Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/olMM-bZayk15NVNMQRnr5L5ha3E.roa
File: olMM-bZayk15NVNMQRnr5L5ha3E.roa (raw, json)
Hash identifier: BGtUHPufR6/y3womVBoB/y7s8kOSrfbGJGbIgB+B20o=
Subject key identifier: A2:53:0C:F9:B6:5A:CA:4D:79:35:53:4C:41:19:EB:E4:BE:61:6B:71
Certificate issuer: /CN=9735105f09bcd20f4ca47192d8712050b3821a05
Certificate serial: 019F2368B2E8491DFAA1FF0D6852C096BCDA
Authority key identifier: 97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/olMM-bZayk15NVNMQRnr5L5ha3E.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200795
IP address blocks: 195.149.123.0/24 maxlen: 24
2001:67c:d2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b2:e8:49:1d:fa:a1:ff:0d:68:52:c0:96:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735105f09bcd20f4ca47192d8712050b3821a05
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2530cf9b65aca4d7935534c4119ebe4be616b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3c:01:0d:6b:c9:5b:f9:47:69:6f:71:9d:c0:
23:f7:9f:da:88:dd:3f:55:61:95:4b:c2:95:6e:df:
4a:23:d5:d5:44:5b:d2:04:52:e2:41:d4:22:1f:4b:
5f:9b:90:4f:74:17:13:c1:6b:c6:c0:b1:67:9e:5b:
6f:52:13:44:b8:85:ad:e1:f5:ce:12:97:50:16:fe:
f1:eb:d0:26:2a:d9:08:37:a9:9d:db:c8:d1:c9:b5:
e3:84:85:3c:b7:db:d2:67:02:24:58:02:4f:7c:2e:
53:f5:96:9c:6a:c1:11:92:cc:6d:03:2c:c9:3c:54:
bf:7d:d6:18:15:59:b9:ef:52:55:3f:12:c9:9d:dd:
d4:28:e1:06:33:b5:65:c4:64:c9:e7:85:46:09:8d:
53:3d:7e:eb:de:6a:6a:76:54:50:ca:3e:c8:c9:2f:
a4:bf:34:4d:87:e5:f5:02:80:17:59:90:23:35:bb:
d8:17:cc:8c:64:33:4f:b0:c3:e5:f4:2f:0c:a3:fa:
25:37:22:2b:f1:5b:60:93:3f:fc:b9:5f:f5:04:5f:
38:43:35:7d:18:c2:15:ae:d2:a3:c6:f2:08:39:30:
78:f0:1c:d8:57:34:db:2a:7c:0c:b4:36:65:40:7e:
7a:2c:f6:6a:c9:1f:c7:fb:d9:aa:d5:e0:9f:bd:85:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:53:0C:F9:B6:5A:CA:4D:79:35:53:4C:41:19:EB:E4:BE:61:6B:71
X509v3 Authority Key Identifier:
keyid:97:35:10:5F:09:BC:D2:0F:4C:A4:71:92:D8:71:20:50:B3:82:1A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzUQXwm80g9MpHGS2HEgULOCGgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/olMM-bZayk15NVNMQRnr5L5ha3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/lzUQXwm80g9MpHGS2HEgULOCGgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.123.0/24
IPv6:
2001:67c:d2c::/48
Signature Algorithm: sha256WithRSAEncryption
38:2b:47:32:3d:05:7a:d3:03:db:70:85:6d:c9:34:9c:46:a8:
