Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OM-K-W_jXt5clDRZZ2liHXZIcOQ.roa
File: OM-K-W_jXt5clDRZZ2liHXZIcOQ.roa (raw, json)
Hash identifier: PGg8VedXYUYtLmZ1oy20DOF4AqtWBhF/5UgzbTfOq7s=
Subject key identifier: 38:CF:8A:F9:6F:E3:5E:DE:5C:94:34:59:67:69:62:1D:76:48:70:E4
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199E673E1C9507C8D38AE01A263731F4F70
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OM-K-W_jXt5clDRZZ2liHXZIcOQ.roa
Signing time: Wed 15 Oct 2025 05:59:38 +0000
ROA not before: Wed 15 Oct 2025 05:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 213.169.219.0/24 maxlen: 24
217.8.216.0/24 maxlen: 24
217.8.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:73:e1:c9:50:7c:8d:38:ae:01:a2:63:73:1f:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 15 05:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38cf8af96fe35ede5c9434596769621d764870e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:8c:e5:5b:19:74:e5:86:29:b6:ea:a0:12:
5c:e0:c3:a1:9a:20:c5:7a:c9:85:0c:4b:14:60:cf:
7b:de:3c:23:d1:dd:f4:9d:c4:e9:e9:8f:7b:fd:77:
90:26:78:2e:ca:c8:2a:64:56:96:8d:3b:cf:14:2e:
b0:2f:d3:22:09:cc:b2:0e:4e:67:ba:9a:df:40:51:
14:f4:a3:2a:74:73:61:66:b0:3b:d6:c1:9b:44:0d:
60:e2:da:44:72:17:30:44:33:4b:cb:a4:e9:89:4c:
cf:81:f6:51:7e:ad:ee:7c:24:ef:11:02:82:b3:72:
bb:a8:d1:1e:7a:e5:7d:a2:c0:76:8c:cd:cd:66:73:
1f:a2:a3:15:d7:66:ee:93:97:59:05:a8:27:76:8e:
f9:e2:50:cf:bb:37:3e:33:4b:1c:1e:cc:2a:e0:6e:
cf:18:1e:1f:d7:6c:96:40:46:e8:b1:73:f6:ea:bf:
46:be:a4:9f:53:fe:bb:e4:d2:18:90:0e:1b:81:dc:
da:f1:44:d6:4d:b4:50:0d:dc:e4:4b:b3:fe:17:4d:
c6:5a:8d:00:ff:60:f2:b6:f9:7f:b5:b8:02:85:40:
aa:42:28:13:79:d3:3d:5c:61:03:2a:14:8c:a7:7d:
25:58:f4:c2:1e:7f:8f:eb:c0:17:26:7f:28:4f:f5:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CF:8A:F9:6F:E3:5E:DE:5C:94:34:59:67:69:62:1D:76:48:70:E4
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OM-K-W_jXt5clDRZZ2liHXZIcOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.219.0/24
217.8.216.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:5c:c8:01:0d:13:6f:6d:06:d5:a9:ea:55:ed:7c:cd:09:a9:
66:f8:fa:a8:3e:1b:49:28:fe:2a:f6:9f:81:3c:1c:fb:4e:aa:
61:74:b7:cf:3c:5f:99:f4:28:7d:19:c2:70:83:b3:68:98:4c:
4c:98:3f:52:27:01:82:4f:37:8e:df:ed:f1:e5:94:7d:ae:43:
3b:25:60:8a:b3:55:85:bb:c6:7b:c5:a9:73:39:8c:2c:13:6c:
c1:13:e4:59:0c:fc:91:3e:72:7c:60:b4:8b:b8:2b:3f:22:ee:
48:fc:96:96:21:2e:38:2a:30:dd:a5:f7:57:a5:96:37:19:5b:
cf:4d:4e:f8:f0:26:92:4e:c1:fb:e4:01:01:96:58:b8:c1:a9:
b5:81:70:c8:80:b7:f6:ee:41:e1:95:cf:5a:f8:5a:68:e8:04:
77:86:81:ef:77:1b:36:5c:81:af:26:b4:b1:1d:d1:73:48:79:
8c:01:82:17:1b:53:e1:c7:e9:1b:47:0f:26:c6:45:65:bd:b9:
69:16:41:b3:6c:33:af:fa:95:54:17:5e:3a:f1:ee:f4:4f:ab:
2c:a9:d1:fb:80:58:eb:91:e3:26:12:32:2e:82:4b:85:84:4d:
cf:6e:cf:32:41:87:d8:06:df:96:da:db:a7:8f:95:fe:a2:71:
23:0d:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:04 2025 by rpki-client