Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lOmnXs0AAZZGOLCzq2ZFOXuSlvg.roa
File: lOmnXs0AAZZGOLCzq2ZFOXuSlvg.roa (raw, json)
Hash identifier: 7WIF9lpdJH57bvc4DAm/FimEMidZkX0dAkXFxdk5DAg=
Subject key identifier: 94:E9:A7:5E:CD:00:01:96:46:38:B0:B3:AB:66:45:39:7B:92:96:F8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019CE7E383C342E8B3A1053AFDAE92670E6A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lOmnXs0AAZZGOLCzq2ZFOXuSlvg.roa
Signing time: Fri 13 Mar 2026 15:49:33 +0000
ROA not before: Fri 13 Mar 2026 15:49:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.229.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.192.0/24 maxlen: 24
194.87.193.0/24 maxlen: 24
194.87.194.0/24 maxlen: 24
194.87.195.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.57.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.95.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:e3:83:c3:42:e8:b3:a1:05:3a:fd:ae:92:67:0e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 13 15:49:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94e9a75ecd0001964638b0b3ab6645397b9296f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:ed:48:03:b2:1c:df:f8:83:5b:e7:b3:43:
38:37:08:b9:8f:a4:b5:1e:8e:25:3c:3e:dd:02:cd:
25:0f:dd:51:d1:68:1d:39:db:c1:e1:18:97:49:bd:
2a:21:21:03:95:a0:66:c9:d2:33:4a:c7:9d:8c:cb:
0e:d1:a6:51:b7:ff:3d:3e:c0:58:41:96:fd:72:c4:
67:25:f6:5b:bc:7e:26:44:00:30:77:5c:bc:87:f9:
cc:1f:6e:ad:61:47:fc:de:41:b0:6a:6c:4e:e0:66:
7f:f5:50:ae:7c:e9:97:e3:68:c9:71:38:3f:46:f5:
bd:4e:55:b9:2f:94:ee:89:c8:cb:04:66:91:50:9d:
0d:13:ec:7f:9e:cb:72:08:70:63:1f:59:eb:14:52:
78:95:20:13:5b:72:6f:f5:b1:59:1d:10:d1:bb:7f:
b8:21:c5:2f:5f:e5:e9:0d:81:f9:94:da:eb:4a:be:
47:b8:8d:93:2d:78:16:a2:c4:e4:a9:5f:d3:ef:23:
54:37:7d:b3:13:68:56:20:40:36:dd:69:b0:a6:b2:
9e:66:0c:ee:3b:a7:62:69:11:9e:be:b6:ea:2a:b7:
c4:6b:3b:8a:02:f2:83:31:e2:14:f0:06:a5:33:fa:
49:e4:84:b8:b9:ae:95:53:65:f0:7a:a4:b4:e4:08:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:A7:5E:CD:00:01:96:46:38:B0:B3:AB:66:45:39:7B:92:96:F8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lOmnXs0AAZZGOLCzq2ZFOXuSlvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
185.72.10.0/24
192.124.190.0/24
193.124.7.0/24
193.124.18.0/24
193.124.89.0/24
193.124.226.0/24
194.58.58.0/24
194.58.155.0/24
194.58.223.0/24
194.87.33.0/24
194.87.52.0/23
194.87.59.0/24
194.87.61.0/24
194.87.75.0/24
194.87.78.0/24
194.87.119.0/24
194.87.122.0/24
194.87.126.0/24
194.87.136.0/24
194.87.152.0/24
194.87.179.0/24
194.87.183.0/24
194.87.192.0/22
194.87.211.0-194.87.212.255
194.87.228.0/23
194.87.231.0/24
194.135.24.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.35.0/24
195.133.40.0/23
195.133.50.0/23
195.133.57.0-195.133.58.255
195.133.92.0/23
195.133.95.0/24
212.192.241.0-212.192.242.255
212.192.247.0/24
212.192.249.0/24
212.193.0.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
95:04:46:87:fd:22:82:90:4a:7f:1f:4f:13:11:1f:74:d0:12:
61:92:eb:c6:35:19:ce:0e:0e:ab:16:81:34:26:ca:80:c0:8d:
60:61:5a:4e:e1:d7:5b:33:6c:f8:2c:a3:12:b4:74:33:d7:eb:
d1:cc:e1:b5:05:59:d4:c1:d3:d8:34:ee:1e:05:fc:aa:eb:00:
cd:79:c4:3d:a8:d8:5d:6b:76:ba:4f:d2:49:45:40:7b:a7:5f:
a0:1e:b5:d1:fd:6a:1e:41:ac:20:34:b2:e5:de:45:10:db:8c:
0e:e1:a7:0f:fe:09:c1:e1:ba:9b:fe:73:7f:9d:41:98:1e:db:
b6:8b:68:b4:51:42:b4:46:18:fa:37:5e:23:72:eb:f3:21:95:
c0:66:93:26:bb:87:cb:db:79:66:42:dc:13:98:9f:d4:26:31:
ca:f1:39:c9:57:d1:a2:3a:e3:66:b8:c9:fb:a4:3b:ab:7e:ce:
f4:c0:95:09:13:14:39:31:f7:8c:a9:d5:11:27:e3:87:96:96:
ab:1e:c4:7f:74:9e:3c:56:dc:ad:3c:fe:6b:83:18:c1:e4:66:
41:0f:d1:5a:09:8c:32:fb:13:34:43:81:53:b0:43:20:40:05:
72:5f:27:1e:e3:07:cc:21:d8:32:ac:87:85:ea:c4:78:c5:1b:
0b:32:a6:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:02 2026 by rpki-client