Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OUmnNlmYn-8P0D2qjMNidYkJujw.roa
File: OUmnNlmYn-8P0D2qjMNidYkJujw.roa (raw, json)
Hash identifier: 78U1HdBWumr4fqqSv/LiSJjsSby+69r1hwM0WwvlyiA=
Subject key identifier: 39:49:A7:36:59:98:9F:EF:0F:D0:3D:AA:8C:C3:62:75:89:09:BA:3C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A16A09271D771DD25CC290C1F7719617B2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OUmnNlmYn-8P0D2qjMNidYkJujw.roa
Signing time: Fri 23 Oct 2026 18:32:27 +0000
ROA not before: Fri 23 Oct 2026 18:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198037
IP address blocks: 179.236.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:09:27:1d:77:1d:d2:5c:c2:90:c1:f7:71:96:17:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 23 18:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3949a73659989fef0fd03daa8cc362758909ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:21:21:bb:90:af:a9:53:5d:96:2c:09:39:
48:49:ca:9f:23:dd:36:23:ad:56:a1:e5:9a:bd:00:
76:f1:60:3c:fc:b3:ab:8a:15:3c:9d:42:36:11:54:
28:4d:93:04:51:06:e9:c5:46:a6:00:0e:91:6e:0a:
b0:92:ef:ad:a7:4c:39:5f:da:2d:3f:7b:3d:ed:38:
5e:75:8d:ec:39:c7:ff:8b:de:fa:1c:3c:e9:72:20:
c3:fc:e5:24:32:3f:b7:3b:b6:a1:0f:fe:46:b7:a2:
cb:f8:9b:0f:0d:8c:1d:05:2f:36:5f:61:87:0d:f9:
1c:d6:ca:eb:0d:05:aa:89:a0:3d:76:7f:b2:28:cf:
1f:ac:ec:ce:87:ba:16:3f:e7:64:b3:fd:81:87:2f:
d7:e8:f3:f2:0b:8f:4b:d3:7c:33:34:5d:c5:bc:4e:
10:eb:04:4b:5d:b8:50:51:ed:ee:6c:37:4f:80:eb:
87:96:ab:f2:1f:51:9f:21:22:0e:41:61:35:e2:07:
7b:96:fd:ec:ee:d2:02:2b:91:7b:af:2b:67:3d:34:
9c:2b:4a:08:7d:59:c7:7e:23:98:4a:1c:d9:01:9b:
5c:a2:da:23:f9:17:02:ac:8e:7f:de:dc:31:7b:1d:
f6:6b:db:4c:3a:27:32:54:10:10:90:a7:5d:3c:e6:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:49:A7:36:59:98:9F:EF:0F:D0:3D:AA:8C:C3:62:75:89:09:BA:3C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OUmnNlmYn-8P0D2qjMNidYkJujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.236.132.0/24
Signature Algorithm: sha256WithRSAEncryption
31:38:f6:95:e5:35:2f:ff:28:e3:6f:51:dc:d9:9b:e4:54:80:
87:f3:a1:2e:fd:b7:4d:ab:58:fa:f1:91:61:9e:91:ca:e1:a6:
f1:3a:7f:ed:d9:d9:e1:db:f5:f5:4a:b6:17:50:ff:02:b2:95:
ef:08:4d:cd:7f:b6:cc:62:43:22:7d:86:18:71:00:64:04:9a:
3d:3f:62:6f:22:27:2f:05:9a:ce:9d:3c:e3:e5:fa:f5:79:5b:
33:73:c8:66:b3:97:c5:3c:71:03:e9:68:fe:d2:9f:b9:3a:22:
d5:a2:34:ca:b2:aa:65:ca:81:27:45:52:3e:ba:a5:ee:d7:33:
0c:45:91:ad:1b:16:94:87:c5:ce:13:c0:9e:c6:71:96:af:bd:
43:7b:41:48:24:e7:1c:75:f2:ae:f8:69:f8:3b:6a:95:6e:ec:
85:31:c7:e8:72:2c:a6:e4:32:ae:43:99:7f:3f:f5:f7:96:07:
fb:aa:9c:76:83:b9:bc:1d:e4:23:c5:fc:05:b1:5a:e0:b0:5f:
0e:05:8f:22:7a:30:b9:63:4a:f7:b4:2d:cc:0c:a7:45:20:c7:
e6:7b:b3:c1:79:e8:62:bd:ae:b9:41:fc:29:71:91:9d:ed:ca:
37:9b:f4:23:1a:e8:f8:4e:ba:2d:fa:84:44:99:50:cd:b9:c8:
1d:08:f5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:57 2026 by rpki-client