Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Om2DUmEKhQ-J9cS1RGmTIc4NJxM.roa
File: Om2DUmEKhQ-J9cS1RGmTIc4NJxM.roa (raw, json)
Hash identifier: uzpcviQVrYCamTG9XomA+f3WbAN9uA7YHb35hy0lxfY=
Subject key identifier: 3A:6D:83:52:61:0A:85:0F:89:F5:C4:B5:44:69:93:21:CE:0D:27:13
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A178E87FD87413889E50781FF5C337D80D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Om2DUmEKhQ-J9cS1RGmTIc4NJxM.roa
Signing time: Mon 26 Oct 2026 15:51:05 +0000
ROA not before: Mon 26 Oct 2026 15:51:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198475
IP address blocks: 201.11.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:e8:7f:d8:74:13:88:9e:50:78:1f:f5:c3:37:d8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 15:51:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a6d8352610a850f89f5c4b544699321ce0d2713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:91:05:9c:1c:ff:47:2e:cb:97:b6:59:d5:
5a:b3:2e:a1:d5:ad:e2:06:85:08:7c:89:31:7c:46:
a6:bd:55:ef:49:de:b0:60:da:10:ec:51:8b:0b:73:
e5:6f:31:4d:e5:c2:09:47:e5:1a:c0:5a:ce:fb:bc:
48:1f:54:4c:60:ae:d6:13:62:84:05:f1:ab:2c:f8:
34:7f:35:47:ed:76:0f:06:fd:a3:03:ce:6a:68:62:
2f:25:e0:2e:ac:49:77:4e:3e:be:a8:9d:4c:5c:10:
47:de:39:10:90:99:26:54:27:05:f5:ee:f8:a9:11:
79:55:f0:90:95:c4:b9:1d:c0:66:83:24:a2:30:b7:
0f:33:63:76:b9:20:c1:7d:fc:2e:92:65:89:49:57:
28:24:94:6d:4b:fb:8f:ad:39:62:3b:69:ef:71:0a:
1e:ea:b9:0e:56:c0:3e:50:94:9d:d0:5f:e0:1a:5f:
da:f0:d0:c6:e0:fe:03:18:6a:f4:0f:06:25:9a:09:
11:68:bd:a0:00:7c:06:98:90:a7:cc:68:16:8a:2e:
3d:f3:c9:a7:42:a2:8f:d8:4d:45:14:76:66:a9:a1:
45:0a:e0:b6:09:78:e7:9b:f2:95:ff:26:8a:6b:7a:
9a:83:88:33:ae:6a:07:43:0a:e8:fd:fc:d1:2d:0f:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:83:52:61:0A:85:0F:89:F5:C4:B5:44:69:93:21:CE:0D:27:13
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Om2DUmEKhQ-J9cS1RGmTIc4NJxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.11.238.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4c:e1:4f:2f:7d:d5:58:29:d3:35:a5:8e:3b:de:6e:12:ad:
47:ff:94:8d:77:56:09:c4:f2:cb:aa:2a:db:20:d3:fa:74:2b:
ed:68:fd:e6:c2:29:01:e7:23:85:b7:ac:0d:ec:8a:95:70:43:
0c:77:e3:6f:04:97:34:ca:d5:3c:0c:59:b8:ce:5e:54:f1:4c:
ca:50:22:64:ca:a8:a5:34:bf:ce:5e:1c:05:90:e9:a9:ba:82:
04:11:c0:1c:b2:a8:50:12:4e:6b:cc:f7:09:37:c3:b0:a8:b9:
b7:6a:4f:07:00:17:49:84:b4:49:0b:69:af:db:5c:ce:7f:e8:
e9:82:43:12:25:ff:c7:d3:9b:c9:00:05:4f:c9:4d:6e:06:9e:
8c:c7:45:26:7f:34:e8:ab:f4:27:e6:9f:66:1a:0d:e7:17:26:
51:ca:41:e3:c0:25:71:53:bd:ea:29:81:3b:f7:3e:9d:3a:44:
ba:6a:7d:4e:9d:26:a2:0c:0c:30:6d:2a:27:5f:5d:5d:2f:80:
69:17:b4:c4:18:3d:38:4c:73:a5:e7:26:3c:68:4d:2d:80:f7:
97:a5:d6:cf:dc:d8:2c:09:c8:31:87:36:c8:f4:e1:60:4a:85:
21:42:06:1b:c8:c3:53:95:32:b5:6e:fa:ed:b3:15:d1:a5:a8:
39:23:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:55:21 2026 by rpki-client