Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/OMdzvFDT-17HXZynyaIYHkJPOo8.roa
File: OMdzvFDT-17HXZynyaIYHkJPOo8.roa (raw, json)
Hash identifier: PUTHdbxTs/622nYbcFAR73BbcBsVc3bYVmDcq7Edzqc=
Subject key identifier: 38:C7:73:BC:50:D3:FB:5E:C7:5D:9C:A7:C9:A2:18:1E:42:4F:3A:8F
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0A1CCC7AC7FAF1B46496A93E8113E6251
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/OMdzvFDT-17HXZynyaIYHkJPOo8.roa
Signing time: Mon 14 Sep 2026 21:22:27 +0000
ROA not before: Mon 14 Sep 2026 21:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8254
IP address blocks: 5.34.178.0/23 maxlen: 23
46.28.71.0/24 maxlen: 24
82.117.252.0/23 maxlen: 23
82.117.254.0/24 maxlen: 24
85.90.197.0/24 maxlen: 24
85.90.198.0/24 maxlen: 24
193.238.154.0/24 maxlen: 24
217.12.194.0/24 maxlen: 24
217.12.204.0/24 maxlen: 24
2a05:9405::/32 maxlen: 32
2a12:6fc3::/32 maxlen: 32
2a12:6fc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:cc:c7:ac:7f:af:1b:46:49:6a:93:e8:11:3e:62:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 14 21:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38c773bc50d3fb5ec75d9ca7c9a2181e424f3a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:b8:85:0b:51:67:c8:da:4f:8b:bd:fc:a7:
9d:d6:62:27:58:6f:87:f1:a5:ab:4a:97:a9:32:be:
e3:11:35:45:31:53:f4:05:c1:2d:de:3a:0f:f0:b9:
35:42:08:c6:d0:df:3f:d5:3c:20:b7:79:13:9e:21:
0d:92:4c:2c:c0:c2:0c:e5:ee:45:44:e1:a3:13:dd:
d2:8f:bd:70:45:da:91:f3:15:ae:83:cf:76:a3:81:
6a:d3:7a:e7:b9:f7:15:ed:99:8b:4d:09:0a:d8:03:
db:c7:f9:38:7f:74:60:41:02:4a:8a:2d:23:ea:04:
ef:2e:98:2e:47:ec:bc:7e:51:14:ad:7e:a7:7d:74:
7d:1d:70:0f:ec:31:cb:0f:dd:f0:ec:21:de:73:a9:
2a:56:d5:b6:c6:c7:d3:58:26:a9:0f:1a:c9:2c:d7:
23:f9:b9:c1:5a:4f:cf:98:a8:9e:a2:26:ec:fe:a4:
c4:32:b0:f6:2d:d4:8a:62:c5:05:22:19:0e:f9:ab:
f6:2f:78:a3:1a:0f:1c:01:da:3b:37:ac:ff:c9:29:
eb:1c:ce:e6:45:cc:de:a2:ab:1b:a3:d0:a3:6e:f1:
75:26:5c:69:82:55:a0:59:e2:12:7c:4b:07:d2:d0:
4e:f5:41:64:7c:d5:ce:c8:61:d2:2a:23:ea:8f:95:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:73:BC:50:D3:FB:5E:C7:5D:9C:A7:C9:A2:18:1E:42:4F:3A:8F
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/OMdzvFDT-17HXZynyaIYHkJPOo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.178.0/23
46.28.71.0/24
82.117.252.0-82.117.254.255
85.90.197.0-85.90.198.255
193.238.154.0/24
217.12.194.0/24
217.12.204.0/24
IPv6:
2a05:9405::/32
2a12:6fc3::-2a12:6fc4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
24:4d:34:bb:1b:af:63:dd:4f:eb:a9:32:98:89:8b:59:ba:31:
0b:fa:e1:53:fd:54:27:ef:fe:31:9c:26:ed:89:9b:69:cc:ef:
f5:a0:33:8a:af:f2:0d:5d:c6:35:00:9f:e2:db:c6:12:af:fc:
9b:21:47:fc:de:04:95:9d:2f:1a:16:94:ee:90:b5:5b:83:0e:
50:74:7d:45:5e:98:1b:76:22:76:29:a6:ff:46:dd:21:73:96:
44:4c:b9:ba:c4:bc:c2:27:62:7e:cc:e1:17:7c:54:03:37:1b:
3c:8c:00:a1:b0:5c:04:2c:f3:32:f1:a6:95:bf:5b:4d:7e:24:
b1:90:47:3d:c6:84:4c:18:33:22:b8:d0:7b:28:72:0f:e3:3a:
3f:fe:78:f3:83:cf:11:61:14:1e:35:d7:e9:59:60:a6:53:0c:
84:f6:ce:5d:27:04:73:65:66:3d:76:86:66:c5:f8:70:99:31:
9f:4d:f6:38:6c:c6:9c:56:0c:37:e6:2c:b0:1c:30:08:e0:4f:
d1:b6:ff:42:8b:b9:26:12:d4:80:ae:1b:76:9a:91:9c:fe:4f:
71:02:6a:06:a8:de:ed:67:a4:ae:10:9c:47:5b:65:75:27:5f:
eb:79:4d:99:63:83:ee:52:a6:91:00:54:8f:e1:94:f3:41:5a:
f7:e6:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:27:17 2026 by rpki-client