Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/omoCzxJ9L9dJB_W6Aaqk1T1B3qk.roa
File: omoCzxJ9L9dJB_W6Aaqk1T1B3qk.roa (raw, json)
Hash identifier: 4vW3GD/6mj36rEC94aob1pURwDhmk43vtDV3xs5z+vA=
Subject key identifier: A2:6A:02:CF:12:7D:2F:D7:49:07:F5:BA:01:AA:A4:D5:3D:41:DE:A9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019D77A20655F3044EDC423863F9B44A34FE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/omoCzxJ9L9dJB_W6Aaqk1T1B3qk.roa
Signing time: Fri 10 Apr 2026 13:43:20 +0000
ROA not before: Fri 10 Apr 2026 13:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213798
IP address blocks: 153.76.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:a2:06:55:f3:04:4e:dc:42:38:63:f9:b4:4a:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Apr 10 13:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26a02cf127d2fd74907f5ba01aaa4d53d41dea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:4f:0d:ff:82:e6:12:b7:ab:94:32:2d:38:
36:1d:a3:92:ec:f2:4d:0a:f8:ee:8d:fb:ef:67:2d:
25:60:78:01:f3:f3:77:63:65:96:b4:68:13:1e:3d:
e2:58:05:54:04:59:45:a6:87:91:47:9e:fa:af:1f:
2c:f8:9e:95:be:4f:66:34:87:97:ea:7f:5e:2d:70:
da:b6:7b:3b:55:71:ae:46:2f:fa:82:c2:45:ee:44:
5c:47:e0:7b:2f:06:45:b1:e3:2d:18:f7:d4:80:8e:
8c:cd:10:90:98:3c:fe:f7:b7:36:5d:9d:a6:59:f6:
e6:20:1c:83:bb:b7:4a:96:7c:13:14:bc:d9:c1:fa:
e1:17:fb:b0:3e:7e:b0:0b:31:11:98:a4:8a:6d:bc:
b3:af:df:1f:02:ab:ba:91:00:ea:95:c7:b0:d1:17:
51:14:81:15:60:93:6c:fe:75:10:32:6a:79:34:8d:
83:55:d4:f7:50:0b:a4:fe:6e:cf:5d:c2:36:60:9b:
27:f9:e5:95:60:bc:1a:a8:99:bd:ff:1b:8d:bd:1b:
78:b7:4a:f8:2b:62:23:ec:fe:7d:b4:1a:a2:19:82:
d8:a9:ec:2a:41:48:73:45:32:48:78:62:d2:f0:de:
4d:29:35:36:8d:96:76:0b:df:0b:bb:68:dc:50:d2:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:02:CF:12:7D:2F:D7:49:07:F5:BA:01:AA:A4:D5:3D:41:DE:A9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/omoCzxJ9L9dJB_W6Aaqk1T1B3qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.1.0/24
Signature Algorithm: sha256WithRSAEncryption
18:93:06:a0:9a:26:fc:35:ca:2d:9e:c8:09:9e:d8:f7:39:a4:
ae:a6:50:ab:cb:87:b4:a7:9f:2c:d9:8a:02:79:9b:b5:b0:2d:
76:fe:9a:c8:cf:c2:65:22:a7:df:7d:f6:4e:b5:32:c4:53:80:
d3:e0:c3:95:50:1f:c8:15:53:08:df:b6:5a:fc:69:94:2f:dc:
99:26:3d:be:7f:f6:b1:92:d7:ef:27:d5:a1:94:91:e9:f5:ae:
da:ce:a6:36:21:90:fb:2b:28:a4:92:64:78:f2:8a:b3:2c:28:
f3:0d:60:55:bc:e8:c5:60:49:cd:82:4c:1f:d4:3d:a6:fe:4b:
86:90:c3:70:61:f2:d6:7a:bf:df:46:69:e3:e2:00:2b:a0:12:
76:50:a9:0e:50:68:3c:83:4c:52:e5:de:0b:ba:4c:b9:47:2c:
60:ee:64:d2:e1:e8:fc:a7:10:24:a5:33:6c:37:fc:e6:a0:1e:
3f:4a:68:75:96:5e:4a:ff:1f:3c:c0:72:2d:ae:c6:6d:1d:e5:
d7:d5:96:c8:c0:1c:a5:e0:99:3d:21:50:93:f3:bf:4f:0b:21:
b8:5b:91:46:9b:16:65:ad:62:89:be:62:69:dc:7e:91:8d:c3:
be:d3:2d:4a:97:bb:35:51:8f:bc:f0:ac:25:4a:30:98:67:cd:
05:10:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:40 2026 by rpki-client