Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OM5ZBrbPLgoPwiAlaFnYlBcnQC8.roa
File: OM5ZBrbPLgoPwiAlaFnYlBcnQC8.roa (raw, json)
Hash identifier: gV4Iv/svOsJRvctoaviCqu3WyMj1pjqempYRtPIOybg=
Subject key identifier: 38:CE:59:06:B6:CF:2E:0A:0F:C2:20:25:68:59:D8:94:17:27:40:2F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CA8C048760160566919315AC644C8EBC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OM5ZBrbPLgoPwiAlaFnYlBcnQC8.roa
Signing time: Tue 22 Sep 2026 19:16:08 +0000
ROA not before: Tue 22 Sep 2026 19:16:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.109.102.0/24 maxlen: 24
82.109.144.0/24 maxlen: 24
82.109.195.0/24 maxlen: 24
82.110.51.0/24 maxlen: 24
82.110.105.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.124.0/24 maxlen: 24
87.83.166.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.223.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
212.134.138.0/24 maxlen: 24
212.134.139.0/24 maxlen: 24
212.134.146.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.182.0/24 maxlen: 24
212.134.192.0/24 maxlen: 24
212.134.193.0/24 maxlen: 24
212.134.194.0/24 maxlen: 24
212.134.200.0/24 maxlen: 24
212.134.230.0/24 maxlen: 24
212.134.236.0/24 maxlen: 24
212.135.29.0/24 maxlen: 24
212.135.68.0/24 maxlen: 24
212.135.69.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.206.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:8c:04:87:60:16:05:66:91:93:15:ac:64:4c:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 19:16:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38ce5906b6cf2e0a0fc220256859d8941727402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:4f:38:a5:89:60:ea:bb:2f:72:4b:26:ef:
c0:2e:5b:77:ba:a3:85:d1:0c:b6:a2:3a:f3:f5:70:
88:7d:1c:f1:23:a7:e0:00:47:4a:7c:82:7f:e4:e5:
29:cb:39:6b:3c:e3:58:17:e1:96:a1:f7:80:de:9a:
42:60:86:ea:83:0c:29:a8:aa:31:e9:17:9c:bd:ce:
dd:e0:e0:fc:92:c2:88:cc:97:7d:0d:20:e5:b1:f9:
9e:bc:6b:e0:ce:a9:ef:3e:ba:7b:0b:52:7b:17:c1:
c4:f2:23:4b:1b:02:2c:47:e4:7a:2d:d8:de:c7:33:
72:0c:a3:c4:03:78:8f:af:48:bd:34:5e:da:15:6d:
67:80:d8:fd:e7:d2:5f:80:20:db:41:b3:d1:28:d7:
7b:b6:94:3c:32:a0:6b:55:2a:b1:d9:fe:f0:77:46:
f3:f6:b6:c4:36:6c:5a:d8:4a:75:45:2f:25:3c:b0:
61:d6:bf:eb:c0:07:ec:f5:5d:5f:79:e7:11:9a:a9:
28:07:d0:df:05:a6:20:dc:1a:2e:96:0d:64:38:44:
e7:07:ad:f9:4d:2e:4e:6f:c5:22:d2:5f:af:8d:fd:
b3:5c:cb:c3:eb:57:14:fe:f1:a3:ef:7f:00:9d:78:
4d:4b:b3:45:d0:2b:35:4f:c8:41:d7:fc:c0:0d:03:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CE:59:06:B6:CF:2E:0A:0F:C2:20:25:68:59:D8:94:17:27:40:2F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OM5ZBrbPLgoPwiAlaFnYlBcnQC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.138.0/24
82.109.102.0/24
82.109.144.0/24
82.109.195.0/24
82.110.51.0/24
82.110.105.0/24
87.82.233.0/24
87.82.241.0/24
87.82.243.0/24
87.82.247.0/24
87.83.124.0/24
87.83.166.0/24
87.84.130.0/24
87.84.134.0/24
87.84.223.0/24
87.85.77.0/24
212.134.138.0/23
212.134.146.0/24
212.134.155.0/24
212.134.163.0/24
212.134.182.0/24
212.134.192.0-212.134.194.255
212.134.200.0/24
212.134.230.0/24
212.134.236.0/24
212.135.29.0/24
212.135.68.0/23
212.135.129.0/24
212.135.135.0/24
212.135.206.0/24
212.135.251.0-212.135.252.255
Signature Algorithm: sha256WithRSAEncryption
ae:b0:60:25:11:9d:3a:98:34:af:c8:3a:ff:91:c6:6c:72:f3:
3e:58:99:e5:e0:90:b5:fa:b7:72:7c:b9:a9:cf:61:d1:96:28:
c1:2e:2c:81:22:22:c9:7a:42:3c:d5:4a:2b:2e:7e:ef:f7:3c:
9f:45:7a:9a:c7:34:45:83:97:1f:68:ec:e0:8c:a2:60:42:15:
c0:5a:f4:7d:ad:ed:8b:c9:45:1b:b1:b0:8a:71:7d:dd:1b:92:
12:94:7a:01:8c:6c:e8:e4:f4:7c:1b:ae:41:99:93:2f:f9:9c:
89:68:ce:22:84:78:b7:21:30:61:38:eb:11:c0:8d:33:af:ce:
e4:74:4b:20:86:bf:cc:cd:df:e0:e8:17:3e:10:dc:82:31:2a:
c6:24:f7:dc:52:67:05:c9:5f:59:8c:67:0b:f6:cf:cd:58:48:
77:60:d9:9f:ce:4e:cd:b9:3d:a5:6e:0b:c5:bb:33:40:25:1c:
b3:ab:a4:bc:b1:12:25:08:40:b9:ac:9c:db:b1:92:0d:42:0b:
75:f6:3c:78:a6:8a:60:5e:8d:52:a9:f7:ed:48:9d:49:21:4f:
82:02:f2:6c:71:5d:04:78:65:9c:52:de:24:e9:f5:8d:da:79:
49:25:db:86:54:50:ef:28:cc:3a:af:ae:05:c6:b9:6e:46:77:
02:6d:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:55 2026 by rpki-client