Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/OZM-Dw3YxN4NNmcVHOuA1QZj9EI.roa
File: OZM-Dw3YxN4NNmcVHOuA1QZj9EI.roa (raw, json)
Hash identifier: V384BuzGcR3DrUaN6RcZVJEhoLSK6/AilQbM62FZlXk=
Subject key identifier: 39:93:3E:0F:0D:D8:C4:DE:0D:36:67:15:1C:EB:80:D5:06:63:F4:42
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 019ECFE95ABA385172DBEDEBC98AD732513F
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/OZM-Dw3YxN4NNmcVHOuA1QZj9EI.roa
Signing time: Tue 16 Jun 2026 10:10:37 +0000
ROA not before: Tue 16 Jun 2026 10:10:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197421
IP address blocks: 87.236.149.0/24 maxlen: 24
91.217.133.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:e9:5a:ba:38:51:72:db:ed:eb:c9:8a:d7:32:51:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Jun 16 10:10:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39933e0f0dd8c4de0d3667151ceb80d50663f442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:d9:d2:b5:5d:79:84:51:9b:00:02:ea:11:
36:e8:6f:fb:d1:9c:db:bf:2f:b5:71:a1:ba:f1:6f:
2a:c3:0e:dd:48:75:c2:8f:cf:14:34:5b:4c:02:e8:
20:29:d9:12:3a:a4:18:19:06:c3:83:fa:11:18:82:
01:c8:4a:80:41:ed:dc:e4:1d:c2:a1:87:ef:21:69:
23:da:24:23:0d:e5:b7:1f:61:22:ee:a3:4f:aa:52:
75:a2:d5:ff:f0:2d:df:ff:16:4b:34:5d:f5:4a:49:
32:ea:9b:44:df:7f:bb:89:1f:85:fc:67:b0:61:5c:
19:b0:d0:bf:76:6c:50:6c:96:7f:41:99:9d:67:4b:
bf:9e:c0:5a:54:bd:80:46:f5:7a:e9:41:7a:0e:ca:
eb:a1:10:3d:4a:65:16:0e:fc:02:fb:c9:8f:97:17:
4a:8f:04:d1:7d:cd:0a:1d:81:8c:40:a7:36:62:56:
ea:54:66:7e:0d:1d:5b:f5:0f:4d:8d:c7:39:6a:db:
a3:0e:06:79:f8:3d:23:3d:17:9d:d1:04:40:41:3e:
ce:eb:18:7b:ad:ec:c0:80:59:01:fa:78:6b:03:c5:
f3:a0:a7:68:4e:02:41:9d:d5:70:65:57:30:d8:3d:
66:ca:2e:56:a5:ac:fb:84:6f:01:52:a7:a0:37:92:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:3E:0F:0D:D8:C4:DE:0D:36:67:15:1C:EB:80:D5:06:63:F4:42
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/OZM-Dw3YxN4NNmcVHOuA1QZj9EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
91.217.133.0/24
195.69.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3a:98:37:92:5a:d5:e7:1e:b9:ab:f8:99:65:1b:f5:60:7c:
49:6f:ac:67:05:55:78:76:82:60:08:1a:86:46:7d:3e:6b:2a:
71:9f:45:e5:43:ed:da:db:39:1a:c1:de:fb:9e:4c:4c:4d:33:
01:35:20:f0:c4:51:ff:c3:d9:73:fb:23:8d:a9:ec:47:da:71:
18:f0:03:34:f2:5c:c1:90:32:6d:2a:cb:d7:28:cf:fb:d3:b9:
ee:56:08:85:ea:48:6f:ec:f4:20:b5:78:93:24:4d:06:e4:cf:
6d:d2:89:83:f1:3d:47:02:ae:29:4c:58:86:d0:e9:50:22:b4:
41:34:2b:8f:69:f6:93:0f:fb:62:fe:38:aa:01:42:5b:6a:9c:
d6:0c:30:c9:64:8e:60:27:f5:02:0c:d3:2d:55:74:93:4b:27:
94:de:d5:94:8c:f2:1e:60:80:16:a8:da:89:87:d5:85:d3:65:
53:72:9a:81:0d:ce:21:01:34:66:a3:62:87:be:71:bc:8e:9e:
0d:e7:93:e5:b3:e6:fd:e7:9f:72:b7:76:f1:04:07:14:c5:c6:
35:27:7a:3a:ee:69:30:c1:8a:6f:16:44:ce:6c:83:1a:73:52:
10:8f:cf:60:46:3b:19:60:a6:4d:36:ae:01:f6:9e:97:ec:70:
9e:d5:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:20:10 2026 by rpki-client