Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/2OM9F-ynYI7nKV68vz7MKBmoAcA.roa
File: 2OM9F-ynYI7nKV68vz7MKBmoAcA.roa (raw, json)
Hash identifier: p55w46f06nkZCeBDXOOnXNkrx6MfMkBzLizXi7yr8Fo=
Subject key identifier: D8:E3:3D:17:EC:A7:60:8E:E7:29:5E:BC:BF:3E:CC:28:19:A8:01:C0
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F2369217FF150A47015811991914B8B3C
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/2OM9F-ynYI7nKV68vz7MKBmoAcA.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59511
IP address blocks: 94.177.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:21:7f:f1:50:a4:70:15:81:19:91:91:4b:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8e33d17eca7608ee7295ebcbf3ecc2819a801c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:e7:7c:78:d7:ea:0b:45:f2:a9:b4:b2:a7:
18:f9:0e:42:0b:ee:4c:6b:44:20:f0:ce:49:0e:b3:
35:ac:f1:98:69:ba:a9:a8:82:90:4a:79:91:57:b7:
c7:59:87:14:51:b0:4b:be:e3:eb:71:aa:1a:0a:9a:
a4:6b:bf:83:5c:16:c0:61:2f:20:94:6b:24:cc:23:
33:a4:0a:5c:30:0b:2e:e2:a6:7e:6b:3a:be:f2:42:
05:5f:12:72:73:b1:c6:99:6a:38:63:a2:1a:aa:95:
ff:9d:40:8f:25:df:a6:be:b6:b4:a6:b5:2d:4c:9a:
a8:af:7c:0b:2f:c5:5b:62:81:bf:0d:28:5f:e0:3b:
ee:56:d7:86:52:df:94:88:96:4d:72:d4:aa:a1:5c:
ba:34:63:d6:ee:26:24:cc:a0:0d:19:9f:a0:32:28:
ae:3b:4a:89:3f:d1:37:93:3a:66:43:cf:6b:bf:d7:
12:3e:fa:a6:5d:0e:2f:a8:28:f0:39:69:be:a2:b9:
f4:ab:75:2a:10:e8:c3:88:e2:79:d7:3b:99:40:d2:
bf:b4:6e:c5:6f:23:a4:1d:d2:7d:cc:be:24:a6:65:
f1:b7:8a:36:e2:40:9e:97:a9:79:b4:6a:0f:c6:aa:
d0:c0:b6:e8:ba:8e:90:10:c4:42:fd:a3:ea:b7:fa:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:3D:17:EC:A7:60:8E:E7:29:5E:BC:BF:3E:CC:28:19:A8:01:C0
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/2OM9F-ynYI7nKV68vz7MKBmoAcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fd:d5:7b:70:8f:d6:25:27:00:e5:42:f2:f1:1b:95:1d:1c:
67:b3:a7:b8:83:ba:de:e8:63:f2:b3:3a:26:86:d1:e3:18:fa:
99:aa:67:54:69:0b:86:34:f4:d5:ea:c1:04:95:43:6d:6e:dc:
92:1a:52:be:13:06:52:2f:6c:da:ce:89:a3:3a:fd:16:16:e8:
5f:20:c3:99:1d:18:c5:f4:ea:30:87:33:92:e5:c7:18:d4:82:
de:23:8e:1e:8d:ab:92:a0:12:ea:09:57:83:95:62:99:9f:92:
ce:97:51:6f:d9:cc:0e:38:c0:79:c7:86:92:2f:46:55:ba:1a:
4a:02:a4:c8:be:33:51:6d:47:d1:28:e2:1f:00:64:4c:28:9b:
ba:68:e7:6b:74:a2:fb:93:e1:6c:3f:c2:80:30:92:09:85:4f:
e4:53:f6:5b:fb:5e:ae:7e:e6:fd:0f:25:6c:91:30:eb:f5:6a:
90:f7:14:ef:34:d2:96:c2:0c:5c:2e:2c:ce:a1:74:10:e2:ed:
4d:71:7d:0c:85:8f:90:ef:87:09:fe:93:71:8e:a9:f4:b0:66:
50:cd:a6:2a:d4:e7:04:93:1d:3a:c2:bb:8a:9e:de:90:78:2e:
9f:fa:58:42:17:2b:b7:23:ff:0f:2a:ff:2b:4e:77:90:20:33:
50:5f:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:13 2026 by rpki-client