Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa
File: OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa (raw, json)
Hash identifier: JSe4ZxDgFulyfZ8DBgoN9opn6yDV2vfR5CfVXcGr6vA=
Subject key identifier: 3A:C5:AA:57:99:31:BC:B3:B7:CF:12:13:30:12:5C:43:5F:92:CD:6A
Certificate issuer: /CN=5e13fe28167357488b504feac46965d14db7ba9c
Certificate serial: 019F23690A16DCCE59B82A07E5CEB7FFD9CC
Authority key identifier: 5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31034
IP address blocks: 193.42.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:16:dc:ce:59:b8:2a:07:e5:ce:b7:ff:d9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e13fe28167357488b504feac46965d14db7ba9c
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ac5aa579931bcb3b7cf121330125c435f92cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:fe:41:5e:45:b7:9f:a2:6f:5f:79:65:ba:
94:fb:bd:22:2c:22:59:09:36:35:62:d1:97:80:7f:
7f:5d:01:e2:b3:f3:e1:5d:97:0a:1d:e6:57:5c:83:
64:bb:64:e5:46:3a:f4:49:6f:29:29:e5:3b:af:ed:
b5:d8:27:e6:d6:83:70:95:68:37:75:2e:47:ca:50:
df:e2:37:05:5f:0d:62:be:74:69:a6:e2:b9:cd:80:
bb:83:9b:99:bd:a4:50:4f:17:33:d4:9d:6a:10:70:
04:f2:c1:bc:e7:11:00:1f:d6:ae:49:54:12:e8:d7:
e9:7d:26:6e:db:72:60:a4:bb:ad:f8:ab:6b:c6:fd:
85:63:e3:61:7e:b7:98:b5:17:b3:32:d2:82:b9:05:
7a:cc:d4:d4:19:7b:45:14:7e:df:a7:4e:6d:44:2c:
fd:89:a5:07:e6:7a:bd:52:10:0c:71:6f:94:8e:d3:
2e:b9:bb:19:6a:d3:ca:83:ed:89:55:fc:90:13:1b:
85:2a:81:79:c8:7a:57:78:cc:9f:01:17:38:a8:2a:
92:ee:94:4c:3e:99:02:79:10:20:22:e8:fd:9e:5f:
b0:c9:60:7a:82:2b:49:0f:1c:c2:c3:d4:c7:13:72:
e9:9b:d1:c7:41:c9:87:3a:2d:58:e9:8b:70:09:cf:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:AA:57:99:31:BC:B3:B7:CF:12:13:30:12:5C:43:5F:92:CD:6A
X509v3 Authority Key Identifier:
keyid:5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:69:48:05:38:88:97:c3:46:1d:70:8a:f9:e3:ef:81:62:b1:
74:7e:b5:9a:6a:91:06:c0:45:75:b8:07:a0:23:ad:dd:b9:d6:
7d:ef:5b:73:ec:df:55:d4:07:34:c0:5b:1c:55:ad:36:7f:12:
1f:d9:8d:a4:80:0b:ba:80:f6:17:3b:34:cf:06:35:98:cd:92:
fa:09:9f:4a:12:25:fc:ac:cb:07:f7:01:4a:fa:3b:96:14:e4:
ef:5e:fc:26:54:4b:f0:4e:27:8c:09:45:5b:d2:f8:b8:6c:bd:
51:5f:1a:48:74:3f:bd:08:98:bb:64:08:30:67:b0:87:b0:43:
21:be:34:d2:c9:d0:80:c1:37:ea:1c:f7:c4:28:06:43:ea:c0:
14:5e:d2:e8:00:68:3c:46:28:5f:14:a1:5b:6b:84:9e:e5:5d:
91:c0:6a:e9:8d:5d:4b:93:5d:c3:06:0e:a7:46:da:52:6f:7b:
42:93:5e:1d:ac:65:62:9a:95:fc:5c:7b:b8:29:6c:40:28:de:
2e:7c:54:a3:6c:46:35:aa:91:22:fe:19:b3:04:eb:a9:db:87:
24:7e:7f:70:9e:aa:be:1a:24:87:91:3b:d6:0f:3f:55:55:0f:
84:5c:8f:a8:fc:be:86:99:d0:65:32:3b:c4:b8:f0:32:bf:e5:
d4:d5:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:20 2026 by rpki-client