Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/omW_Fs0tYuvVg5jl-ur3YHIXTek.roa
File: omW_Fs0tYuvVg5jl-ur3YHIXTek.roa (raw, json)
Hash identifier: OK3YuXrzdmEYOQNnrc6EQOUxYY3Sw2eMb0iERf3GbRw=
Subject key identifier: A2:65:BF:16:CD:2D:62:EB:D5:83:98:E5:FA:EA:F7:60:72:17:4D:E9
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019CE569A2199727F9C1E4053FE6A6BA093F
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/omW_Fs0tYuvVg5jl-ur3YHIXTek.roa
Signing time: Fri 13 Mar 2026 04:17:11 +0000
ROA not before: Fri 13 Mar 2026 04:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 212.116.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:69:a2:19:97:27:f9:c1:e4:05:3f:e6:a6:ba:09:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 13 04:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a265bf16cd2d62ebd58398e5faeaf76072174de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ba:45:bc:80:46:83:69:35:fe:96:11:bc:54:
ae:89:b0:11:92:66:7e:30:06:da:97:76:d7:1b:bb:
0f:14:cb:89:f0:6e:61:ac:e9:4f:54:73:40:e1:26:
7e:17:07:da:24:c1:eb:02:e3:34:b3:d6:06:bd:7e:
9b:86:24:b2:68:64:e5:17:b4:e9:31:9f:8a:ff:48:
b2:65:ef:82:55:e6:4c:b3:9b:61:85:d7:72:d8:2b:
b1:ff:97:b4:fb:b0:30:dd:46:8a:38:cf:07:65:37:
47:f3:7b:c0:3f:c9:a6:be:ac:c0:43:b4:fc:66:b6:
bb:d6:1f:d5:95:75:cf:60:e9:64:0a:40:08:17:f3:
5f:00:e4:77:ab:de:e4:db:98:34:6a:4e:24:a5:56:
d4:fd:b3:ad:28:c6:6f:3f:e0:99:86:4f:17:4c:48:
f5:3c:01:1e:76:e7:72:88:83:7c:2b:31:71:27:fb:
e2:bc:d4:c1:c0:ac:79:9a:b9:65:f1:3c:3d:ad:d7:
d8:b0:7e:91:2a:1e:e5:0b:2e:61:28:7a:d6:a8:cb:
fd:88:6d:a7:07:f2:69:69:e1:1e:02:b4:16:e0:f5:
76:8c:9a:b0:ca:55:69:37:c1:ec:dd:31:e8:7c:8e:
f7:38:28:ff:3a:74:01:de:e6:ae:5c:de:d2:a8:ea:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:BF:16:CD:2D:62:EB:D5:83:98:E5:FA:EA:F7:60:72:17:4D:E9
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/omW_Fs0tYuvVg5jl-ur3YHIXTek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5b:68:71:95:63:6e:f0:db:1e:15:d3:a9:d5:31:8e:9c:75:
b9:29:16:20:c5:74:bf:77:a3:92:8e:d6:4c:06:03:55:7e:50:
24:69:0d:bf:82:09:cb:c3:c6:e6:08:ea:7f:2f:be:9c:42:9e:
8e:b2:b1:a5:11:2c:a5:8c:10:bc:68:03:e1:e7:d4:1d:59:70:
98:f4:3a:7f:c2:a3:3d:6e:f6:78:db:57:53:da:f5:dc:83:9f:
c6:8a:22:f1:7e:f1:96:66:1b:16:0e:43:3d:33:69:62:07:69:
38:9b:f3:cb:51:12:83:79:1f:1e:35:5f:2b:06:85:3e:de:0a:
9f:78:e2:cd:16:5e:72:0a:db:63:0d:bd:e0:6a:b0:99:59:82:
66:fc:f2:c5:7a:61:98:1a:dc:81:92:9c:e4:4e:16:6f:65:d5:
30:1e:d4:d8:af:58:c8:2e:a6:2f:68:d1:36:09:58:8e:7c:2b:
e0:66:f0:13:b0:28:6b:ca:4c:ec:e6:84:1a:6f:66:20:8b:a4:
1d:07:7e:b6:f0:77:b9:bd:06:aa:df:b3:b6:1d:e6:0b:dc:e8:
84:f8:c4:df:e4:c6:62:54:39:f5:ce:14:a8:1b:44:8e:29:51:
71:09:6c:5a:cf:31:09:ce:aa:70:14:c5:4d:47:d3:00:9d:92:
7a:d3:d1:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzlaaIZlyf5weQFP+amugk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjYwMzEzMDQxNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjY1YmYxNmNkMmQ2MmViZDU4Mzk4ZTVmYWVhZjc2MDcyMTc0ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bpFvIBGg2k1/pYRvFSuibARkmZ+
MAbal3bXG7sPFMuJ8G5hrOlPVHNA4SZ+FwfaJMHrAuM0s9YGvX6bhiSyaGTlF7Tp
MZ+K/0iyZe+CVeZMs5thhddy2Cux/5e0+7Aw3UaKOM8HZTdH83vAP8mmvqzAQ7T8
Zra71h/VlXXPYOlkCkAIF/NfAOR3q97k25g0ak4kpVbU/bOtKMZvP+CZhk8XTEj1
PAEedudyiIN8KzFxJ/vivNTBwKx5mrll8Tw9rdfYsH6RKh7lCy5hKHrWqMv9iG2n
B/JpaeEeArQW4PV2jJqwylVpN8Hs3THofI73OCj/OnQB3uauXN7SqOo60QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJlvxbNLWLr1YOY5frq92ByF03pMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvb21XX0ZzMHRZdXZWZzVqbC11cjNZSElYVGVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HT1MA0G
CSqGSIb3DQEBCwUAA4IBAQAeW2hxlWNu8NseFdOp1TGOnHW5KRYgxXS/d6OSjtZM
BgNVflAkaQ2/ggnLw8bmCOp/L76cQp6OsrGlESyljBC8aAPh59QdWXCY9Dp/wqM9
bvZ421dT2vXcg5/GiiLxfvGWZhsWDkM9M2liB2k4m/PLURKDeR8eNV8rBoU+3gqf
eOLNFl5yCttjDb3garCZWYJm/PLFemGYGtyBkpzkThZvZdUwHtTYr1jILqYvaNE2
CViOfCvgZvATsChrykzs5oQab2Ygi6QdB3628He5vQaq37O2HeYL3OiE+MTf5MZi
VDn1zhSoG0SOKVFxCWxazzEJzqpwFMVNR9MAnZJ609Gb
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:44 2026 by rpki-client