:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a6c0b2504939c111e7fc622272cb7bc778d359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:2b:3f:86:29:e6:43:2d:97:b7:06:b1:80:
f8:e1:24:24:bf:de:c9:8c:75:2c:61:18:10:3f:8d:
aa:b8:02:d4:4e:7a:9f:ee:02:9d:49:c9:a6:8c:4a:
a0:12:6d:16:ea:f4:64:93:d3:d9:c4:a7:66:79:fb:
48:44:62:6b:20:f5:6c:16:d3:6e:89:dc:66:0c:91:
b9:0c:5d:82:c4:eb:3d:1f:a7:08:a4:28:04:92:1b:
ba:77:1f:c3:c2:0f:3a:ad:a0:3a:7f:5c:54:74:ef:
9d:67:ef:1c:ba:b6:da:ee:03:65:50:e3:4c:9b:b0:
87:e1:82:b7:60:3e:67:5c:20:35:57:26:90:76:54:
c9:8c:89:1e:03:bb:5f:10:59:a3:a9:93:3b:2e:bc:
8c:3d:4c:fe:66:56:06:13:9a:4b:6a:6c:49:64:0f:
b2:7b:02:95:9c:96:56:db:fd:62:49:af:a4:52:43:
de:d8:c5:a7:bf:3d:29:ed:dc:40:f0:00:56:e0:01:
cd:4b:00:3c:45:d4:94:d2:ce:a1:0d:87:47:2b:93:
a1:9e:8d:8a:fb:1d:99:6d:68:39:e7:2d:9b:63:ee:
6d:7c:26:e2:b5:99:31:fc:39:e2:c0:5a:80:6e:f2:
15:c7:36:48:8d:58:9e:ca:03:d6:7f:f1:36:57:f0:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:0B:25:04:93:9C:11:1E:7F:C6:22:27:2C:B7:BC:77:8D:35:9D
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OmwLJQSTnBEef8YiJyy3vHeNNZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.56.0/22
194.247.62.0/24
195.3.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:f8:4f:a8:b6:34:14:a9:f0:c8:61:1d:88:dd:1d:0f:04:ce:
c9:89:17:f5:d8:50:85:56:bf:33:2b:54:e0:7f:85:ff:d6:ad:
98:37:b3:81:e7:d1:54:8a:aa:4f:8b:a9:90:ce:e3:80:8b:2d:
7a:bb:63:2d:a0:7d:73:28:2a:31:f9:c7:68:49:68:30:6a:7b:
ea:21:33:52:3e:01:d0:6d:79:4c:23:c1:b4:e1:46:a4:aa:9c:
ba:7d:b2:c2:aa:c3:11:6d:48:32:b4:93:77:c3:68:1b:62:0e:
d3:06:4b:4e:84:ff:d5:eb:69:a2:10:30:ef:78:0f:e8:01:11:
19:e4:b9:a3:8c:08:d8:1d:26:bd:8c:c3:c9:15:8f:ed:67:8e:
ea:6d:aa:40:8e:76:19:3b:7d:d8:b9:7e:ee:29:11:9b:74:85:
18:45:0c:13:f6:b5:78:ae:8d:04:cd:d5:3b:99:e9:6a:fe:0b:
33:a0:24:d5:ab:45:9c:ce:77:f2:5a:d8:c5:23:11:9f:22:6b:
8e:ab:44:f3:c3:29:82:3d:77:66:09:0b:a6:48:f7:0d:47:d9:
4a:df:93:d9:ad:60:68:ee:41:ab:bb:29:29:98:34:de:45:a1:
09:4c:90:e2:d7:b3:c6:b5:35:cb:0c:e3:e7:96:d8:46:b4:bf:
18:42:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:25 2026 by rpki-client