Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OmgLPppXUwvGxXDgBkDTWJ3K7ko.roa
File: OmgLPppXUwvGxXDgBkDTWJ3K7ko.roa (raw, json)
Hash identifier: Cx0Ak/a7OHaMHxRRKBlJKViTuwIu0xdSoMy5G3M7cJ4=
Subject key identifier: 3A:68:0B:3E:9A:57:53:0B:C6:C5:70:E0:06:40:D3:58:9D:CA:EE:4A
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691A98A7EEF68CE23D0E6000D39BFE
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OmgLPppXUwvGxXDgBkDTWJ3K7ko.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210998
IP address blocks: 194.6.177.0/24 maxlen: 24
217.193.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:98:a7:ee:f6:8c:e2:3d:0e:60:00:d3:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a680b3e9a57530bc6c570e00640d3589dcaee4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:49:a0:57:4a:88:a7:32:a6:12:a1:15:81:
0b:5a:1f:22:2b:a5:c4:9b:4b:9c:3c:e6:e6:24:30:
c0:15:37:cf:fe:cb:7e:3d:e8:a1:f7:b6:e5:c1:c7:
84:a2:78:ab:7f:82:a0:72:91:7b:01:48:c7:03:6c:
0d:99:1c:80:67:22:68:8b:63:59:78:ab:42:ff:d5:
00:22:6d:bc:a0:a2:1f:f8:7b:ed:bb:3e:b7:d5:46:
4f:df:93:98:51:07:03:a8:e7:6b:ab:96:86:42:95:
63:7f:dd:90:ff:ec:6d:9f:b9:05:1d:8a:0a:62:a0:
29:03:5f:09:ca:04:1e:d4:1e:6f:b6:ec:a9:b0:59:
e7:f0:3a:d3:00:28:be:91:05:08:3b:6f:90:cc:3a:
ca:2f:57:53:24:f7:dd:22:f2:90:95:88:0e:93:78:
93:6e:12:5d:4f:9c:45:17:ad:86:85:43:39:1e:f6:
6d:06:7f:5f:bf:89:78:10:79:05:21:33:e6:bc:06:
67:c1:54:4a:87:d4:84:57:ee:fa:27:9b:b1:b4:c0:
15:c8:7f:62:fd:16:cf:2d:b1:91:9d:69:2f:c1:3c:
14:64:ad:3f:89:5c:08:25:b2:78:fb:cf:66:1a:3a:
32:38:ab:b5:d9:0f:a6:7d:06:d9:42:2e:66:47:db:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:0B:3E:9A:57:53:0B:C6:C5:70:E0:06:40:D3:58:9D:CA:EE:4A
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OmgLPppXUwvGxXDgBkDTWJ3K7ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.177.0/24
217.193.221.0/24
Signature Algorithm: sha256WithRSAEncryption
21:22:9b:7a:4c:0e:80:c7:a7:14:80:df:9b:db:c9:be:c3:02:
ca:20:25:91:e0:ea:f5:49:5a:d8:b8:2a:69:5a:1e:1c:df:f1:
41:27:01:e3:b7:d9:17:f4:cb:19:e6:13:9a:43:3c:38:ff:08:
3e:b0:a5:30:ec:47:2c:a5:6a:ea:f0:06:1a:08:39:72:cb:81:
9d:9b:2a:0d:da:80:01:96:ab:67:75:8e:c7:0b:86:78:57:25:
f3:71:cd:7c:6c:79:9a:d9:62:86:0a:e6:3b:42:53:3b:55:16:
c4:39:24:06:92:9b:bd:d8:77:f2:2c:18:ca:a6:04:90:15:78:
57:17:e6:a2:45:f4:cd:8e:99:59:ef:80:a4:fe:ac:c5:08:26:
e2:f5:0b:4a:25:f0:23:27:fd:d4:79:dd:cd:dc:3e:ff:32:16:
20:47:c7:40:72:1b:a2:75:1e:d1:31:1d:43:f1:da:15:98:39:
40:cf:88:76:37:5b:85:19:a7:37:07:f3:97:1e:15:0d:bd:00:
86:1f:f9:82:f3:49:d1:0e:90:c7:72:0d:6d:3b:69:ae:bb:2b:
69:29:55:89:2d:26:bb:36:ea:34:b9:82:12:3f:a5:f0:27:f0:
e7:90:0a:40:14:ba:b8:6c:66:e4:d0:ca:50:5f:8c:82:9d:43:
d9:93:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:14 2026 by rpki-client