Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/OmEUp-3epX_KUifqGg6OagsyLUI.roa
File: OmEUp-3epX_KUifqGg6OagsyLUI.roa (raw, json)
Hash identifier: wX4E8X9J3RZD1t+7aNfaKdNYFXjEujR+Op2mKH/JxaE=
Subject key identifier: 3A:61:14:A7:ED:DE:A5:7F:CA:52:27:EA:1A:0E:8E:6A:0B:32:2D:42
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019ED07F7C86B8B916EBA5F4ED2749348671
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/OmEUp-3epX_KUifqGg6OagsyLUI.roa
Signing time: Tue 16 Jun 2026 12:54:36 +0000
ROA not before: Tue 16 Jun 2026 12:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200107
IP address blocks: 37.203.128.0/23 maxlen: 24
37.203.128.0/24 maxlen: 24
37.203.129.0/24 maxlen: 24
77.74.176.0/23 maxlen: 24
77.74.176.0/24 maxlen: 24
77.74.177.0/24 maxlen: 24
77.74.178.0/23 maxlen: 24
77.74.178.0/24 maxlen: 24
77.74.180.0/24 maxlen: 24
77.74.181.0/24 maxlen: 24
77.74.182.0/24 maxlen: 24
77.74.183.0/24 maxlen: 24
79.133.168.0/22 maxlen: 24
79.133.168.0/23 maxlen: 23
79.133.168.0/24 maxlen: 24
79.133.169.0/24 maxlen: 24
79.133.170.0/23 maxlen: 23
79.133.170.0/24 maxlen: 24
79.133.171.0/24 maxlen: 24
82.202.184.0/23 maxlen: 23
82.202.184.0/24 maxlen: 24
82.202.185.0/24 maxlen: 24
91.198.230.0/24 maxlen: 24
93.159.226.0/24 maxlen: 24
93.159.227.0/24 maxlen: 24
93.159.228.0/23 maxlen: 24
93.159.228.0/24 maxlen: 24
93.159.230.0/23 maxlen: 23
185.54.220.0/24 maxlen: 24
185.54.221.0/24 maxlen: 24
185.54.222.0/24 maxlen: 24
185.54.223.0/24 maxlen: 24
185.85.12.0/24 maxlen: 24
185.85.14.0/24 maxlen: 24
185.85.15.0/24 maxlen: 24
185.201.0.0/22 maxlen: 24
185.201.0.0/24 maxlen: 24
185.201.2.0/24 maxlen: 24
185.201.3.0/24 maxlen: 24
193.238.132.0/23 maxlen: 24
193.238.133.0/24 maxlen: 24
195.128.246.0/23 maxlen: 24
195.128.246.0/24 maxlen: 24
195.128.247.0/24 maxlen: 24
2a03:2480:68::/48 maxlen: 48
2a03:2480:69::/48 maxlen: 48
2a03:2480:70::/48 maxlen: 48
2a03:2480:80::/48 maxlen: 48
2a03:2480:8000::/48 maxlen: 48
2a03:2480:8010::/48 maxlen: 48
2a03:2480:8012::/47 maxlen: 48
2a03:2480:8012::/48 maxlen: 48
2a03:2480:8013::/48 maxlen: 48
2a03:2480:8020::/48 maxlen: 48
2a03:2480:8021::/48 maxlen: 48
2a03:2480:8022::/48 maxlen: 48
2a03:2480:8023::/48 maxlen: 48
2a03:2480:8025::/48 maxlen: 48
2a03:2480:8026::/48 maxlen: 48
2a03:2480:8027::/48 maxlen: 48
2a03:2480:8028::/48 maxlen: 48
2a03:2480:8029::/48 maxlen: 48
2a03:2480:802a::/48 maxlen: 48
2a03:2480:802b::/48 maxlen: 48
2a03:2480:802d::/48 maxlen: 48
2a03:2480:802e::/48 maxlen: 48
2a03:2480:802f::/48 maxlen: 48
2a03:2480:8030::/48 maxlen: 48
2a03:2480:8031::/48 maxlen: 48
2a03:2480:8032::/48 maxlen: 48
2a03:2480:8033::/48 maxlen: 48
2a03:2480:8034::/47 maxlen: 48
2a03:2480:8034::/48 maxlen: 48
2a03:2480:8035::/48 maxlen: 48
