Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/oMG6eFlW3TWb4IPEiHtaBvrTrd0.roa
File: oMG6eFlW3TWb4IPEiHtaBvrTrd0.roa (raw, json)
Hash identifier: aj4kc+qI+NMwreXFfxOIle+v6Tq05n/0VxwaETeuQY4=
Subject key identifier: A0:C1:BA:78:59:56:DD:35:9B:E0:83:C4:88:7B:5A:06:FA:D3:AD:DD
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 019F64AAD0181E4E5AE851D2052C538C0B41
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/oMG6eFlW3TWb4IPEiHtaBvrTrd0.roa
Signing time: Wed 15 Jul 2026 07:25:43 +0000
ROA not before: Wed 15 Jul 2026 07:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58282
IP address blocks: 185.128.228.0/22 maxlen: 22
185.153.152.0/22 maxlen: 22
185.153.152.0/23 maxlen: 23
185.153.154.0/23 maxlen: 23
188.64.152.0/21 maxlen: 21
188.64.152.0/22 maxlen: 22
188.64.156.0/22 maxlen: 22
194.182.109.0/24 maxlen: 24
194.182.156.0/22 maxlen: 22
194.182.156.0/23 maxlen: 23
194.182.156.0/24 maxlen: 24
194.182.157.0/24 maxlen: 24
194.182.159.0/24 maxlen: 24
2a03:1500::/32 maxlen: 32
2a03:1500:ff03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:aa:d0:18:1e:4e:5a:e8:51:d2:05:2c:53:8c:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Jul 15 07:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0c1ba785956dd359be083c4887b5a06fad3addd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:e5:b8:13:3d:ab:06:b4:09:2c:b7:e9:10:
50:59:33:37:25:53:24:ac:56:4b:1e:67:2f:d5:7f:
61:7b:a2:52:c2:22:0e:df:0b:b5:a5:49:be:7b:3d:
4e:93:8d:10:17:02:7e:e5:7f:2d:b4:b1:c0:95:98:
5b:3a:1d:6e:6c:b0:ca:1a:3f:52:d3:a0:24:45:d1:
61:62:90:96:b7:0a:20:9f:fd:61:9b:b4:ff:25:8a:
aa:f7:bd:a5:af:44:d1:29:e4:53:15:92:22:67:e3:
06:2b:65:0a:a1:ea:b2:3c:e5:9a:f8:8e:a5:78:8a:
9b:cf:b0:5b:8d:16:80:78:d1:af:97:40:e2:2c:63:
cc:4e:1e:4b:b8:e9:85:2a:85:d4:72:91:76:a8:d5:
e7:2d:37:52:4e:c3:ea:f8:8d:63:86:13:c7:b1:1a:
66:05:b5:d0:17:40:90:08:4f:a4:56:89:a8:ec:75:
7e:54:97:ab:bf:6b:f6:03:56:39:ae:06:4e:c7:8c:
3b:7f:c6:3b:b4:ad:fd:a5:28:ad:99:9b:ad:f7:97:
f3:7c:51:02:4b:e4:74:b1:a9:57:5f:53:6c:3e:85:
ff:09:96:64:c6:69:33:d3:91:73:c9:ba:71:7f:68:
c1:0f:a5:9b:26:ad:b2:34:b6:47:6e:c5:3a:72:a9:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:BA:78:59:56:DD:35:9B:E0:83:C4:88:7B:5A:06:FA:D3:AD:DD
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/oMG6eFlW3TWb4IPEiHtaBvrTrd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.228.0/22
185.153.152.0/22
188.64.152.0/21
194.182.109.0/24
194.182.156.0/22
IPv6:
2a03:1500::/32
Signature Algorithm: sha256WithRSAEncryption
76:63:94:86:2f:b7:e8:18:f1:0b:93:7a:b4:aa:6b:db:e2:0c:
60:37:76:18:dc:ba:27:6e:77:06:c8:d2:af:7f:47:7c:1b:f2:
35:d7:6e:a5:ec:19:09:98:97:34:d3:80:17:6c:72:c2:ad:45:
cb:56:04:fb:77:54:2e:26:2a:63:d7:5e:a5:9d:18:48:e0:08:
70:4f:dc:67:68:33:96:74:e5:3d:34:60:e5:4a:5f:9e:e2:0a:
03:34:af:6e:86:b5:c1:a7:af:ce:24:dd:dd:f3:34:31:2b:6a:
92:2b:f8:f3:9d:0b:38:00:68:93:e8:1e:04:9d:e0:6c:ea:39:
5a:cf:84:88:d6:ce:35:b0:cc:f3:4c:53:5c:4b:ce:97:86:ce:
b2:82:6b:1f:ad:95:bd:32:33:52:22:1b:2b:74:83:24:a5:de:
56:b0:4d:15:ef:43:d1:22:d7:d4:5f:60:d4:f5:d4:a2:5a:6d:
aa:a7:cc:b9:ee:10:4c:51:2b:72:0f:2a:98:93:4f:b0:b7:e8:
1e:f1:ef:23:fe:33:df:48:85:c3:14:36:d8:eb:7c:f1:55:f0:
ac:5f:f1:72:28:31:bb:4f:c9:a2:66:1f:6d:5a:8b:7f:c5:5f:
fb:8e:08:37:56:88:ee:5d:82:cd:7b:b6:2d:63:59:c1:33:d7:
6a:40:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:36 2026 by rpki-client