Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/oOmbkC5D-wZzaSGM13aH5qyv4lg.roa
File: oOmbkC5D-wZzaSGM13aH5qyv4lg.roa (raw, json)
Hash identifier: 9E7IB0dUmpBxCN4cYMqYAqCZ1dgQcZGPWm9h6mPiBMA=
Subject key identifier: A0:E9:9B:90:2E:43:FB:06:73:69:21:8C:D7:76:87:E6:AC:AF:E2:58
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823C3095EC0B7F02266A7B2D76649D
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/oOmbkC5D-wZzaSGM13aH5qyv4lg.roa
Signing time: Tue 25 Aug 2026 15:20:31 +0000
ROA not before: Tue 25 Aug 2026 15:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48976
IP address blocks: 84.54.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3c:30:95:ec:0b:7f:02:26:6a:7b:2d:76:64:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0e99b902e43fb067369218cd77687e6acafe258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:a1:24:75:db:2e:b8:d3:77:64:28:3c:9f:
3b:a4:01:dc:0b:af:4f:86:54:cb:6e:7f:38:0a:ae:
94:1b:3e:5a:04:2b:d2:90:ee:76:f0:6d:c5:96:f6:
76:6c:8e:a2:9f:42:6c:9d:2e:b5:a7:62:49:2c:e5:
6b:9c:58:5d:0c:61:ce:f1:30:ea:e3:b4:b8:c0:85:
1c:8e:5f:d1:12:57:57:5b:69:dc:67:23:d9:21:c7:
d9:1b:da:21:ae:3d:b4:af:4d:0a:73:59:66:40:d5:
de:7e:c4:c3:a6:47:b5:9d:7f:82:a7:84:de:ba:75:
14:37:1f:fa:47:13:68:d2:2c:5b:1d:b3:f2:04:77:
f8:2c:23:5a:29:04:57:52:e3:66:b4:56:b5:dc:81:
0e:fa:cb:cc:22:9f:ab:e5:2c:aa:33:7e:93:e2:b5:
4f:4b:e0:89:0d:b0:e2:18:a7:cb:01:17:06:81:99:
51:22:26:fc:87:fa:2e:63:44:6d:a2:90:88:2c:56:
e8:3d:f7:93:1d:ab:89:ce:ed:b0:a3:2f:9f:24:e3:
c8:c0:22:4a:cf:6c:80:e2:3e:e5:b6:47:84:3d:ef:
b8:cc:9f:09:16:7e:52:20:be:04:66:90:39:a8:87:
22:22:24:b0:ff:2d:ff:77:6e:9b:bc:d9:8a:92:cf:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E9:9B:90:2E:43:FB:06:73:69:21:8C:D7:76:87:E6:AC:AF:E2:58
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/oOmbkC5D-wZzaSGM13aH5qyv4lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:cb:4c:ed:84:fb:af:e8:23:9c:30:a0:64:63:d2:41:ff:86:
f3:a2:e5:92:e8:14:16:64:b1:53:29:43:43:95:b7:e8:c9:76:
e5:fa:90:13:25:ea:5c:cf:f9:32:c1:77:ea:b7:6c:6b:d0:21:
02:3e:70:cf:50:01:0b:1d:e8:d2:05:3b:bf:11:a5:43:37:79:
1e:47:ed:0b:c5:85:f6:ae:04:0b:03:cc:08:5f:52:39:b7:ff:
4e:1d:33:dd:3e:c8:4f:66:6a:ad:5d:38:66:78:d8:5d:6c:5d:
94:1c:fd:31:4d:a6:a1:e5:85:21:de:11:ff:cb:c7:8c:a3:2d:
d6:b5:1c:b5:fb:f9:9f:cd:22:85:c0:4e:ca:20:56:6c:cb:90:
4e:6e:e8:0d:eb:a5:ad:cf:2a:7b:42:cf:e8:f6:a4:4d:30:3e:
35:58:d2:6b:47:25:94:f8:b0:3b:f4:6e:91:41:4c:8b:2c:ff:
99:f9:66:3b:41:65:df:92:71:01:5e:0e:01:43:6a:7a:e2:db:
81:26:f7:47:81:08:6d:5e:7e:f7:3d:c6:2c:0c:bd:21:8c:33:
dc:92:f1:9c:d8:25:3e:7a:29:53:ae:b7:0a:96:61:16:4b:68:
74:93:f2:75:60:24:2c:b8:43:f4:30:2c:24:52:9a:4f:fc:f8:
33:c5:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:05 2026 by rpki-client