Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/OsbNeDemf33I6qy3k7S6aVsfSb4.roa
File: OsbNeDemf33I6qy3k7S6aVsfSb4.roa (raw, json)
Hash identifier: buqoADQn3zwLUm6WlH1oPTj1EbKPGWnckzo2lLMt3fE=
Subject key identifier: 3A:C6:CD:78:37:A6:7F:7D:C8:EA:AC:B7:93:B4:BA:69:5B:1F:49:BE
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 019F67597FFF907310271ADBBAC192ABE40E
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/OsbNeDemf33I6qy3k7S6aVsfSb4.roa
Signing time: Wed 15 Jul 2026 19:55:46 +0000
ROA not before: Wed 15 Jul 2026 19:55:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.40.224.0/22 maxlen: 24
77.247.112.0/22 maxlen: 24
87.101.80.0/22 maxlen: 24
185.158.68.0/22 maxlen: 24
185.222.132.0/22 maxlen: 24
188.65.16.0/22 maxlen: 24
193.9.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:59:7f:ff:90:73:10:27:1a:db:ba:c1:92:ab:e4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Jul 15 19:55:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ac6cd7837a67f7dc8eaacb793b4ba695b1f49be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:f9:3b:d0:aa:92:8a:b3:7b:30:ce:8d:ef:
cc:c1:64:84:eb:b7:ee:de:f7:eb:28:16:99:36:ba:
0a:b9:56:61:9c:03:99:e2:7a:ae:92:97:c9:49:66:
6d:fa:dd:36:ed:d1:59:7f:97:11:4d:2a:ec:a2:a2:
ae:ee:82:45:d0:ef:fb:a8:63:f9:df:b3:51:d1:d6:
d3:03:a3:80:e2:3b:11:3f:47:54:54:75:5f:ad:4d:
0b:19:b0:b1:1f:3b:9d:8f:28:07:93:51:3f:e7:01:
6c:d8:ac:09:12:97:4d:00:0b:06:0d:08:16:8a:cf:
ee:24:a7:27:6a:01:23:d8:ad:79:bb:f6:ff:8c:39:
b7:62:b8:1f:d9:ad:86:f7:d8:62:6e:7c:da:78:4e:
b5:96:09:66:8e:2f:4d:0c:84:7a:6c:8d:14:60:b6:
8e:30:14:1d:4f:d7:1f:80:47:ce:53:be:6d:0e:0e:
9c:0f:b1:15:da:c6:83:d8:00:25:cf:8a:67:f6:a4:
74:1b:cd:4d:85:4e:c5:97:6b:c4:21:cc:0c:27:44:
88:fc:18:83:1a:08:3d:e2:d8:d0:50:60:3e:de:0d:
df:1b:25:3e:52:26:de:ae:c8:05:91:11:78:60:df:
0d:75:ff:87:4f:21:c3:ae:5b:42:91:7f:72:2e:53:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:CD:78:37:A6:7F:7D:C8:EA:AC:B7:93:B4:BA:69:5B:1F:49:BE
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/OsbNeDemf33I6qy3k7S6aVsfSb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.224.0/22
77.247.112.0/22
87.101.80.0/22
185.158.68.0/22
185.222.132.0/22
188.65.16.0/22
193.9.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:54:63:5d:cc:8f:d9:ef:60:8a:c8:a4:a1:c9:86:ad:49:a0:
65:70:e5:46:28:88:70:43:76:f9:d2:13:6e:d0:5e:5c:eb:55:
e8:d8:62:56:a5:bc:24:a7:0d:f9:71:cb:fe:57:7c:52:f7:3c:
8e:5f:71:27:c2:48:13:cf:dc:14:72:08:42:32:34:31:11:7f:
54:e6:51:8d:2f:00:95:e6:c5:5b:ac:a3:47:b0:6a:59:3f:57:
b9:05:94:d4:1c:31:91:ce:70:a7:4a:54:1a:4b:66:06:dd:13:
f3:13:ab:ae:7c:24:fe:3f:46:a3:40:ab:70:de:33:3c:0b:eb:
f1:00:3b:d3:f0:1a:a3:a2:33:1b:39:9d:d8:c0:31:3e:ae:55:
84:dd:a8:a8:2e:c1:de:1a:ea:6f:13:fd:1c:9b:f2:a8:58:e7:
37:3c:0e:e6:b5:71:94:99:63:c7:6c:4a:4e:b0:2c:8e:47:f8:
fc:af:55:dd:68:d4:b7:e1:b9:29:0b:af:61:40:bb:77:2a:81:
a1:98:cc:b7:d4:43:d5:e8:32:21:2a:c8:54:83:cb:39:b4:eb:
73:b2:2c:ed:e9:d6:74:ba:dc:58:1a:97:8c:f8:1d:3f:d9:82:
15:f1:48:73:09:c2:5d:1b:75:f2:fd:ab:98:4f:b1:fe:01:7b:
97:e0:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:07 2026 by rpki-client