9e:44:76:67:70:96:01:43:14:03:82:b4:32:68:4a:d1:f4:9a:
b8:7b:0a:85:cf:43:00:a9:89:ec:c3:3c:b8:75:65:fc:1c:ff:
5e:c8:16:7d:0f:74:69:f5:a3:fb:c8:44:d6:1e:7a:e3:33:7a:
62:a5:bf:7b:dc:65:01:66:c2:85:2c:9c:ef:fa:98:53:84:d2:
08:d1:56:dc:9e:b8:77:1d:33:d0:d5:ea:2b:e0:19:92:12:11:
12:70:c9:e0:7f:fb:4e:fe:2e:79:6e:bd:c0:9d:9c:ec:5a:63:
c7:f9:7d:13:02:c6:15:b9:18:d9:5f:13:18:f9:40:fb:bd:b9:
9a:28:ea:50:3d:a8:8c:d2:1f:87:37:8b:ed:dc:ca:c9:24:08:
f3:16:dc:37:e9:45:5d:ba:eb:e0:4b:b1:7f:2c:c2:35:cc:d5:
a9:04:a4:79:4a:fc:f0:27:57:08:e3:b7:d0:64:ad:ba:ab:22:
d0:e4:31:b7:bd:c8:58:11:e8:13:88:8d:5f:0f:be:ca:dc:af:
13:9d:ad:d9:85:2d:3d:eb:dc:23:fa:0a:af:b1:3d:50:4d:f8:
a1:da:54:42:f2:5b:fb:6a:60:7a:3f:46:09:f1:f7:d4:67:00:
a6:07:a7:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaLLoSR36of8NaFLAlrzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzUxMDVmMDliY2QyMGY0Y2E0NzE5MmQ4NzEyMDUwYjM4
MjFhMDUwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjUzMGNmOWI2NWFjYTRkNzkzNTUzNGM0MTE5ZWJlNGJlNjE2YjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DwBDWvJW/lHaW9xncAj95/aiN0/
VWGVS8KVbt9KI9XVRFvSBFLiQdQiH0tfm5BPdBcTwWvGwLFnnltvUhNEuIWt4fXO
EpdQFv7x69AmKtkIN6md28jRybXjhIU8t9vSZwIkWAJPfC5T9ZacasERksxtAyzJ
PFS/fdYYFVm571JVPxLJnd3UKOEGM7VlxGTJ54VGCY1TPX7r3mpqdlRQyj7IyS+k
vzRNh+X1AoAXWZAjNbvYF8yMZDNPsMPl9C8Mo/olNyIr8Vtgkz/8uV/1BF84QzV9
GMIVrtKjxvIIOTB48BzYVzTbKnwMtDZlQH56LPZqyR/H+9mq1eCfvYWnZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKJTDPm2WspNeTVTTEEZ6+S+YWtxMB8GA1UdIwQY
MBaAFJc1EF8JvNIPTKRxkthxIFCzghoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpVUVh3bTgwZzlNcEhHUzJIRWdVTE9DR2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgt
M2ZiZGQ5ZGJiZDkyLzEvb2xNTS1iWmF5azE1TlZOTVFSbnI1TDVoYTNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgtM2ZiZGQ5ZGJiZDky
LzEvbHpVUVh3bTgwZzlNcEhHUzJIRWdVTE9DR2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw5V7MA8E
AgACMAkDBwAgAQZ8DSwwDQYJKoZIhvcNAQELBQADggEBADgrRzI9BXrTA9twhW3J
NJxGqJ5EdmdwlgFDFAOCtDJoStH0mrh7CoXPQwCpiezDPLh1Zfwc/17IFn0PdGn1
o/vIRNYeeuMzemKlv3vcZQFmwoUsnO/6mFOE0gjRVtyeuHcdM9DV6ivgGZISERJw
yeB/+07+LnluvcCdnOxaY8f5fRMCxhW5GNlfExj5QPu9uZoo6lA9qIzSH4c3i+3c
yskkCPMW3DfpRV266+BLsX8swjXM1akEpHlK/PAnVwjjt9BkrbqrItDkMbe9yFgR
6BOIjV8PvsrcrxOdrdmFLT3r3CP6Cq+xPVBN+KHaVELyW/tqYHo/Rgnx99RnAKYH
p34=
-----END CERTIFICATE-----
Generated at Sun Jul 12 06:44:11 2026 by rpki-client