Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/osGHoDCsjsIGFBwUAeofQKeKhXw.roa
File: osGHoDCsjsIGFBwUAeofQKeKhXw.roa (raw, json)
Hash identifier: WOu5wRQV4hN4WQPeEbN4nvH10GEzBuOj8B6wFAiE9/4=
Subject key identifier: A2:C1:87:A0:30:AC:8E:C2:06:14:1C:14:01:EA:1F:40:A7:8A:85:7C
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01A1BB42542A9ACC94B054C07CF8CC92AF70
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/osGHoDCsjsIGFBwUAeofQKeKhXw.roa
Signing time: Sun 08 Nov 2026 13:04:08 +0000
ROA not before: Sun 08 Nov 2026 13:04:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49100
IP address blocks: 46.143.24.0/21 maxlen: 21
46.143.32.0/20 maxlen: 20
79.127.0.0/21 maxlen: 21
79.127.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:42:54:2a:9a:cc:94:b0:54:c0:7c:f8:cc:92:af:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Nov 8 13:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2c187a030ac8ec206141c1401ea1f40a78a857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:06:a0:f1:f7:fe:e7:04:b9:3c:ed:12:24:
80:af:da:4e:2d:b6:64:42:e7:95:44:35:5d:65:42:
da:23:4a:f7:c3:05:83:f1:87:24:1a:37:21:7d:95:
6f:58:e2:86:e5:07:54:2b:6c:14:5a:49:98:4b:36:
94:68:29:d8:15:d5:da:11:c9:97:0a:0e:3f:7b:6f:
8f:94:51:c4:89:d3:0f:f4:56:97:23:96:bc:71:86:
ca:95:26:84:d4:5c:16:d9:f7:62:86:fd:a2:87:fc:
81:14:50:ed:d3:db:4f:46:4e:8c:16:f6:65:74:30:
e1:ef:4f:ee:dc:57:4e:71:70:98:7b:fd:b5:fd:e9:
a6:6d:b9:8a:d6:e9:ed:92:5e:13:44:a2:52:9d:9a:
8b:07:ae:e8:89:ac:33:30:24:f4:ef:5b:92:15:d2:
5b:dd:06:b9:a8:a8:d3:a6:f8:f7:27:7c:cb:cd:bc:
8d:0a:1e:ca:30:8d:69:c9:93:cb:55:56:25:33:df:
e2:89:99:e4:4b:95:c4:33:29:68:e0:4c:09:9f:6e:
fb:dd:f8:d6:e3:22:57:34:56:74:15:b5:fc:51:f7:
49:bb:c5:28:bb:fc:52:72:cd:95:b4:eb:f7:7d:e1:
50:a1:3c:13:67:48:8d:1a:9e:c5:2d:9c:8d:51:49:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C1:87:A0:30:AC:8E:C2:06:14:1C:14:01:EA:1F:40:A7:8A:85:7C
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/osGHoDCsjsIGFBwUAeofQKeKhXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.24.0-46.143.47.255
79.127.0.0/21
79.127.64.0/20
Signature Algorithm: sha256WithRSAEncryption
e3:86:f7:31:f4:4e:f6:a2:97:13:db:92:68:8d:f7:15:d6:ca:
9e:f8:f4:8d:0f:4b:58:d4:2d:3b:eb:3b:f9:5a:7d:15:0c:b0:
7b:49:26:fd:a7:db:8e:6c:f4:5f:a6:4d:4d:e0:41:b4:ed:9c:
52:e8:c1:d8:87:43:f1:df:fb:86:e9:fa:aa:58:ad:79:90:c1:
26:fb:d3:75:30:aa:41:47:0a:e6:64:bf:66:a5:fe:03:dc:ef:
65:0b:24:5a:82:b4:33:ee:71:82:51:0c:da:80:4f:08:a9:51:
1f:ec:7d:02:a4:8f:40:12:b4:1b:da:ba:ab:ac:7e:c7:6a:f0:
54:60:a5:b5:f6:2e:b3:c2:97:cc:5f:0d:d4:af:49:b8:3e:e3:
51:f3:bf:73:75:2e:23:a9:61:20:32:20:89:48:2f:26:2f:52:
87:65:58:b8:77:26:2b:09:36:49:ab:a2:95:48:0e:74:23:10:
40:df:c5:e7:66:18:b2:03:d7:35:51:8c:60:86:68:0e:6b:5b:
7f:3a:a8:91:3b:e0:90:1b:74:28:76:81:00:28:63:6d:ae:27:
f3:57:11:ba:3b:7b:0d:55:a6:c5:a3:30:cc:a3:d4:2b:ee:28:
1c:e6:f3:93:26:7d:32:4a:20:7e:fd:ce:4b:e2:a5:20:2f:17:
e9:25:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:38:09 2026 by rpki-client