Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa
File: oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa (raw, json)
Hash identifier: 2sttQ/LaGMOGWj3sxLpiozuHzg1tWCewZ5VkHDFqrH4=
Subject key identifier: A0:F5:0C:0D:56:5D:34:92:74:C1:BB:4D:88:AA:53:E1:B0:77:70:93
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 01A0D2C4979D7BDCCBF7356ADE9B7FB6748D
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa
Signing time: Thu 24 Sep 2026 09:34:54 +0000
ROA not before: Thu 24 Sep 2026 09:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48958
IP address blocks: 185.125.76.0/24 maxlen: 24
185.125.77.0/24 maxlen: 24
185.125.79.0/24 maxlen: 24
195.8.48.0/24 maxlen: 24
195.8.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:c4:97:9d:7b:dc:cb:f7:35:6a:de:9b:7f:b6:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Sep 24 09:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0f50c0d565d349274c1bb4d88aa53e1b0777093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:4f:d6:23:c7:8e:57:0e:25:35:ca:f6:e0:
fb:8f:c9:54:16:41:61:34:18:66:ce:ad:07:df:67:
f4:46:7d:a4:b4:5d:15:e7:38:22:0d:05:50:89:b0:
0a:f5:4f:1b:8b:3a:0c:f6:00:14:4c:f8:a3:66:5c:
f6:eb:cd:ec:a0:66:23:dc:18:30:2c:70:41:19:ad:
76:eb:a1:b1:fc:bb:f2:4a:34:60:7e:c5:8a:94:3d:
03:dc:33:6e:c6:03:0b:df:f8:69:4a:f3:b6:33:ef:
be:02:c2:ef:ec:e0:5e:07:0b:ca:a2:91:07:83:fe:
39:a5:5f:71:81:fd:9e:47:33:f2:7e:36:0c:5e:ef:
64:0b:5c:10:99:64:87:de:08:bc:21:fd:3a:aa:79:
17:00:e2:62:c2:21:11:08:66:91:6c:bb:a9:ee:11:
10:fb:7f:bc:98:8c:77:3b:27:83:27:74:62:8d:0e:
ae:eb:93:0a:5c:ae:23:50:6b:3b:71:5e:17:87:ae:
56:10:a5:03:6b:0f:e6:7c:14:6e:4a:60:63:b8:a8:
6c:c9:a4:c0:fb:5d:b7:ee:69:2b:8d:6a:34:27:76:
73:ae:42:6e:38:d8:c4:53:d4:89:b2:6e:f9:ae:62:
2d:35:9c:14:a8:d6:01:47:86:50:43:b8:49:03:27:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F5:0C:0D:56:5D:34:92:74:C1:BB:4D:88:AA:53:E1:B0:77:70:93
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.76.0/23
185.125.79.0/24
195.8.48.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:38:b4:d9:e9:21:50:71:c6:ac:15:a3:e1:20:93:1d:50:96:
e7:42:58:30:92:08:24:ef:0d:03:08:46:26:a0:8c:78:da:29:
9b:51:dc:07:57:b8:90:da:41:78:9d:d9:32:97:3c:25:0c:f6:
7b:bf:1f:82:1e:c5:38:83:03:39:d1:0a:31:3c:4b:ae:80:8e:
7a:25:19:27:44:19:17:82:ec:95:0c:d7:82:f5:2d:a2:33:4f:
49:99:7c:67:3c:9d:c9:51:e1:8b:32:3e:e7:3a:4d:94:7b:81:
af:ea:4c:4a:dd:15:22:30:20:1c:4c:0d:d0:e9:27:01:ef:c9:
94:12:69:a2:43:ba:4d:b7:25:b6:64:5d:47:76:9c:d3:d1:71:
3f:13:42:3f:ad:57:fc:77:8c:ac:8d:43:36:c6:48:15:79:4b:
42:fe:71:be:b9:80:83:b6:05:f1:36:1b:47:f8:3c:76:b0:dc:
f2:19:02:e0:69:80:ed:cc:d0:2e:25:72:8a:e8:00:b4:8b:8c:
ba:94:1e:a7:a1:78:98:36:c6:db:29:cc:bb:d7:6a:08:bd:bd:
6f:ee:8a:84:7f:7c:77:62:66:73:75:86:d8:91:9a:c1:06:04:
42:87:50:cf:b3:07:6b:7c:be:6f:ad:18:4f:fa:2b:76:26:33:
d6:6d:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:10:03 2026 by rpki-client