Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OmbWcV8Is17KRH1bkJl3M2Qzsac.roa
File: OmbWcV8Is17KRH1bkJl3M2Qzsac.roa (raw, json)
Hash identifier: DxjOYPF3pKacwRAu46Nx5s+cWNlUintxcOJ8K5m9u5o=
Subject key identifier: 3A:66:D6:71:5F:08:B3:5E:CA:44:7D:5B:90:99:77:33:64:33:B1:A7
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F90E1073360CF2A885E459DBC56FB889B
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OmbWcV8Is17KRH1bkJl3M2Qzsac.roa
Signing time: Thu 23 Jul 2026 21:28:14 +0000
ROA not before: Thu 23 Jul 2026 21:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.116.0/24 maxlen: 24
191.44.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:e1:07:33:60:cf:2a:88:5e:45:9d:bc:56:fb:88:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 23 21:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a66d6715f08b35eca447d5b909977336433b1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:a4:d4:04:39:07:96:dd:a4:2c:0a:a9:06:
01:38:01:c7:f1:b3:92:d0:20:14:b2:da:c8:e0:b9:
4a:7d:80:bb:71:78:61:89:08:b6:97:00:29:1c:64:
28:f6:af:b0:16:c2:fd:60:c0:3a:ef:d2:f2:76:78:
56:1e:08:ba:42:0a:e7:e3:a2:4c:e2:37:4a:7d:5e:
af:4a:19:ae:bb:16:2e:d0:f0:33:82:4c:a4:24:15:
63:97:82:5a:8c:65:72:d0:41:e4:8d:ba:4c:d0:b7:
d1:2d:85:26:9d:f4:1e:7a:79:c7:38:a1:ed:ee:ff:
49:c0:e5:c4:04:5a:33:6f:83:58:f8:dd:96:9b:83:
6d:a3:ce:98:c0:19:8c:a7:b4:48:91:26:73:19:d7:
e3:7b:65:5f:d3:a3:37:8e:96:f0:19:0d:18:ba:33:
ec:2c:cd:1a:ee:07:5d:e8:cf:52:dc:80:e9:a4:90:
37:9f:d7:59:58:9e:98:8f:95:13:61:39:7e:fe:bc:
e1:c2:4b:ab:51:3d:de:cc:47:46:b0:73:94:a3:ae:
6f:28:d9:f6:d2:6e:95:aa:03:63:ab:2b:f4:77:d1:
0d:a0:ec:77:37:47:8e:f7:65:7c:58:f3:c5:30:e1:
76:9b:25:6b:89:3f:13:2f:26:7a:2c:9d:a1:4e:46:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:66:D6:71:5F:08:B3:5E:CA:44:7D:5B:90:99:77:33:64:33:B1:A7
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OmbWcV8Is17KRH1bkJl3M2Qzsac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.116.0/24
191.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ce:a0:d7:a8:66:5a:99:8a:71:78:d2:6a:f8:78:eb:af:ee:
31:ed:a2:84:99:3a:aa:98:29:4c:49:e0:40:c6:47:1a:40:37:
92:ab:de:7f:7d:d7:1b:1e:cd:d5:9c:ec:44:34:c3:25:31:33:
15:f9:3e:8c:91:14:63:21:15:8f:5d:d1:b6:8b:b2:91:49:60:
21:3e:8e:96:f0:41:2c:07:a5:42:8c:9c:7c:59:72:54:d6:42:
b2:44:24:84:7d:c5:92:16:cc:86:8f:22:e2:51:78:77:73:15:
81:be:05:e0:28:29:11:f2:d5:06:07:64:3a:71:c8:6c:e3:ec:
4e:b1:08:6e:a8:bd:d0:8e:bb:02:c4:61:d6:c6:d9:d3:c4:85:
71:35:2d:da:b8:dd:47:eb:1f:8f:dc:46:eb:14:42:18:21:e4:
14:b7:bc:db:5a:e1:60:50:8d:50:52:d7:2d:45:a8:6f:e6:54:
c3:16:b8:a9:fc:f3:8f:42:24:ff:c9:4b:99:3c:99:8e:eb:10:
71:f6:b9:35:d0:a8:53:28:94:a4:5b:95:e3:a7:99:0e:d0:70:
5b:5e:6c:9e:b9:c8:22:52:04:13:9b:95:50:80:c3:7a:af:ad:
7e:a3:1d:14:47:33:06:9d:aa:7f:98:34:c2:a2:43:6e:f4:0a:
c7:b9:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:03 2026 by rpki-client