Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/om3lAZ8K9EnAbuiTJY6OQwQkM98.roa
File: om3lAZ8K9EnAbuiTJY6OQwQkM98.roa (raw, json)
Hash identifier: 9B30uRdRTuKMmK5CYYWo9dOGJni+gxSC0DKr8FUY48w=
Subject key identifier: A2:6D:E5:01:9F:0A:F4:49:C0:6E:E8:93:25:8E:8E:43:04:24:33:DF
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A0F148DDE142ED806733C702C763A6062D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/om3lAZ8K9EnAbuiTJY6OQwQkM98.roa
Signing time: Wed 30 Sep 2026 07:47:59 +0000
ROA not before: Wed 30 Sep 2026 07:47:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 80.71.226.0/24 maxlen: 24
81.29.146.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:48:dd:e1:42:ed:80:67:33:c7:02:c7:63:a6:06:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 30 07:47:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26de5019f0af449c06ee893258e8e43042433df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:78:8c:5e:2c:14:f8:54:20:09:ac:3d:b3:
56:87:f8:f6:f0:81:ee:5a:d3:9b:88:27:85:33:4d:
e6:ac:fa:02:27:d6:87:ae:99:ef:8b:39:21:6c:a6:
0e:0d:e7:dd:87:5a:d1:96:f7:ba:6c:81:fb:b8:a5:
4f:ac:e0:cf:72:aa:f9:29:76:2f:e1:f7:a2:4c:2f:
b2:32:40:3e:ee:05:46:39:68:e8:fd:05:83:4f:a3:
f8:b3:af:31:bf:4b:45:6a:6f:85:af:03:28:4e:54:
3d:03:74:f3:4e:cf:be:b3:f5:47:78:c1:b0:43:8e:
58:fb:2b:f2:7b:ea:db:cc:e0:77:65:3f:9c:f3:28:
4e:98:fe:ee:3e:af:5e:28:62:36:04:c5:14:66:06:
3b:7c:dc:ef:80:23:a9:e5:97:02:7e:88:2d:ba:bf:
91:f2:d2:74:35:e5:8e:81:b9:3e:a5:a9:25:64:07:
fc:35:47:2c:44:95:e1:19:5f:66:25:38:5c:06:60:
b4:60:dc:83:1f:a6:1b:aa:a9:4d:96:c5:3b:9b:6e:
0f:d3:cb:d0:88:86:90:47:79:56:b1:a7:85:d1:27:
0d:b5:d4:20:bf:74:70:23:c9:01:58:8d:d5:a5:51:
29:91:02:e7:7c:94:29:eb:d0:43:16:4e:df:ea:7c:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:E5:01:9F:0A:F4:49:C0:6E:E8:93:25:8E:8E:43:04:24:33:DF
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/om3lAZ8K9EnAbuiTJY6OQwQkM98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.226.0/24
81.29.146.0/23
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bc:2d:6a:ef:1f:40:f1:d0:6c:9f:c6:a8:69:ac:c1:6b:01:
b5:46:30:33:b9:99:6e:fd:ac:e8:ab:a9:16:a8:49:0c:30:52:
4f:e2:e1:76:36:bc:62:cc:17:db:0f:24:b7:d7:d6:3b:e1:ae:
53:05:4d:90:a6:d4:15:4a:43:04:fd:f7:c5:9e:dd:9e:6f:0b:
37:6f:eb:62:1b:cb:6a:63:7e:de:8e:8f:b2:67:c3:8f:b8:f7:
ad:aa:5d:d2:de:51:a4:39:ef:ba:70:0a:1c:97:d4:f6:f4:8c:
46:dc:a5:2b:5a:b4:94:2d:f6:a6:26:51:c3:01:a1:c0:a3:ae:
e9:9b:c1:99:54:fa:24:6e:0c:32:ce:b6:37:78:aa:39:ac:ba:
2a:c4:d8:ae:6e:16:7f:a3:8a:d1:b5:35:aa:8b:fa:09:13:f0:
74:f1:f5:8c:a2:8c:fd:af:69:3d:be:76:2f:79:70:10:a6:58:
59:1b:fb:b4:6c:ce:e4:58:5a:d2:a3:1e:67:93:bb:eb:b1:12:
c0:19:47:71:e7:37:05:fe:89:c5:ab:4e:54:f2:64:79:c8:82:
33:a2:b4:95:29:2b:a2:b4:9e:9f:19:f3:bb:37:d6:44:c2:56:
73:7c:71:92:fe:3f:86:48:e3:65:1e:e2:bf:7e:46:75:57:35:
45:11:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:22 2026 by rpki-client