Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/rOmMXRTZblPMay-zs8kA15IN66k.roa
File: rOmMXRTZblPMay-zs8kA15IN66k.roa (raw, json)
Hash identifier: vQJU3ISGXUgoYaVC83QFFUWTqj9768FZ9m06Z+5hxLM=
Subject key identifier: AC:E9:8C:5D:14:D9:6E:53:CC:6B:2F:B3:B3:C9:00:D7:92:0D:EB:A9
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01A0AFBC4822434687C24408B4C0A61717E9
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/rOmMXRTZblPMay-zs8kA15IN66k.roa
Signing time: Thu 17 Sep 2026 14:19:07 +0000
ROA not before: Thu 17 Sep 2026 14:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49769
IP address blocks: 178.72.8.0/21 maxlen: 21
185.153.156.0/23 maxlen: 23
185.153.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:bc:48:22:43:46:87:c2:44:08:b4:c0:a6:17:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Sep 17 14:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ace98c5d14d96e53cc6b2fb3b3c900d7920deba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:7d:87:47:c8:0e:c4:b0:74:94:00:f4:c5:
b7:e7:df:01:6a:dd:02:1d:67:d5:f7:7b:2d:26:a4:
c2:df:4c:93:b5:95:1e:9d:02:6d:12:48:cd:0c:d3:
4c:91:64:c7:c8:88:3c:03:03:b2:b1:c2:06:73:d2:
b6:d0:fe:97:61:5f:eb:19:e4:88:9d:af:1f:d9:1d:
b4:70:89:06:98:e1:0b:ff:52:ee:02:ed:14:ea:ff:
00:dc:e4:79:2f:9e:95:08:87:90:db:f1:7a:c9:99:
2a:10:cb:1a:0c:37:a4:72:2b:9a:ca:58:09:46:c5:
3d:e8:d4:5a:b8:4e:6a:1b:c1:84:39:53:fc:39:e3:
64:b8:ba:7b:0c:9a:31:eb:6e:30:1b:38:ac:ce:32:
4b:18:55:49:8f:67:a7:be:36:ff:c8:37:34:12:87:
4d:19:f1:cd:a6:c5:a9:44:18:19:39:9f:75:90:c9:
53:ea:af:2d:eb:59:84:86:ff:61:2b:41:a7:f0:62:
bd:b8:6f:54:63:a7:e8:8e:ad:d8:f6:35:a1:44:88:
f4:d1:66:d9:d4:02:a6:01:a3:31:72:87:48:4d:b6:
67:05:91:a2:a1:b0:c5:63:c8:e8:8d:bb:08:d2:78:
99:d2:33:b8:0a:01:7e:d2:25:56:11:86:8b:32:ce:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E9:8C:5D:14:D9:6E:53:CC:6B:2F:B3:B3:C9:00:D7:92:0D:EB:A9
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/rOmMXRTZblPMay-zs8kA15IN66k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.72.8.0/21
185.153.156.0-185.153.158.255
Signature Algorithm: sha256WithRSAEncryption
2d:14:3c:f3:f0:61:15:fe:dc:da:32:36:27:df:88:6e:d6:ac:
4f:f8:d8:37:0e:e7:c5:fb:43:d5:c3:8b:9b:dd:a2:6b:b5:fe:
ae:b7:c8:d9:77:68:1a:4c:e3:8e:6b:e1:c3:8f:75:6c:da:59:
53:ca:6b:8f:69:93:d3:19:8a:b4:24:20:fe:2b:21:bb:dc:4b:
6f:4f:2b:9c:46:42:ef:09:69:8c:07:20:c2:35:a7:a6:65:a4:
b5:fc:b8:73:88:fa:b6:ad:f1:18:08:78:ae:8d:c9:66:c0:00:
a3:1c:fe:e2:38:9d:1b:9e:3b:9e:92:31:03:49:22:d6:96:b0:
86:63:7a:0f:07:7b:51:ac:56:5a:42:55:38:b9:28:fd:58:d7:
40:ad:2a:79:ce:a1:90:f3:5e:37:3c:90:f2:73:32:6d:dd:1a:
62:e2:cf:ab:7c:62:c7:9f:b9:c4:76:f7:1d:ce:8b:61:98:f1:
6d:b7:81:a3:95:37:8a:44:90:29:c7:e3:09:e4:99:1f:b0:a3:
13:50:1d:0e:fe:fe:b8:b3:7b:60:77:78:aa:3d:2b:8e:15:e3:
cd:01:e8:da:c6:be:62:04:a7:00:b6:ab:ec:1c:86:30:ff:f6:
37:b4:35:44:77:a9:7d:56:ea:9e:29:1e:2c:02:80:19:28:70:
1c:ce:75:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:18 2026 by rpki-client