Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/om-nKui_fayhDA1uoheMadhYAck.roa
File: om-nKui_fayhDA1uoheMadhYAck.roa (raw, json)
Hash identifier: 5VCQ1e9kSPhuUfqYo6vIKYmQW1L0JcYRB86/4T+h6Sk=
Subject key identifier: A2:6F:A7:2A:E8:BF:7D:AC:A1:0C:0D:6E:A2:17:8C:69:D8:58:01:C9
Certificate issuer: /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial: 01A1A537E51CA517B8F74C1BC1ACC9E8FA6D
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/om-nKui_fayhDA1uoheMadhYAck.roa
Signing time: Wed 04 Nov 2026 06:21:06 +0000
ROA not before: Wed 04 Nov 2026 06:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214273
IP address blocks: 45.94.184.0/24 maxlen: 24
45.94.185.0/24 maxlen: 24
194.164.176.0/24 maxlen: 24
194.164.177.0/24 maxlen: 24
194.164.178.0/24 maxlen: 24
2a01:f680:10::/48 maxlen: 48
2a01:f680:11::/48 maxlen: 48
2a01:f680:12::/48 maxlen: 48
2a01:f680:20::/48 maxlen: 48
2a01:f680:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:37:e5:1c:a5:17:b8:f7:4c:1b:c1:ac:c9:e8:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Validity
Not Before: Nov 4 06:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26fa72ae8bf7daca10c0d6ea2178c69d85801c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:a9:59:79:2c:62:c6:44:95:1b:33:61:12:
f1:5e:49:fa:4e:b7:10:ee:fd:bd:27:1b:40:6d:79:
91:a2:45:0f:0f:ff:09:41:27:e6:ce:e0:77:21:42:
ee:c9:a9:32:4d:f9:86:67:71:ec:69:58:65:91:73:
71:b5:a9:a3:39:69:c3:5a:a0:be:2d:18:3b:79:95:
89:07:92:6a:7c:c8:34:0c:38:da:8b:fc:d1:ea:c7:
fa:15:3b:96:ff:38:ef:2f:76:f6:f1:73:e5:bd:c4:
cf:0b:6c:2a:86:12:2f:64:e5:6e:dc:78:3a:27:b8:
69:25:6c:67:da:32:c1:05:48:c6:42:3c:24:3c:88:
25:40:42:9f:ea:82:cf:ef:6f:2d:2f:7f:72:dd:ba:
79:6e:98:4d:5b:a6:5b:23:85:e8:fe:8f:ba:21:f4:
e1:87:42:01:c3:1a:64:36:cd:2d:d2:cb:22:04:0b:
04:bb:48:87:23:f0:ac:14:74:bc:90:1a:ff:6c:3a:
24:c1:30:78:ef:f0:87:f2:df:63:d5:d9:85:12:cd:
0f:6a:71:1e:6d:1b:a2:ed:df:67:72:c6:ff:2b:b1:
d5:21:18:c4:39:e8:79:2c:1a:1d:1c:2e:8c:b5:55:
43:56:5a:5e:30:6e:d7:d3:dd:05:f4:5a:13:53:7c:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:A7:2A:E8:BF:7D:AC:A1:0C:0D:6E:A2:17:8C:69:D8:58:01:C9
X509v3 Authority Key Identifier:
keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/om-nKui_fayhDA1uoheMadhYAck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.184.0/23
194.164.176.0-194.164.178.255
IPv6:
2a01:f680:10::-2a01:f680:12:ffff:ffff:ffff:ffff:ffff
2a01:f680:20::/47
