Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/OSxR7yWXlXGYKz7l57qWN2MkgtY.roa
File: OSxR7yWXlXGYKz7l57qWN2MkgtY.roa (raw, json)
Hash identifier: zf1564nEeAhmFYxKrhpVodFL6WhyuPNWB8KasXTcpQw=
Subject key identifier: 39:2C:51:EF:25:97:95:71:98:2B:3E:E5:E7:BA:96:37:63:24:82:D6
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 019B7C7FF860115C26B8F0AE810B8DA29050
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/OSxR7yWXlXGYKz7l57qWN2MkgtY.roa
Signing time: Fri 02 Jan 2026 02:18:40 +0000
ROA not before: Fri 02 Jan 2026 02:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8835
IP address blocks: 45.9.23.0/24 maxlen: 24
193.36.4.0/22 maxlen: 22
2a0b:6dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:f8:60:11:5c:26:b8:f0:ae:81:0b:8d:a2:90:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Jan 2 02:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=392c51ef25979571982b3ee5e7ba9637632482d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:7f:43:ab:a2:f4:0f:44:4d:3e:6a:e2:6c:
4f:a2:17:91:93:19:93:90:7c:ac:72:af:9b:c8:5b:
e3:f7:ab:08:2a:01:a9:05:52:f0:a6:4e:b3:60:23:
a8:fb:a4:77:76:b3:2c:69:71:8b:80:58:58:c6:f7:
72:a6:d0:6c:b0:b8:44:2d:98:ad:06:c7:4f:da:13:
ed:20:3f:38:1c:dd:d3:5d:47:45:63:23:81:8e:68:
44:76:88:ac:cd:be:db:32:ff:44:b7:60:02:d5:75:
39:2e:2e:9c:7d:cf:e1:26:6a:3b:38:e4:55:be:53:
3a:88:33:b8:34:39:b6:5e:ec:65:13:99:e5:05:82:
bc:3f:4d:b6:48:d1:68:2e:90:7c:6b:88:f8:8d:00:
4c:fb:97:24:14:d2:d7:ac:8b:fe:e6:2e:30:48:52:
66:b4:20:9a:47:76:8c:b4:b8:5e:c0:b2:df:de:3b:
55:02:4d:eb:2b:5d:89:d7:8a:0d:0f:60:8d:58:44:
05:00:11:00:5e:0f:4d:9b:df:29:00:fe:13:6f:06:
99:6f:ed:5a:ed:66:b7:22:55:73:12:c2:51:9b:8f:
24:ca:8c:f5:85:11:e8:a3:e0:ae:7c:2f:4b:3e:e2:
f7:17:ec:0c:81:82:78:e6:42:d0:01:9e:e2:ee:84:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:51:EF:25:97:95:71:98:2B:3E:E5:E7:BA:96:37:63:24:82:D6
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/OSxR7yWXlXGYKz7l57qWN2MkgtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.23.0/24
193.36.4.0/22
IPv6:
2a0b:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
31:16:3b:85:73:5d:ea:4d:56:49:0a:d2:3c:cc:49:9e:b1:5f:
63:db:bf:60:fb:05:d5:24:d0:3d:d3:2d:ee:31:0b:93:35:38:
4e:72:04:91:e7:8c:ef:bd:ce:7b:25:ae:09:7f:85:8b:9d:2e:
96:0d:ea:bf:e8:5d:f1:b6:c6:ac:cb:ab:29:1c:82:2d:75:39:
ed:67:13:5d:68:c0:70:dd:64:ef:aa:f5:10:f3:9d:37:da:7d:
c1:02:34:1b:27:0a:c5:b5:dd:44:6e:8f:ba:2e:bd:84:84:62:
17:b8:ea:63:d4:f9:ea:32:40:4c:55:fc:c1:9d:f0:43:44:b2:
43:5b:89:95:05:15:be:c8:fa:44:a2:4c:97:79:4a:64:3c:80:
90:42:9b:f1:b7:41:cf:c8:1d:77:46:80:2c:22:8f:1f:4b:ee:
45:77:ab:6a:9f:8d:82:e5:c1:34:11:e0:f1:e0:cc:95:79:4f:
64:b0:d2:79:0b:9a:cf:b4:26:2e:c6:fe:9f:8c:56:11:8b:3c:
a4:5f:5f:b5:68:e5:53:47:31:41:ed:cf:8d:fd:a8:1f:6b:cd:
1b:25:7c:42:f4:8d:75:0d:21:46:b0:a1:eb:40:37:f3:5a:f3:
a9:78:df:c4:53:b3:4c:c5:d4:97:80:f4:fc:13:af:53:66:bc:
a9:b2:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:33 2026 by rpki-client