Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OM2GtwdX507Lfx4atqZpBX6Y3mw.roa
File: OM2GtwdX507Lfx4atqZpBX6Y3mw.roa (raw, json)
Hash identifier: mjpEXLZlOnJJfyf9+HPFJgTnsFTF6Ni3XRALpMfCt9U=
Subject key identifier: 38:CD:86:B7:07:57:E7:4E:CB:7F:1E:1A:B6:A6:69:05:7E:98:DE:6C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F6173C22EA6413545BDD276E93BFDA7DE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OM2GtwdX507Lfx4atqZpBX6Y3mw.roa
Signing time: Tue 14 Jul 2026 16:26:43 +0000
ROA not before: Tue 14 Jul 2026 16:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 191.217.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:73:c2:2e:a6:41:35:45:bd:d2:76:e9:3b:fd:a7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 14 16:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38cd86b70757e74ecb7f1e1ab6a669057e98de6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:79:db:db:a5:a7:64:d3:d6:12:c5:cf:67:
38:92:e1:2a:6d:7e:88:bb:65:79:2a:7f:67:ea:40:
33:e4:04:26:72:ed:82:12:dd:14:93:5a:46:3a:60:
3d:0a:bf:89:09:b3:f4:3d:8b:ba:ee:80:1c:77:09:
e0:34:24:92:b3:89:ac:c1:fd:f1:c0:55:13:b5:4d:
ee:2a:9f:1f:78:7d:4e:a2:9d:aa:da:da:01:c9:db:
8a:ef:23:1f:58:2a:1e:33:3d:4b:b1:d9:33:59:53:
58:86:7d:82:99:7b:a7:d3:26:e5:3b:e3:47:15:31:
48:8c:57:c1:33:18:04:97:2d:e5:b9:00:af:8a:a4:
67:51:c6:43:44:64:90:8e:30:37:9e:de:e2:c7:88:
da:9a:03:74:f2:c1:73:fe:32:8e:97:39:2a:ae:b8:
8c:5c:4d:32:2f:a1:a8:96:be:6a:4e:c9:07:fb:da:
f6:6e:03:1b:47:27:e7:b1:3f:77:27:25:d5:16:7b:
8e:b0:4e:5b:9d:25:5d:92:6e:5e:de:2d:72:d3:a4:
e5:75:6b:75:cc:b4:aa:0c:8d:2e:e9:0d:35:50:b9:
a5:15:fd:71:0f:56:3e:e9:c8:69:6e:59:3d:33:f4:
83:7e:f2:29:c1:a4:2c:4d:99:3e:75:44:86:22:aa:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CD:86:B7:07:57:E7:4E:CB:7F:1E:1A:B6:A6:69:05:7E:98:DE:6C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OM2GtwdX507Lfx4atqZpBX6Y3mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.163.0/24
Signature Algorithm: sha256WithRSAEncryption
28:87:8e:2b:97:c8:79:a9:a9:e9:26:30:c4:54:f7:6d:21:5a:
58:69:72:dc:bf:36:ca:da:9a:c2:44:28:63:1f:f7:60:3b:1e:
d1:8b:64:d6:1f:97:07:6b:c5:d2:7d:ce:d0:e2:c6:ab:a0:01:
63:2e:e0:d2:18:c4:fd:11:f3:97:54:5e:3c:69:86:c5:99:b5:
c3:4d:e8:0e:5a:82:8b:75:8b:ea:fc:cc:fb:e1:9a:a8:cf:04:
21:5d:c9:d4:d6:29:55:05:be:e0:f3:48:bf:d2:22:fd:cb:6f:
e5:71:c0:cf:eb:1c:c5:f7:8e:89:a2:42:42:af:a7:57:90:85:
4d:50:df:4a:ab:f5:11:06:0f:71:45:65:64:de:31:e8:9f:0f:
b3:b9:03:93:32:37:9c:ee:8b:a1:6d:81:99:4c:ab:dd:4d:fe:
9f:fc:d1:ac:1f:51:11:92:91:61:31:03:f7:0d:35:b1:d7:79:
66:00:9f:08:05:a0:df:b2:18:b0:d0:89:3c:41:a8:f9:df:e9:
ea:f6:2f:bc:ac:93:df:fb:56:22:db:f0:d4:ee:88:54:c8:77:
b2:d1:cf:af:dd:eb:37:f4:b6:d7:cd:0d:ff:ac:33:1a:b5:9a:
41:cc:d2:99:2c:9b:00:94:28:84:fd:f7:4c:51:6c:5b:78:21:
27:5c:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client