Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/omwuLvZPG_OI5FuAKOGoVvhHAhY.roa
File: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (raw, json)
Hash identifier: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=
Subject key identifier: A2:6C:2E:2E:F6:4F:1B:F3:88:E4:5B:80:28:E1:A8:56:F8:47:02:16
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 019F2368C36BF3304C10A0C64C59BFBF36F6
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/omwuLvZPG_OI5FuAKOGoVvhHAhY.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59432
IP address blocks: 5.134.112.0/21 maxlen: 21
5.134.112.0/24 maxlen: 24
5.134.113.0/24 maxlen: 24
5.134.114.0/24 maxlen: 24
5.134.115.0/24 maxlen: 24
5.134.116.0/24 maxlen: 24
5.134.117.0/24 maxlen: 24
5.134.118.0/24 maxlen: 24
5.134.119.0/24 maxlen: 24
185.47.128.0/22 maxlen: 22
185.47.128.0/24 maxlen: 24
185.47.129.0/24 maxlen: 24
185.47.130.0/24 maxlen: 24
185.47.131.0/24 maxlen: 24
188.213.4.0/22 maxlen: 22
188.213.4.0/24 maxlen: 24
188.213.5.0/24 maxlen: 24
188.213.6.0/24 maxlen: 24
188.213.7.0/24 maxlen: 24
2a03:c7c0::/32 maxlen: 32
2a03:c7c1::/32 maxlen: 32
2a03:c7c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c3:6b:f3:30:4c:10:a0:c6:4c:59:bf:bf:36:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26c2e2ef64f1bf388e45b8028e1a856f8470216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:88:d2:64:35:12:bb:35:79:66:e7:15:ad:
32:b2:f0:da:d1:91:d7:a5:bd:ce:da:c4:1d:36:4b:
38:54:38:61:f2:94:0c:8e:0c:6d:df:b3:14:29:7d:
33:c1:4c:84:10:dd:e5:bd:5a:47:86:d1:5b:66:ee:
ac:f6:57:32:de:04:70:cc:2c:cb:b5:88:de:93:ec:
17:66:21:46:95:7d:ad:e2:a9:99:36:2b:a4:c3:02:
62:f1:12:b2:2d:42:92:87:ee:1f:82:4a:2f:59:61:
4f:ea:1e:48:b1:ae:99:5a:51:85:d4:d1:86:a5:4b:
3d:d9:2f:d0:f3:a4:67:f7:a9:3e:a8:49:00:6e:db:
56:1b:95:60:fc:11:a8:f9:e1:f3:36:2c:41:19:81:
b6:d3:46:44:57:0f:f7:2e:38:33:8d:b6:3f:76:79:
5b:ab:f9:6c:0e:a2:32:6d:ad:05:52:5f:4f:ff:0f:
f7:61:58:0b:cc:1f:8e:37:28:c4:67:f5:ba:dd:2a:
6a:76:d3:63:8f:0e:46:b9:4d:78:23:05:b0:55:1f:
3a:00:7f:36:ad:a6:bb:07:8b:4e:71:6f:0d:2c:c2:
94:84:08:16:24:38:f8:3e:73:dc:0f:dd:5f:98:84:
98:d3:8c:2f:2a:5b:2e:34:3b:d9:e0:dc:67:e4:25:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:2E:2E:F6:4F:1B:F3:88:E4:5B:80:28:E1:A8:56:F8:47:02:16
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/omwuLvZPG_OI5FuAKOGoVvhHAhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.112.0/21
185.47.128.0/22
188.213.4.0/22
IPv6:
2a03:c7c0::-2a03:c7c2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:13:fa:22:95:84:17:4c:1a:49:71:ac:30:16:45:6a:68:6d:
ac:e9:03:fd:a3:f1:fd:14:9e:46:16:4a:87:e0:01:7f:01:f5:
b8:5f:09:91:a4:3b:c8:e3:5a:68:e6:35:0d:7e:ea:eb:f3:35:
8f:41:d6:6c:c6:b0:3d:0e:76:20:42:4b:26:50:9c:4b:ba:b5:
66:76:88:11:ed:d5:3b:2f:8a:02:a4:3a:2e:fe:d1:63:7f:e5:
b0:2a:37:c0:45:29:7e:19:c2:8b:84:fb:bf:e4:f4:d2:8f:a1:
20:06:12:63:93:50:7a:15:bb:b4:fd:db:10:4f:27:8b:4d:e4:
09:7a:09:7d:36:d6:fe:a4:16:2b:be:e1:37:63:15:99:6c:5b:
72:71:27:e3:65:11:7d:fd:63:6b:e9:c6:ff:bd:33:b6:eb:2c:
06:f9:d7:5e:58:a4:57:5a:18:2b:a3:00:ca:13:66:6e:c6:ad:
93:33:d1:67:03:d7:c8:06:81:55:ff:55:ee:ea:79:7f:dc:8e:
02:f9:cd:ee:81:10:50:92:78:00:be:20:56:15:d8:b4:86:36:
5d:2a:5c:c6:3e:41:71:86:c8:6d:f2:0e:73:9b:bc:4f:37:77:
fb:9c:a8:4e:3d:67:2e:8d:ee:9c:ca:64:3e:f4:d1:8e:dc:64:
1d:f8:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client