Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/OMs3SExnh8q-OfFFrIMvJ4V20rM.roa
File: OMs3SExnh8q-OfFFrIMvJ4V20rM.roa (raw, json)
Hash identifier: 3VJ0PQELJEdphYzfdK0KvVfZHKT8gZroOq8apM3LPBE=
Subject key identifier: 38:CB:37:48:4C:67:87:CA:BE:39:F1:45:AC:83:2F:27:85:76:D2:B3
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019EF8A444D4FFDD56C4AC8D0F8C27BDD684
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/OMs3SExnh8q-OfFFrIMvJ4V20rM.roa
Signing time: Wed 24 Jun 2026 07:59:35 +0000
ROA not before: Wed 24 Jun 2026 07:59:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34624
IP address blocks: 31.170.192.0/19 maxlen: 24
46.253.16.0/20 maxlen: 24
86.105.240.0/24 maxlen: 24
86.107.191.0/24 maxlen: 24
89.33.16.0/24 maxlen: 24
89.35.2.0/23 maxlen: 24
89.35.2.0/24 maxlen: 24
89.35.174.0/23 maxlen: 24
89.40.134.0/23 maxlen: 24
89.191.64.0/19 maxlen: 24
89.191.72.0/24 maxlen: 24
93.115.33.0/24 maxlen: 24
193.238.60.0/22 maxlen: 24
2a00:1930::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:a4:44:d4:ff:dd:56:c4:ac:8d:0f:8c:27:bd:d6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jun 24 07:59:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38cb37484c6787cabe39f145ac832f278576d2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:67:9b:5a:e5:2d:0a:7d:49:26:06:3a:42:
aa:6e:fb:99:e6:b2:91:66:20:44:91:8b:e6:c9:18:
4f:f6:0e:df:bf:56:64:ab:f6:47:d7:e5:b5:c5:76:
66:db:d6:27:30:3c:c4:a7:54:85:d1:fe:b3:de:1f:
76:68:f7:43:95:67:87:66:f3:ae:9f:d1:1c:0f:1b:
da:d8:d9:75:84:28:56:a8:6f:32:6c:ff:93:ce:d8:
94:cc:29:ba:8d:5a:d0:eb:a9:ae:12:96:4c:26:47:
21:e6:d9:67:8b:9f:30:e4:a2:a8:70:db:1b:38:4f:
bc:b7:1c:fc:91:8c:72:73:87:55:58:d2:4b:c7:bb:
66:59:97:fc:c2:4d:11:0f:00:75:d1:0a:33:bc:12:
e0:a8:cd:96:ca:61:05:39:5a:00:3e:1b:0f:06:bd:
1d:c0:87:fd:49:55:b2:72:0f:20:42:59:41:28:35:
c5:bc:07:86:38:2c:a9:a7:57:95:4b:16:97:43:c2:
58:65:8a:64:ff:86:2a:f9:1c:32:4c:49:e0:1b:e3:
40:6e:09:08:87:42:8f:3e:13:fe:5d:0d:e6:21:c0:
7a:5a:ef:12:78:40:51:7c:8b:c5:0d:6d:46:be:01:
a9:eb:64:94:d5:4b:56:57:c5:f3:22:5d:f7:1a:eb:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:37:48:4C:67:87:CA:BE:39:F1:45:AC:83:2F:27:85:76:D2:B3
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/OMs3SExnh8q-OfFFrIMvJ4V20rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.192.0/19
46.253.16.0/20
86.105.240.0/24
86.107.191.0/24
89.33.16.0/24
89.35.2.0/23
89.35.174.0/23
89.40.134.0/23
89.191.64.0/19
93.115.33.0/24
193.238.60.0/22
IPv6:
2a00:1930::/32
Signature Algorithm: sha256WithRSAEncryption
08:85:3e:72:90:fb:1d:82:28:cd:c0:76:e3:85:d9:83:90:24:
44:37:a6:bf:96:15:b0:e6:3d:b6:f2:da:c3:4d:15:51:4f:8e:
69:60:da:4c:5c:0f:1a:d1:1f:0a:b2:b2:56:f2:88:0f:5b:5e:
24:f7:74:b4:ee:2d:c0:09:6a:59:61:92:61:47:d9:7c:d3:fd:
ef:5e:fe:f9:e4:b4:7c:95:05:aa:50:f6:2f:de:3b:d0:57:e7:
d0:b5:d0:b4:c2:a6:80:8d:33:52:9b:fb:e7:2e:d0:b2:73:bb:
df:8d:b5:06:ed:97:85:24:dc:66:45:d7:49:4c:7f:1c:d5:74:
0e:32:d8:cf:30:6a:43:75:30:86:97:df:d5:8d:7b:fc:67:4c:
f7:4e:ac:05:71:cc:2c:4d:ed:49:25:b6:73:0d:14:69:5f:9d:
0d:7a:9b:93:51:f0:84:eb:b1:87:6f:00:67:01:ca:c1:c5:53:
8a:65:e6:05:32:0c:42:9e:cf:8f:50:f4:64:09:74:63:a7:4f:
80:eb:99:5f:3d:43:7a:49:c2:8f:94:91:69:04:30:b1:5c:21:
b1:7d:3e:c0:f3:b3:66:79:62:6a:06:25:d5:af:3b:81:bd:1a:
9d:52:4c:3a:be:65:93:81:4e:0e:24:f4:0d:83:69:29:f3:c9:
d8:cd:62:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:18 2026 by rpki-client