2a03:2480:8036::/47 maxlen: 48
2a03:2480:8036::/48 maxlen: 48
2a03:2480:8037::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:7f:7c:86:b8:b9:16:eb:a5:f4:ed:27:49:34:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jun 16 12:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a6114a7eddea57fca5227ea1a0e8e6a0b322d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:cd:19:2b:17:08:fb:d5:62:48:87:5b:54:
e0:33:68:fe:f6:4c:26:29:10:1f:e1:e9:f4:e0:90:
41:49:77:d4:aa:01:dc:d2:07:ce:4b:e5:6e:5a:a4:
f1:96:fa:57:a5:d4:28:54:7c:18:bf:b4:84:6a:8d:
f0:ad:1e:65:c9:01:d3:aa:7b:82:35:d8:e9:e9:1a:
fa:53:89:9b:16:b4:48:d1:8e:d4:0c:a6:fc:76:8a:
ec:c1:b2:c2:a1:68:59:3e:90:b3:29:de:88:20:ed:
9d:f1:53:15:97:fb:eb:ee:f3:ce:a8:1b:b8:2f:cc:
1b:a6:19:c4:ae:f0:24:31:1e:7c:a0:7e:18:d5:36:
66:80:e9:89:f7:dc:ae:9d:64:76:57:be:9b:50:90:
7c:31:e8:e7:5f:7a:e4:8d:a2:20:24:8e:d2:51:a6:
4c:46:90:7e:ce:7e:9f:8e:97:b1:51:11:51:3e:c0:
7b:b9:d5:4f:ca:fa:e7:b4:a5:fe:f8:18:96:4f:0b:
d3:06:ec:30:74:87:73:10:3c:8a:32:1f:14:18:5e:
d1:cd:a7:27:07:21:94:01:6a:54:88:1f:cc:cc:f8:
1e:8f:cd:fd:cb:e2:7d:90:96:7a:cd:1c:f5:b5:75:
30:ca:33:f1:82:ab:8f:e3:b1:38:dd:ae:74:91:4c:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:14:A7:ED:DE:A5:7F:CA:52:27:EA:1A:0E:8E:6A:0B:32:2D:42
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/OmEUp-3epX_KUifqGg6OagsyLUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.128.0/23
77.74.176.0/21
79.133.168.0/22
82.202.184.0/23
91.198.230.0/24
93.159.226.0-93.159.231.255
185.54.220.0/22
185.85.12.0/24
185.85.14.0/23
185.201.0.0/22
193.238.132.0/23
195.128.246.0/23
IPv6:
2a03:2480:68::/47
2a03:2480:70::/48
2a03:2480:80::/48
2a03:2480:8000::/48
2a03:2480:8010::/48
2a03:2480:8012::/47
2a03:2480:8020::/46
2a03:2480:8025::-2a03:2480:802b:ffff:ffff:ffff:ffff:ffff
2a03:2480:802d::-2a03:2480:8037:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
97:11:1d:31:c2:e5:02:bd:20:19:e1:b0:83:a6:94:83:f6:36:
50:0a:2a:11:26:80:26:9f:a9:6e:d3:a3:bc:45:2c:d8:fa:0c:
e9:47:aa:41:4b:da:4f:0e:a4:be:3e:91:75:d5:a7:19:32:0c:
65:b0:2d:00:e6:e2:0a:8b:93:b7:ad:db:bc:26:a1:90:a2:2c:
45:34:e3:dd:60:7f:bd:d7:44:70:87:6a:99:9d:ec:23:a2:08:
00:93:c6:55:23:0d:f3:d1:b4:6c:c2:b7:7d:76:18:63:09:c9:
4e:dc:76:b9:7f:c0:9b:87:28:59:19:40:8b:04:d2:f3:f7:f1:
00:7b:78:b4:30:15:0e:dc:83:ca:f0:ae:c7:d1:d1:8e:6f:b0:
75:82:3f:d7:d1:09:b7:07:aa:9d:4e:b4:a7:8a:0d:d9:f4:7d:
ef:a4:5a:ee:7a:ad:ac:c5:99:89:3f:34:c7:ca:28:84:05:0b:
be:5f:a2:a2:3e:e9:59:e9:87:fb:ef:d4:c1:0a:17:a6:ac:a0:
f5:d4:73:a6:64:6f:f9:3d:e1:33:2f:ab:10:43:7a:4e:54:24:
12:83:80:a7:94:bf:2c:7a:81:e8:17:90:84:34:12:b7:2d:98:
b8:58:1c:a8:f8:2f:31:20:4c:a3:38:ad:86:2e:0e:52:ba:0c:
f8:81:e1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:52:39 2026 by rpki-client