Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/om5p04_tlXfJMGB92P4eEh0OiKs.roa
File: om5p04_tlXfJMGB92P4eEh0OiKs.roa (raw, json)
Hash identifier: FBr9vlAQSPFIJgy+baLk+yfoI07x1poW7LSr0scZ/NA=
Subject key identifier: A2:6E:69:D3:8F:ED:95:77:C9:30:60:7D:D8:FE:1E:12:1D:0E:88:AB
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A1A224728318DA0B892491E711FBCBC63D
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/om5p04_tlXfJMGB92P4eEh0OiKs.roa
Signing time: Tue 03 Nov 2026 16:01:00 +0000
ROA not before: Tue 03 Nov 2026 16:01:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 213.182.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:24:72:83:18:da:0b:89:24:91:e7:11:fb:cb:c6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Nov 3 16:01:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26e69d38fed9577c930607dd8fe1e121d0e88ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:00:93:be:58:30:1e:b7:a6:2d:62:e1:a1:
37:03:55:a8:3e:43:49:6a:fd:f5:e1:f1:13:84:83:
9c:1d:ca:c5:1e:22:e3:25:cb:da:5e:f9:f4:d1:c0:
33:a3:7a:7f:d0:ef:5a:31:54:f9:31:ac:26:bd:db:
c3:05:bf:57:d0:ad:e0:33:15:20:85:20:74:f8:2f:
52:e9:24:e9:be:7b:de:3b:04:f9:d3:a8:88:fc:65:
9c:92:9b:de:a2:c0:b8:53:3a:01:a1:cc:c0:2a:77:
20:1e:eb:fa:ca:08:d0:bf:0c:4d:6c:46:bb:7f:35:
cc:18:d4:d2:e5:9e:60:fa:01:47:c6:cd:a7:74:d5:
42:0d:aa:7b:8f:18:f4:5d:31:9f:77:02:a2:9e:1b:
d1:56:24:08:ec:7d:0d:7e:1d:2f:6d:47:ff:28:28:
31:41:5f:73:30:43:4a:56:59:50:96:f1:74:50:71:
5a:0e:f0:13:5f:60:ef:3a:ce:fb:ab:19:f8:3c:27:
c0:96:18:db:5f:bb:5d:dd:8d:43:a9:00:15:76:64:
85:01:46:51:f1:92:69:89:a0:14:45:00:ad:5e:bf:
f4:60:8f:e1:9e:8d:f4:68:3c:5c:73:9d:4e:8e:e2:
d8:9b:96:44:bb:ad:d3:c9:d8:f8:c8:07:cc:5e:e0:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:69:D3:8F:ED:95:77:C9:30:60:7D:D8:FE:1E:12:1D:0E:88:AB
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/om5p04_tlXfJMGB92P4eEh0OiKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bf:e5:1c:f5:07:1f:f1:bd:34:ad:1e:6c:70:59:f8:96:b9:
d1:b1:9c:21:1d:e0:22:ab:cf:d6:ed:78:6a:29:0f:08:2d:cf:
9f:ef:bb:57:22:9d:a1:92:a0:db:ea:2c:ef:d4:44:d9:17:a3:
94:63:be:e5:c6:c9:e5:f3:ef:6c:48:7d:79:79:8a:d2:85:96:
74:4c:fe:16:f9:76:45:40:4b:ce:34:b7:b3:5d:cc:e5:be:e3:
24:7c:99:a6:dd:9c:28:3b:26:af:cd:98:0b:4c:a0:67:14:5c:
1b:8b:4c:7d:1e:08:0c:95:e9:0c:0e:e1:19:19:dd:7c:a2:c0:
ee:88:20:5a:06:f9:a3:58:a5:10:06:0e:be:81:18:4d:3c:7b:
18:02:50:ed:8f:a1:41:a5:18:dd:71:ce:c6:78:4c:00:07:d3:
52:d1:f5:3d:d8:62:88:f3:59:ac:06:1d:ac:96:17:6b:e2:8b:
91:9c:f0:80:07:06:a8:9a:31:82:1c:23:af:7d:44:e9:2f:7f:
b1:b9:33:fc:c5:10:65:6e:2f:1d:46:1a:55:97:2d:00:74:a7:
fa:e0:bf:52:ef:6d:0a:a3:25:74:66:ea:ea:56:db:91:50:cd:
0c:95:c4:d8:40:16:1c:c3:3a:ae:7e:7a:c3:83:c8:a0:3b:cf:
58:ca:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:53 2026 by rpki-client