Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/OmwNfCKC8hHidejU-asojVKNj98.roa
File: OmwNfCKC8hHidejU-asojVKNj98.roa (raw, json)
Hash identifier: lP2QFHvm89jjoRCHcJXZrSC9EVy0+CArnpUR4XyCNpo=
Subject key identifier: 3A:6C:0D:7C:22:82:F2:11:E2:75:E8:D4:F9:AB:28:8D:52:8D:8F:DF
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 01A0B3276597A89C42EB621EA47FF3F1FEF0
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/OmwNfCKC8hHidejU-asojVKNj98.roa
Signing time: Fri 18 Sep 2026 06:14:58 +0000
ROA not before: Fri 18 Sep 2026 06:14:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4749
IP address blocks: 147.189.32.0/23 maxlen: 23
147.189.32.0/24 maxlen: 24
147.189.33.0/24 maxlen: 24
147.189.34.0/23 maxlen: 23
147.189.34.0/24 maxlen: 24
147.189.35.0/24 maxlen: 24
147.189.36.0/24 maxlen: 24
147.189.37.0/24 maxlen: 24
147.189.38.0/24 maxlen: 24
147.189.39.0/24 maxlen: 24
147.189.40.0/24 maxlen: 24
147.189.41.0/24 maxlen: 24
147.189.42.0/24 maxlen: 24
147.189.51.0/24 maxlen: 24
147.189.52.0/24 maxlen: 24
147.189.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:27:65:97:a8:9c:42:eb:62:1e:a4:7f:f3:f1:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Sep 18 06:14:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a6c0d7c2282f211e275e8d4f9ab288d528d8fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:49:5a:27:9b:e0:6d:ec:f2:da:c5:6d:d9:
a0:38:15:c7:75:d3:f9:0f:3d:61:24:54:0d:6d:98:
3e:5a:26:30:61:c0:09:3e:a3:5a:1d:63:22:53:87:
45:1f:51:1b:72:c6:ea:cf:b9:be:a9:7f:68:ea:d9:
d1:97:84:2f:49:ec:ac:78:0a:aa:c7:7b:93:51:3f:
8b:b6:3c:0d:5f:15:67:72:71:8a:cd:b6:98:3a:7c:
0f:f1:c5:2b:f7:f7:53:ed:a8:54:6f:1d:2d:a5:61:
84:3c:7a:6c:fd:1a:31:50:25:e8:9a:97:1d:d4:e4:
eb:f9:10:4d:5f:e9:99:64:d9:4e:53:e5:cd:07:3f:
9f:c9:09:1f:4b:d9:3d:23:97:d7:79:af:e7:27:f9:
63:67:1f:d8:a0:55:65:5e:0f:43:b4:77:db:70:d9:
fa:66:ea:43:62:13:e6:3b:ec:65:d0:c8:e8:36:31:
92:dc:31:a3:bf:26:3e:93:14:d1:d7:61:7f:a5:f4:
c8:ac:cc:aa:dc:14:20:e7:b5:df:fc:47:4d:00:02:
74:f0:76:99:d2:3c:52:d8:c8:c8:17:41:14:bc:54:
77:53:85:75:95:33:45:1f:ad:44:22:38:89:bf:74:
20:de:a7:20:00:b2:bd:59:df:a8:32:df:ae:44:2e:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:0D:7C:22:82:F2:11:E2:75:E8:D4:F9:AB:28:8D:52:8D:8F:DF
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/OmwNfCKC8hHidejU-asojVKNj98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.32.0-147.189.42.255
147.189.51.0-147.189.53.255
Signature Algorithm: sha256WithRSAEncryption
67:3f:51:b4:0d:02:96:27:5e:3d:87:2c:06:df:77:fe:b4:a2:
97:d8:08:cf:38:35:7b:19:8c:b5:f5:ac:51:f8:5c:a5:ad:a1:
e3:eb:01:5d:1c:ae:1d:41:ec:07:a0:48:29:94:b8:17:48:60:
f8:54:1c:20:88:60:2b:50:0c:f4:5a:55:5e:3c:8b:ae:b9:0b:
35:2a:f4:ba:13:28:ed:55:e5:9e:3e:de:02:1e:7c:88:69:43:
f3:34:3d:6f:a7:1a:03:f4:ac:d7:0d:a7:67:ca:da:ac:32:9f:
c0:80:8a:2c:4d:e7:60:6c:67:e6:16:1f:a5:97:00:f1:ef:9b:
c8:f5:be:c1:40:33:ba:39:40:7b:34:56:c5:ad:e6:8a:08:02:
8f:05:48:0a:5a:f3:50:03:1e:1a:88:66:a9:e3:2d:c0:53:fa:
9b:e0:c2:86:cb:47:20:f2:3d:10:f1:2e:0a:24:09:d0:33:df:
54:ea:4b:f0:60:5b:3c:0d:24:bf:4b:10:c2:bd:4e:54:01:f1:
6b:f9:90:d9:df:f0:ff:ef:99:35:cd:8c:0d:51:18:84:ca:98:
6e:d3:7c:44:03:5c:68:b8:f3:49:62:90:22:6e:a0:7c:81:c9:
bd:a1:a5:fa:f8:89:42:c2:b4:fa:8f:db:b8:b6:36:7d:d6:70:
a9:f4:b3:a9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaCzJ2WXqJxC62IepH/z8f7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjYwOTE4MDYxNDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTZjMGQ3YzIyODJmMjExZTI3NWU4ZDRmOWFiMjg4ZDUyOGQ4ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlihJWieb4G3s8trFbdmgOBXHddP5
Dz1hJFQNbZg+WiYwYcAJPqNaHWMiU4dFH1Ebcsbqz7m+qX9o6tnRl4QvSeyseAqq
x3uTUT+LtjwNXxVncnGKzbaYOnwP8cUr9/dT7ahUbx0tpWGEPHps/RoxUCXompcd
1OTr+RBNX+mZZNlOU+XNBz+fyQkfS9k9I5fXea/nJ/ljZx/YoFVlXg9DtHfbcNn6
ZupDYhPmO+xl0MjoNjGS3DGjvyY+kxTR12F/pfTIrMyq3BQg57Xf/EdNAAJ08HaZ
0jxS2MjIF0EUvFR3U4V1lTNFH61EIjiJv3Qg3qcgALK9Wd+oMt+uRC7ueQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFDpsDXwigvIR4nXo1PmrKI1SjY/fMB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEvT213TmZDS0M4aEhpZGVqVS1hc29qVktOajk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAWTvSAD
BACTvSowDAMEAJO9MwMEAZO9NDANBgkqhkiG9w0BAQsFAAOCAQEAZz9RtA0Clide
PYcsBt93/rSil9gIzzg1exmMtfWsUfhcpa2h4+sBXRyuHUHsB6BIKZS4F0hg+FQc
IIhgK1AM9FpVXjyLrrkLNSr0uhMo7VXlnj7eAh58iGlD8zQ9b6caA/Ss1w2nZ8ra
rDKfwICKLE3nYGxn5hYfpZcA8e+byPW+wUAzujlAezRWxa3miggCjwVIClrzUAMe
GohmqeMtwFP6m+DChstHIPI9EPEuCiQJ0DPfVOpL8GBbPA0kv0sQwr1OVAHxa/mQ
2d/w/++ZNc2MDVEYhMqYbtN8RANcaLjzSWKQIm6gfIHJvaGl+viJQsK0+o/buLY2
fdZwqfSzqQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:18 2026 by rpki-client