Signature Algorithm: sha256WithRSAEncryption
99:8b:29:96:18:29:9c:ef:11:22:ea:67:59:8f:5d:72:c1:34:
59:19:06:89:60:ea:9e:85:49:d1:20:0d:3e:40:ce:36:f4:ff:
38:fd:13:ee:3e:4f:48:4e:01:07:51:c4:32:43:86:5b:24:26:
81:22:1a:19:a6:56:78:ae:f1:ec:74:d2:41:c0:05:82:eb:8f:
3d:3b:e2:96:66:82:fd:14:0e:00:9c:50:bb:2d:e2:c9:28:ed:
ab:07:3b:9b:94:5d:11:82:79:a0:95:59:8e:21:54:db:39:11:
26:f4:4f:03:cb:50:03:56:4c:6a:de:1e:49:49:9f:61:ae:c0:
83:09:da:da:26:47:a6:02:10:fe:eb:cc:d2:12:1a:a1:66:dc:
ef:e5:26:8e:ec:55:59:22:64:7f:b0:b9:f8:7f:f7:87:17:68:
03:5c:72:12:99:9e:b1:f9:90:a5:19:69:2e:44:ed:19:9d:54:
01:99:d4:51:5b:f2:77:53:a0:8e:d5:7d:06:1c:cc:2a:60:99:
c8:c5:79:67:c4:d5:83:55:4d:b2:8e:d2:fe:33:23:b5:d4:5b:
a3:d1:a3:c0:5d:f2:6d:87:f2:fb:d7:42:c8:c6:99:9d:df:a8:
e3:e4:14:64:6c:e6:44:5c:fd:73:3d:90:fc:46:7c:9f:2c:f8:
b3:20:70:f9
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAaGlN+UcpRe490wbwazJ6PptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2ZhYmIyYjVkNzhmZjlmYmJkYzFlMzdkZDM3YjZmYzM0
ZjExZDkwHhcNMjYxMTA0MDYyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjZmYTcyYWU4YmY3ZGFjYTEwYzBkNmVhMjE3OGM2OWQ4NTgwMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIqpWXksYsZElRszYRLxXkn6TrcQ
7v29JxtAbXmRokUPD/8JQSfmzuB3IULuyakyTfmGZ3HsaVhlkXNxtamjOWnDWqC+
LRg7eZWJB5JqfMg0DDjai/zR6sf6FTuW/zjvL3b28XPlvcTPC2wqhhIvZOVu3Hg6
J7hpJWxn2jLBBUjGQjwkPIglQEKf6oLP728tL39y3bp5bphNW6ZbI4Xo/o+6IfTh
h0IBwxpkNs0t0ssiBAsEu0iHI/CsFHS8kBr/bDokwTB47/CH8t9j1dmFEs0PanEe
bRui7d9ncsb/K7HVIRjEOeh5LBodHC6MtVVDVlpeMG7X090F9FoTU3zzNwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFKJvpyrov32soQwNbqIXjGnYWAHJMB8GA1UdIwQY
MBaAFOjPq7K114/5+73B433Te2/DTxHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgt
YjM3MDA4NGEyN2Y3LzEvb20tbkt1aV9mYXloREExdW9oZU1hZGhZQWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgtYjM3MDA4NGEyN2Y3
LzEvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAaBAIAATAUAwQBLV64MAwD
BATCpLADBADCpLIwIwQCAAIwHTASAwcEKgH2gAAQAwcAKgH2gAASAwcBKgH2gAAg
MA0GCSqGSIb3DQEBCwUAA4IBAQCZiymWGCmc7xEi6mdZj11ywTRZGQaJYOqehUnR
IA0+QM429P84/RPuPk9ITgEHUcQyQ4ZbJCaBIhoZplZ4rvHsdNJBwAWC6489O+KW
ZoL9FA4AnFC7LeLJKO2rBzublF0RgnmglVmOIVTbOREm9E8Dy1ADVkxq3h5JSZ9h
rsCDCdraJkemAhD+68zSEhqhZtzv5SaO7FVZImR/sLn4f/eHF2gDXHISmZ6x+ZCl
GWkuRO0ZnVQBmdRRW/J3U6CO1X0GHMwqYJnIxXlnxNWDVU2yjtL+MyO11Fuj0aPA
XfJth/L710LIxpmd36jj5BRkbOZEXP1zPZD8RnyfLPizIHD5
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:37 2026 by rpki-client