Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ombAkyH7O336rGH2bAsu15Lq_FU.roa
File: ombAkyH7O336rGH2bAsu15Lq_FU.roa (raw, json)
Hash identifier: MF5UbF7JpQtE9NoxzauhGMs0OQd3AZlogcTFWNy7njI=
Subject key identifier: A2:66:C0:93:21:FB:3B:7D:FA:AC:61:F6:6C:0B:2E:D7:92:EA:FC:55
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A086E9DF58D1699F3F7C23143EBDC4EB1C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ombAkyH7O336rGH2bAsu15Lq_FU.roa
Signing time: Wed 09 Sep 2026 16:04:29 +0000
ROA not before: Wed 09 Sep 2026 16:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 263767
IP address blocks: 201.10.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e9:df:58:d1:69:9f:3f:7c:23:14:3e:bd:c4:eb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 9 16:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a266c09321fb3b7dfaac61f66c0b2ed792eafc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:e5:95:a8:d0:25:f2:99:c9:e4:ba:45:4a:
c4:b1:90:9f:0a:5e:2d:dd:ba:0e:5f:ca:40:b1:c6:
c9:79:31:ae:df:25:9e:09:63:a9:5c:0e:7c:6b:e4:
64:8b:6f:d1:5b:45:76:91:45:5e:13:4f:47:26:9b:
12:9d:ed:39:1f:5f:db:e5:29:7e:de:b0:e8:05:fc:
dc:86:8f:00:00:57:52:7a:2f:23:ba:f9:f7:41:b7:
d8:54:c3:f2:10:29:71:d4:f3:f0:0f:01:b8:38:02:
bc:bc:d9:ce:df:8d:7b:1a:79:e0:a0:ae:db:48:4c:
85:71:0f:ec:32:90:7e:68:83:12:dd:52:71:b8:33:
70:8e:98:ac:b9:94:81:8a:6a:c5:f2:2f:49:ac:89:
1e:f0:2f:24:40:fa:f0:09:8c:94:62:a7:65:57:4c:
0e:57:1c:17:61:28:da:1b:f6:75:f2:d3:20:69:25:
eb:6b:34:59:f6:51:5f:f7:fb:79:0d:22:9a:76:d3:
50:a5:7c:d7:f5:59:dd:85:69:0d:5b:23:fb:bd:02:
38:c0:03:e9:eb:b9:16:d4:8b:04:70:de:c3:64:6a:
58:81:dd:d6:5c:96:92:53:f2:ec:24:59:4c:3b:26:
f0:2b:18:47:4a:5e:f7:06:ad:92:b2:d9:43:4a:b0:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:66:C0:93:21:FB:3B:7D:FA:AC:61:F6:6C:0B:2E:D7:92:EA:FC:55
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ombAkyH7O336rGH2bAsu15Lq_FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.10.68.0/22
Signature Algorithm: sha256WithRSAEncryption
76:f9:04:c5:b1:c5:14:39:40:d8:7a:a0:d9:6c:0b:20:c9:3c:
d4:2d:81:26:2c:eb:a8:21:52:7b:9b:73:45:d8:7e:93:95:1e:
66:72:95:ed:a4:88:83:14:d2:19:97:f2:f3:5b:6e:aa:7c:1c:
f1:45:5d:e1:40:62:97:b1:0b:07:d2:b1:a4:9a:2c:33:ee:2e:
bf:c1:54:67:c9:18:ca:9b:84:f9:b3:58:64:e1:1f:8a:14:9e:
b7:37:78:e7:9c:c4:2a:83:5a:5e:56:cc:7a:26:20:96:2c:cc:
5d:80:99:a8:a9:9b:ed:99:10:81:41:ef:fe:a3:3c:b0:75:ad:
6f:1f:87:d0:bb:ab:a7:ba:db:ac:5c:b9:7b:20:c9:cf:36:36:
ee:1d:42:c3:27:3f:ee:e0:6c:2b:16:3c:9e:e9:6f:a7:5a:97:
ea:7e:7b:4e:a1:2c:ac:a4:a0:6f:ed:34:43:6a:d4:a7:91:1f:
10:86:57:c7:57:44:a7:8c:70:7f:cf:86:d7:16:d3:5f:d4:11:
48:c1:79:5f:39:d0:36:12:21:cb:78:42:24:04:1b:45:39:ab:
02:26:6b:ef:ef:5c:14:ec:12:5f:d2:54:0e:e4:49:62:b6:a9:
df:9f:2f:1d:04:5d:c2:a2:e4:ac:5b:1e:9c:36:db:34:3e:b8:
05:2a:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:45 2026 by rpki-client