Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/omOIkUQB-zmqOTkf6AoePranFhs.roa
File: omOIkUQB-zmqOTkf6AoePranFhs.roa (raw, json)
Hash identifier: y1D2TurDR5SSMCMDBMYJgq8CTPaet7Qns9/ynfcmAsc=
Subject key identifier: A2:63:88:91:44:01:FB:39:AA:39:39:1F:E8:0A:1E:3E:B6:A7:16:1B
Certificate issuer: /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Certificate serial: 01A0116B1ECA6FCAB8E84B8F8C069A0E45DD
Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/omOIkUQB-zmqOTkf6AoePranFhs.roa
Signing time: Mon 17 Aug 2026 20:30:27 +0000
ROA not before: Mon 17 Aug 2026 20:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50576
IP address blocks: 2001:678:148::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 21:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:6b:1e:ca:6f:ca:b8:e8:4b:8f:8c:06:9a:0e:45:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Validity
Not Before: Aug 17 20:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26388914401fb39aa39391fe80a1e3eb6a7161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:10:0c:69:54:2a:60:83:92:48:87:eb:57:
48:39:37:ab:ba:98:a3:96:fb:6e:4c:2f:47:3f:2a:
7c:67:1c:fd:41:9a:21:15:d5:6f:91:eb:10:4e:46:
9c:e8:df:27:42:b8:38:97:e3:c1:76:62:0d:93:98:
c3:0c:3c:39:df:d3:66:52:a2:d9:c1:3a:f9:e1:60:
fb:e7:fc:1a:54:28:e3:95:28:e0:a4:b1:5f:62:cb:
56:34:e8:1b:d3:0f:0e:c3:51:a5:bb:0d:44:fe:ba:
37:eb:27:e0:bc:63:ce:4d:86:18:48:a5:24:fb:75:
b3:8c:b0:48:f7:3a:50:55:bf:12:1a:14:44:6e:ff:
ef:a6:c8:62:09:f6:72:08:4f:ed:b6:9e:14:b6:ab:
dc:fa:27:36:09:1a:9b:4a:cf:fd:89:85:ee:da:ab:
18:e5:7c:f0:bf:aa:63:3f:e1:80:3d:a8:ed:8c:56:
3d:86:f6:33:c1:68:e8:49:22:21:2f:ce:10:f5:9a:
f5:32:fe:bd:7b:b1:15:9b:e8:96:a4:17:7b:e1:26:
ed:90:89:35:ca:b1:0c:77:89:4e:00:bd:f5:78:12:
b4:0b:f5:fa:af:d6:2d:78:3a:ee:f9:9f:9c:ec:a7:
52:34:fb:d2:7a:4b:00:81:98:5e:bb:71:32:8c:5d:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:88:91:44:01:FB:39:AA:39:39:1F:E8:0A:1E:3E:B6:A7:16:1B
X509v3 Authority Key Identifier:
keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/omOIkUQB-zmqOTkf6AoePranFhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:148::/48
Signature Algorithm: sha256WithRSAEncryption
20:76:08:03:33:b8:72:9c:e4:3b:92:e7:f4:39:bd:22:c8:d7:
e0:84:27:e4:21:41:ee:8d:3b:c6:f8:5d:e4:83:d8:42:a2:db:
c5:05:8c:25:07:3f:28:dc:91:f8:00:1e:e1:f2:a1:b5:1d:e5:
54:bb:17:32:4d:29:50:f6:5e:fc:b5:69:38:87:af:1e:d8:64:
4f:4c:fd:79:af:4d:8c:04:da:79:eb:ca:af:72:a3:7a:41:6c:
a2:96:86:34:17:4a:5a:9f:9d:dd:66:dd:6a:36:bf:f5:eb:d6:
de:45:87:d2:4a:47:82:0e:cd:46:76:96:c9:c6:b3:73:37:78:
b6:40:b0:e3:aa:28:42:23:da:a1:37:ad:cc:8e:88:3d:bc:41:
36:d3:d6:a1:21:2c:5a:d1:c2:ce:7f:c8:ca:a4:bf:0e:74:1f:
78:4f:10:04:3d:5b:19:12:d9:89:21:63:f5:3b:eb:a5:b1:e9:
86:26:e7:c3:39:55:63:bb:7f:b0:f3:73:1a:e9:4b:9d:d1:54:
e7:dc:ee:16:96:a2:41:04:08:f1:02:d6:67:a5:8a:10:b0:f8:
25:54:3b:1b:ca:b0:5f:2b:96:35:b9:65:11:d0:f3:81:20:61:
58:20:dd:4d:40:4c:81:f0:42:af:96:ff:08:e5:ca:a8:54:fc:
a9:c6:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 05:09:48 2026 by rpki-client