Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OMfQm5HK3f9OUJfFSdeH6RkRzMQ.roa
File: OMfQm5HK3f9OUJfFSdeH6RkRzMQ.roa (raw, json)
Hash identifier: 9/S4OrkgbVujdnIJVIZJ3sqcZWE8guiILw8pvWraoyM=
Subject key identifier: 38:C7:D0:9B:91:CA:DD:FF:4E:50:97:C5:49:D7:87:E9:19:11:CC:C4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD6EC65799E631C43DA013417A37A312
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OMfQm5HK3f9OUJfFSdeH6RkRzMQ.roa
Signing time: Sun 20 Sep 2026 06:09:08 +0000
ROA not before: Sun 20 Sep 2026 06:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 151.243.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:6e:c6:57:99:e6:31:c4:3d:a0:13:41:7a:37:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38c7d09b91caddff4e5097c549d787e91911ccc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:2f:74:7c:94:a5:52:38:36:25:7b:45:52:
fc:62:d6:a3:5c:32:e4:c1:69:2e:f5:d1:6f:a4:67:
0e:6a:ee:8a:e8:87:b6:7d:83:8d:0c:5a:ca:1e:a0:
82:6a:55:56:51:ad:d6:17:3b:3a:ef:ec:d0:e4:10:
f6:2d:ae:f2:26:28:8c:fb:3d:ea:e5:c4:5f:ca:71:
47:5b:50:62:d4:6e:bf:70:3c:9e:18:80:2e:13:5d:
cf:f3:e8:54:bc:fa:73:29:94:f2:c5:dc:3e:f1:28:
3c:ce:68:60:14:92:ab:69:3f:cf:f1:e3:ea:80:b9:
93:75:b8:b3:77:49:32:d2:35:b4:d0:24:1f:35:7b:
65:c4:27:3f:6a:b4:83:0d:d1:51:03:50:a4:b5:88:
da:15:23:f5:a6:26:6b:25:11:27:1d:f8:0b:35:9b:
d6:d8:bc:dc:fc:c0:f0:7d:90:17:d9:af:1c:25:dc:
74:ea:93:40:8a:4d:3e:e0:f7:f1:63:f2:96:83:c0:
0f:6f:1c:a3:fb:a6:2c:84:4a:4a:ae:4c:d1:40:43:
05:71:2a:a7:44:09:ea:4c:ae:3d:cf:7a:ff:50:dd:
b7:6b:99:f8:82:b5:9c:1d:61:28:de:c9:2f:1e:b6:
24:85:c2:1a:4d:ed:72:5f:fc:0d:db:e3:68:db:8d:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:D0:9B:91:CA:DD:FF:4E:50:97:C5:49:D7:87:E9:19:11:CC:C4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OMfQm5HK3f9OUJfFSdeH6RkRzMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
54:20:aa:2e:14:90:6e:82:e9:ac:83:66:20:f8:e9:bf:51:16:
24:20:f4:06:c9:2a:47:35:ec:da:00:07:5f:af:09:51:26:9e:
7e:5c:2b:af:79:23:4e:6a:74:eb:59:5a:8d:26:b2:99:ee:1f:
c6:f1:64:6f:4c:98:bb:35:f2:75:2f:2a:78:75:81:0a:09:39:
56:3f:6f:f3:bc:63:50:9e:df:ab:15:41:cc:20:67:44:1c:3c:
87:45:59:c2:67:7c:de:33:04:fb:bd:8d:63:c7:04:25:e8:2d:
62:95:14:64:f8:64:3f:2f:37:e6:bf:51:2a:cf:76:3a:11:29:
83:de:02:a2:b5:0b:99:6f:c2:58:f2:4f:a6:df:df:1d:16:93:
40:c5:54:c9:a4:b2:e4:3a:96:53:92:0c:15:16:05:4b:b2:06:
0a:a4:12:4e:06:79:1a:cf:17:75:2a:d1:4a:1a:42:a2:95:bb:
3c:c6:0c:2d:a1:ad:0e:ee:b1:54:03:4b:6e:de:91:8f:cb:72:
6f:31:f2:2d:1d:71:11:0e:e4:77:73:64:37:d3:2d:5a:aa:61:
d9:e6:4b:7b:90:f4:32:97:fb:68:85:13:5e:b1:be:2b:9c:b3:
8e:4c:25:05:9d:f6:99:14:33:da:bb:29:f3:6a:0a:03:02:db:
51:05:c7:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC9bsZXmeYxxD2gE0F6N6MSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIwMDYwOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGM3ZDA5YjkxY2FkZGZmNGU1MDk3YzU0OWQ3ODdlOTE5MTFjY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFIvdHyUpVI4NiV7RVL8YtajXDLk
wWku9dFvpGcOau6K6Ie2fYONDFrKHqCCalVWUa3WFzs67+zQ5BD2La7yJiiM+z3q
5cRfynFHW1Bi1G6/cDyeGIAuE13P8+hUvPpzKZTyxdw+8Sg8zmhgFJKraT/P8ePq
gLmTdbizd0ky0jW00CQfNXtlxCc/arSDDdFRA1CktYjaFSP1piZrJREnHfgLNZvW
2Lzc/MDwfZAX2a8cJdx06pNAik0+4PfxY/KWg8APbxyj+6YshEpKrkzRQEMFcSqn
RAnqTK49z3r/UN23a5n4grWcHWEo3skvHrYkhcIaTe1yX/wN2+No243PuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDjH0JuRyt3/TlCXxUnXh+kZEczEMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvT01mUW01SEszZjlPVUpmRlNkZUg2UmtSek1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MFMA0G
CSqGSIb3DQEBCwUAA4IBAQBUIKouFJBugumsg2Yg+Om/URYkIPQGySpHNezaAAdf
rwlRJp5+XCuveSNOanTrWVqNJrKZ7h/G8WRvTJi7NfJ1Lyp4dYEKCTlWP2/zvGNQ
nt+rFUHMIGdEHDyHRVnCZ3zeMwT7vY1jxwQl6C1ilRRk+GQ/Lzfmv1Eqz3Y6ESmD
3gKitQuZb8JY8k+m398dFpNAxVTJpLLkOpZTkgwVFgVLsgYKpBJOBnkazxd1KtFK
GkKilbs8xgwtoa0O7rFUA0tu3pGPy3JvMfItHXERDuR3c2Q30y1aqmHZ5kt7kPQy
l/tohRNesb4rnLOOTCUFnfaZFDPauynzagoDAttRBcfw
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:42 2026 by rpki-client