Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/OM_26orS96O7IxjLRkR-8mfNyik.roa
File: OM_26orS96O7IxjLRkR-8mfNyik.roa (raw, json)
Hash identifier: raVQFuAylQhSr/KsYMCvJOvnAM/LXL/Qq44bFmqXTdI=
Subject key identifier: 38:CF:F6:EA:8A:D2:F7:A3:BB:23:18:CB:46:44:7E:F2:67:CD:CA:29
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019E1675C3DDE728CEF9491DB23E36FD4F28
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/OM_26orS96O7IxjLRkR-8mfNyik.roa
Signing time: Mon 11 May 2026 09:54:37 +0000
ROA not before: Mon 11 May 2026 09:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12876
IP address blocks: 51.15.0.0/16 maxlen: 16
51.15.0.0/17 maxlen: 17
51.15.160.0/19 maxlen: 24
51.158.0.0/15 maxlen: 15
51.158.36.0/23 maxlen: 23
51.158.54.0/23 maxlen: 23
51.158.60.0/22 maxlen: 22
51.158.128.0/17 maxlen: 17
51.159.0.0/17 maxlen: 24
51.159.128.0/18 maxlen: 18
51.159.194.0/23 maxlen: 23
51.159.196.0/22 maxlen: 22
51.159.201.0/24 maxlen: 24
51.159.210.0/23 maxlen: 23
51.159.212.0/22 maxlen: 22
51.159.220.0/22 maxlen: 22
51.159.224.0/19 maxlen: 19
62.4.0.0/19 maxlen: 19
62.210.0.0/16 maxlen: 24
91.235.79.0/24 maxlen: 24
151.115.0.0/16 maxlen: 16
151.115.0.0/17 maxlen: 18
151.115.128.0/19 maxlen: 19
151.115.160.0/19 maxlen: 19
151.115.192.0/20 maxlen: 24
151.115.208.0/20 maxlen: 20
151.115.224.0/19 maxlen: 19
163.172.0.0/16 maxlen: 16
163.172.20.0/22 maxlen: 22
163.172.79.0/24 maxlen: 24
163.172.208.0/20 maxlen: 20
195.154.0.0/16 maxlen: 24
212.47.224.0/19 maxlen: 19
212.83.128.0/19 maxlen: 19
212.83.160.0/19 maxlen: 19
212.129.0.0/18 maxlen: 18
2001:bc8::/32 maxlen: 38
2001:bc8:1200::/39 maxlen: 48
2001:bc8:1201::/48 maxlen: 48
2001:bc8:1400::/38 maxlen: 38
2001:bc8:1800::/38 maxlen: 38
2001:bc8:1c00::/38 maxlen: 38
2001:bc8:2000::/35 maxlen: 48
2001:bc8:5400::/40 maxlen: 48
2001:bc8:e800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:75:c3:dd:e7:28:ce:f9:49:1d:b2:3e:36:fd:4f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: May 11 09:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38cff6ea8ad2f7a3bb2318cb46447ef267cdca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:fa:b7:12:71:2a:30:78:1f:5e:70:69:30:
71:8b:e3:fe:80:bb:bc:1b:51:b1:8d:32:cc:76:74:
a7:2f:f9:dc:9d:5e:d0:2b:78:64:66:3d:b0:9c:fa:
5f:a6:c8:50:1f:ab:12:17:9f:cd:a8:7d:59:8d:41:
16:77:3d:55:92:c8:be:7d:7a:c9:25:2f:f0:9f:6b:
a8:86:2f:d5:ce:58:64:9c:6a:e0:8a:da:e1:59:34:
47:5b:f7:be:54:4c:5f:e9:e1:6c:98:b8:36:f8:39:
0a:81:41:0b:8e:98:3b:84:a8:a7:2d:3e:6f:e5:ff:
fe:f7:1e:9c:93:dd:c8:33:00:aa:08:fe:05:de:ed:
76:89:b1:9b:b1:46:15:e8:99:4b:ef:32:67:af:39:
fb:30:cd:a4:ad:3d:83:7e:22:93:d7:1f:e3:83:73:
9b:17:57:1c:e4:64:6b:92:ce:46:c3:d0:6e:af:e2:
d3:5c:fd:59:38:8a:4f:d7:cb:20:f2:15:cc:4f:b8:
65:c8:f2:77:c1:51:55:7b:bc:3b:b4:0a:d7:27:32:
04:cb:a4:f9:d3:a9:00:51:4f:f2:82:0e:46:38:8d:
27:5a:c2:8e:6f:1d:59:3e:e5:47:f2:1e:6b:df:b1:
74:c0:17:d3:e1:9d:c8:0e:b3:a6:4c:b7:7b:97:bb:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CF:F6:EA:8A:D2:F7:A3:BB:23:18:CB:46:44:7E:F2:67:CD:CA:29
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/OM_26orS96O7IxjLRkR-8mfNyik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.15.0.0/16
51.158.0.0/15
62.4.0.0/19
62.210.0.0/16
91.235.79.0/24
151.115.0.0/16
163.172.0.0/16
195.154.0.0/16
212.47.224.0/19
212.83.128.0/18
212.129.0.0/18
IPv6:
2001:bc8::/32
Signature Algorithm: sha256WithRSAEncryption
b6:95:86:99:19:07:75:95:7f:bc:93:37:22:2e:07:cc:da:40:
ac:3f:fb:68:7c:88:f0:4b:56:1b:80:07:fa:89:3d:cc:52:59:
d5:8d:08:ce:f1:ea:ec:2a:ed:3c:fa:88:64:c8:69:a3:3d:47:
02:12:f7:e6:8b:95:b5:b5:99:b5:e1:48:af:69:fd:ac:19:7d:
9c:47:ec:da:c8:3f:d2:b6:f4:25:d3:88:36:1a:ae:30:13:e8:
78:92:06:97:69:00:03:0f:bf:71:2b:7e:b8:00:10:89:74:75:
65:6a:4f:56:1b:94:b5:2e:f5:9c:85:70:9a:09:bb:b9:8b:73:
3d:8f:69:5c:80:ac:c4:49:9f:9f:b4:e5:9f:aa:39:74:83:25:
56:ca:10:5a:39:b2:da:14:5a:fd:cf:3f:e0:88:76:0d:e1:e5:
63:63:a3:96:42:57:4f:ee:17:d8:2b:99:9f:ae:40:27:36:dc:
26:e8:90:08:a7:cf:dc:9a:a0:f7:9e:a0:00:31:cf:5a:e3:d2:
80:e7:01:c1:bf:34:89:15:b5:36:01:1b:c5:23:47:6c:1a:ed:
a2:d6:82:9e:6a:80:3e:94:c0:69:28:21:41:1c:73:20:42:26:
11:f8:cf:1f:ee:4b:fa:79:1b:1f:63:1a:a8:dd:23:27:4f:72:
6a:ed:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:03 2026 by rpki-client