Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Om4Mw-Cah0mJ0a1vrzsIQr_-j1g.roa
File: Om4Mw-Cah0mJ0a1vrzsIQr_-j1g.roa (raw, json)
Hash identifier: ysPnuWEsugYPL3AukeQ5OUOGn22BW40XHMQ0QQuNygs=
Subject key identifier: 3A:6E:0C:C3:E0:9A:87:49:89:D1:AD:6F:AF:3B:08:42:BF:FE:8F:58
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F4C6262D7A96E0D2B5D6AED99F8C848BB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Om4Mw-Cah0mJ0a1vrzsIQr_-j1g.roa
Signing time: Fri 10 Jul 2026 14:15:43 +0000
ROA not before: Fri 10 Jul 2026 14:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215647
IP address blocks: 158.173.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:62:62:d7:a9:6e:0d:2b:5d:6a:ed:99:f8:c8:48:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 10 14:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a6e0cc3e09a874989d1ad6faf3b0842bffe8f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:9a:17:59:43:b9:b9:9d:ce:fb:e8:37:0b:
23:88:88:42:92:14:0a:7c:8b:dc:f1:14:28:d6:ca:
e5:72:71:70:e0:59:8b:f7:1c:ac:28:77:86:37:ee:
e4:e4:a1:7b:15:92:71:50:34:5f:c3:b5:8f:7a:d5:
46:58:12:03:7a:92:02:d6:5e:66:50:4b:0a:bd:20:
02:4a:4b:ad:cc:85:74:06:70:58:3f:b4:a9:71:87:
08:a0:c2:c5:a0:88:0c:dd:71:d8:50:7b:0f:a0:73:
d7:b8:92:7d:9f:0a:c4:72:fa:bf:dc:85:ca:77:93:
d4:8e:ba:1f:e2:26:b4:40:79:70:f5:28:49:bd:1d:
67:da:50:91:4e:46:69:23:c3:b8:e9:b3:a2:26:a1:
4b:33:34:d4:fd:0f:99:28:7b:7d:55:3d:6c:ba:5a:
07:a5:ff:80:bd:25:d7:6b:96:3a:54:44:aa:bf:69:
52:c4:e2:7a:36:68:8e:0d:f0:6d:eb:88:cf:a4:38:
dc:be:ad:38:2e:65:8e:4e:77:94:df:39:7e:f4:ef:
ff:f3:41:bf:ec:93:4b:cb:9d:87:71:13:a4:47:3e:
4d:d7:9e:48:b8:90:40:04:48:40:8d:4b:a2:93:64:
05:47:6d:32:dd:55:19:63:30:2d:31:08:61:08:40:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6E:0C:C3:E0:9A:87:49:89:D1:AD:6F:AF:3B:08:42:BF:FE:8F:58
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Om4Mw-Cah0mJ0a1vrzsIQr_-j1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:46:a8:a2:6e:79:ef:09:85:56:2c:c9:d3:c5:ba:df:cd:40:
85:9a:78:55:9a:12:96:d9:98:f7:9a:b6:b7:14:ee:4a:30:c6:
9b:a8:85:4d:27:d4:ef:09:85:ee:82:18:9e:43:34:eb:be:c0:
49:f7:14:7b:69:32:16:14:73:b2:ed:72:99:3a:86:27:1a:9e:
f4:f3:d3:80:bf:d6:26:72:eb:af:50:67:b8:9f:90:ce:f0:31:
5e:31:a0:52:9b:b4:02:fd:af:f7:45:5c:b7:b0:44:a7:4c:74:
2b:58:a9:d8:48:12:c4:4c:7d:37:f6:5a:6d:a7:df:b8:e0:72:
0e:d9:90:94:25:4b:62:f5:c9:ba:57:3a:0d:f6:52:d0:1e:4c:
61:c4:e7:42:41:c4:f2:58:3b:cc:c8:2c:f5:1c:f5:eb:8b:3b:
d6:2f:bd:02:2f:64:b4:7c:14:fe:6f:59:56:d3:b5:88:47:ed:
27:0e:38:fa:24:2a:99:2b:ed:3f:70:10:87:53:03:c4:46:11:
5b:87:cb:5f:09:3b:f6:36:6a:f5:df:13:1f:80:8e:cf:24:61:
69:af:a3:ee:08:fb:8b:10:bd:7e:15:a1:37:3a:61:62:18:6a:
09:5d:f0:fc:17:1d:f5:8a:21:31:51:36:0f:f4:fe:16:40:1d:
9f:a7:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:49:16 2026 by rpki-client