Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/OsfWj05c-iGN6l9IpGbRGk4oVig.roa
File: OsfWj05c-iGN6l9IpGbRGk4oVig.roa (raw, json)
Hash identifier: YWjBM3xccwChcedJpDWQLAp5v1TPSpBbXsnMEo1paQ0=
Subject key identifier: 3A:C7:D6:8F:4E:5C:FA:21:8D:EA:5F:48:A4:66:D1:1A:4E:28:56:28
Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial: 019D250C08A0B6FC158C30A910E94CAB8C56
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/OsfWj05c-iGN6l9IpGbRGk4oVig.roa
Signing time: Wed 25 Mar 2026 12:50:38 +0000
ROA not before: Wed 25 Mar 2026 12:50:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201271
IP address blocks: 158.233.224.0/24 maxlen: 24
158.233.227.0/24 maxlen: 24
158.233.228.0/23 maxlen: 23
158.233.228.0/24 maxlen: 24
158.233.229.0/24 maxlen: 24
158.233.230.0/23 maxlen: 23
158.233.230.0/24 maxlen: 24
158.233.231.0/24 maxlen: 24
158.233.232.0/24 maxlen: 24
158.233.242.0/23 maxlen: 23
158.233.242.0/24 maxlen: 24
158.233.243.0/24 maxlen: 24
158.233.244.0/23 maxlen: 23
158.233.244.0/24 maxlen: 24
158.233.245.0/24 maxlen: 24
158.233.246.0/23 maxlen: 23
158.233.246.0/24 maxlen: 24
158.233.247.0/24 maxlen: 24
158.233.248.0/23 maxlen: 23
158.233.248.0/24 maxlen: 24
158.233.249.0/24 maxlen: 24
158.233.250.0/23 maxlen: 23
158.233.250.0/24 maxlen: 24
158.233.251.0/24 maxlen: 24
2001:67c:2af0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:0c:08:a0:b6:fc:15:8c:30:a9:10:e9:4c:ab:8c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
Validity
Not Before: Mar 25 12:50:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ac7d68f4e5cfa218dea5f48a466d11a4e285628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:5b:4d:e0:37:ae:ea:97:c1:67:dc:70:63:
47:e4:88:5c:98:89:93:6c:b3:00:0b:06:a6:1a:21:
99:29:5a:53:b9:61:f7:93:cd:c2:72:c8:ba:f3:68:
32:8c:90:d0:e2:94:88:11:0c:b9:7c:95:7f:ba:51:
e6:0a:bd:4f:91:61:45:5e:5e:bf:af:4d:79:5f:5b:
85:f0:b8:20:93:13:cc:a7:c5:cb:01:14:11:d1:c9:
cb:b1:36:50:0e:bf:04:70:1f:f6:3d:21:b2:db:e9:
ea:98:af:1e:be:f4:4c:89:4b:aa:5f:26:22:83:bd:
a7:16:85:86:9a:ad:7b:90:0d:60:bb:14:96:65:02:
43:02:90:63:61:90:b1:59:0a:a0:f5:3a:2d:21:d3:
5c:ec:64:8f:81:69:ed:82:f0:3f:fc:13:2d:e0:0f:
9d:fd:6c:ae:fd:2c:fd:0b:44:8b:e1:56:f6:ac:20:
bf:c8:20:6b:82:5e:3d:2e:e8:66:83:59:0f:49:68:
c3:0c:0b:1d:eb:b6:00:e8:fe:72:af:bf:ba:f7:3d:
10:a7:f1:f6:04:c4:c8:04:75:c7:47:a4:11:ec:af:
a5:8c:5e:3d:5d:7f:71:71:1e:ca:8b:12:3e:8a:b3:
81:d9:9e:f9:a8:58:93:75:43:a0:15:63:87:c5:26:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:D6:8F:4E:5C:FA:21:8D:EA:5F:48:A4:66:D1:1A:4E:28:56:28
X509v3 Authority Key Identifier:
keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/OsfWj05c-iGN6l9IpGbRGk4oVig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.233.224.0/24
158.233.227.0-158.233.232.255
158.233.242.0-158.233.251.255
IPv6:
2001:67c:2af0::/48
Signature Algorithm: sha256WithRSAEncryption
0c:c6:42:c4:55:65:5a:e4:f2:64:0a:c9:67:94:26:cb:26:f8:
a3:8d:dd:b3:3a:62:30:d5:f0:0b:28:e6:40:f8:bb:04:fc:84:
48:b9:75:e1:92:9a:2d:07:93:89:82:cc:ac:83:3e:50:76:a5:
e5:79:93:51:ae:14:5d:bb:e8:05:7e:f8:6d:bd:5a:f2:67:cb:
b5:6b:1e:35:cf:c7:a4:65:51:a7:5a:54:f6:ee:fe:d8:71:0e:
82:29:22:5f:e8:7d:1a:6b:df:64:87:f1:52:c0:75:30:c5:4c:
0c:a3:10:65:02:a7:9c:17:9c:6b:fa:97:8b:c4:1d:0d:c7:9a:
d8:0d:54:88:3c:59:c3:4c:21:81:55:ce:2c:ba:1d:c7:c7:f0:
07:16:5c:0b:65:55:24:95:30:aa:67:3d:83:f5:85:3a:d1:de:
d5:be:48:58:32:a5:86:d1:e0:08:e7:dd:15:f3:39:ab:51:4b:
e1:45:a4:14:e0:d8:0e:9b:ca:09:41:23:97:90:d2:ae:24:1a:
b2:4b:8e:77:9f:33:88:50:43:5b:3f:6c:ca:9c:08:95:84:2d:
01:9f:48:8c:6e:05:b4:bd:c7:44:0e:f7:33:a2:6b:6d:ed:e7:
97:db:ce:e3:6c:0d:00:21:47:87:0d:64:f6:32:83:61:80:f9:
20:10:92:10
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZ0lDAigtvwVjDCpEOlMq4xWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjgxNDM1ZWQxMzc4OTg5NWYzNzVkYzM0ZDA0Y2U5MWFj
YTQ3NDQwHhcNMjYwMzI1MTI1MDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWM3ZDY4ZjRlNWNmYTIxOGRlYTVmNDhhNDY2ZDExYTRlMjg1NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZJbTeA3ruqXwWfccGNH5IhcmImT
bLMACwamGiGZKVpTuWH3k83Ccsi682gyjJDQ4pSIEQy5fJV/ulHmCr1PkWFFXl6/
r015X1uF8LggkxPMp8XLARQR0cnLsTZQDr8EcB/2PSGy2+nqmK8evvRMiUuqXyYi
g72nFoWGmq17kA1guxSWZQJDApBjYZCxWQqg9TotIdNc7GSPgWntgvA//BMt4A+d
/Wyu/Sz9C0SL4Vb2rCC/yCBrgl49Luhmg1kPSWjDDAsd67YA6P5yr7+69z0Qp/H2
BMTIBHXHR6QR7K+ljF49XX9xcR7KixI+irOB2Z75qFiTdUOgFWOHxSZjjwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFDrH1o9OXPohjepfSKRm0RpOKFYoMB8GA1UdIwQY
MBaAFFv4FDXtE3iYlfN13DTQTOkaykdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEt
NDhlNGNjNmIzM2EzLzEvT3NmV2owNWMtaUdONmw5SXBHYlJHazRvVmlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEtNDhlNGNjNmIzM2Ez
LzEvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAoBAIAATAiAwQAnungMAwD
BACe6eMDBACe6egwDAMEAZ7p8gMEAp7p+DAPBAIAAjAJAwcAIAEGfCrwMA0GCSqG
SIb3DQEBCwUAA4IBAQAMxkLEVWVa5PJkCslnlCbLJvijjd2zOmIw1fALKOZA+LsE
/IRIuXXhkpotB5OJgsysgz5QdqXleZNRrhRdu+gFfvhtvVryZ8u1ax41z8ekZVGn
WlT27v7YcQ6CKSJf6H0aa99kh/FSwHUwxUwMoxBlAqecF5xr+peLxB0Nx5rYDVSI
PFnDTCGBVc4suh3Hx/AHFlwLZVUklTCqZz2D9YU60d7VvkhYMqWG0eAI590V8zmr
UUvhRaQU4NgOm8oJQSOXkNKuJBqyS453nzOIUENbP2zKnAiVhC0Bn0iMbgW0vcdE
Dvczomtt7eeX287jbA0AIUeHDWT2MoNhgPkgEJIQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:28 2026 by rpki-client