Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/om8xl26uHcggZq0PRt3auhU-WWM.roa
File: om8xl26uHcggZq0PRt3auhU-WWM.roa (raw, json)
Hash identifier: NBfDZYJPi466cYGpzgFuNXlb3jsTCQ+KLhNctBGB2Wk=
Subject key identifier: A2:6F:31:97:6E:AE:1D:C8:20:66:AD:0F:46:DD:DA:BA:15:3E:59:63
Certificate issuer: /CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9
Certificate serial: 019B797DDABB1BB18391FF9024341659A963
Authority key identifier: 41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/om8xl26uHcggZq0PRt3auhU-WWM.roa
Signing time: Thu 01 Jan 2026 12:17:29 +0000
ROA not before: Thu 01 Jan 2026 12:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209627
IP address blocks: 139.28.249.0/24 maxlen: 24
139.28.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:da:bb:1b:b1:83:91:ff:90:24:34:16:59:a9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9
Validity
Not Before: Jan 1 12:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26f31976eae1dc82066ad0f46dddaba153e5963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:f4:69:79:fa:f8:60:9a:50:1f:e2:26:7f:
bc:ae:ea:16:f4:21:f4:f2:26:5a:56:7a:d7:d0:88:
7b:93:ea:9c:30:30:30:c4:aa:de:9a:cf:fa:08:db:
b9:18:15:57:26:f2:fb:19:23:a6:da:03:03:2e:32:
ce:77:a9:0c:d8:01:e5:84:47:68:7b:61:87:a2:ae:
b2:31:6b:f7:a9:19:33:f8:e2:1f:6c:9c:f4:8e:f1:
42:ac:dd:97:20:06:1e:d2:50:00:a6:96:a1:03:c0:
91:ab:3b:8a:24:1b:30:82:47:fd:77:a3:eb:30:0b:
26:24:71:69:7b:08:d9:55:b9:24:f8:e1:4d:86:90:
39:79:b0:ad:b1:4b:e8:7f:51:38:a7:24:d0:3f:c8:
64:91:b1:cc:35:8e:43:73:de:fb:74:f2:8c:af:44:
a6:e4:5a:b3:d8:b1:2e:49:5b:7b:70:fa:91:b3:93:
20:7c:9c:3e:32:b5:d2:de:2a:db:d5:82:1a:20:7c:
84:e2:74:01:e4:b8:87:29:fe:9b:5d:30:23:55:3f:
af:5e:41:ea:92:6f:8d:59:9a:f2:8b:29:eb:90:14:
f0:87:bb:b2:3e:6e:44:52:92:ec:71:a3:92:6b:db:
7c:05:8c:79:c3:86:76:05:42:40:26:72:85:32:cd:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:31:97:6E:AE:1D:C8:20:66:AD:0F:46:DD:DA:BA:15:3E:59:63
X509v3 Authority Key Identifier:
keyid:41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/om8xl26uHcggZq0PRt3auhU-WWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.249.0/24
139.28.251.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:81:f3:4a:d7:f9:94:41:61:12:aa:85:35:fd:24:8e:d3:12:
e7:59:b2:27:67:7a:88:81:87:33:b8:6c:39:aa:34:07:0b:01:
a4:c2:c5:f2:48:b4:4a:11:39:13:c7:52:ce:f1:be:9c:e1:2d:
aa:80:be:0d:57:9f:e5:67:e5:a7:f9:66:89:12:ee:28:dc:ee:
54:6e:24:59:90:29:aa:9c:e3:89:ca:2a:f8:c7:72:bd:c9:c0:
22:a8:52:3a:83:14:20:f8:62:e5:0d:0b:74:d7:1c:5c:18:27:
31:fd:42:09:fa:61:e9:9f:28:ca:d0:98:36:bd:57:fd:7e:69:
d0:92:d0:25:67:6d:76:14:05:9f:91:80:bb:b5:b9:f7:3d:b9:
a9:12:6b:4d:49:c0:0e:ff:cf:22:61:b0:bd:8f:ba:01:13:e7:
b9:7d:ef:fe:09:ab:8d:ec:e9:fa:91:e0:7d:fc:7d:9f:c3:98:
18:eb:b9:ed:00:97:5e:61:f6:cb:a0:2c:ec:1e:96:86:17:77:
a5:fb:2d:ea:92:8c:60:28:6f:64:4c:b1:16:a3:8c:c6:5e:0e:
79:1b:56:89:fd:94:28:70:f4:ac:46:0a:1c:1a:70:7a:58:b5:
f8:13:e1:22:97:27:b6:b7:9a:e7:5b:c2:36:39:e0:b3:06:50:
1a:99:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:53:02 2026 by rpki-client