Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/ozxuboQujXdiImUQ23259rgJxTU.roa
File: ozxuboQujXdiImUQ23259rgJxTU.roa (raw, json)
Hash identifier: mUzByNgDOakmOWXkp+P9oysXEw/ks3+fUkO7YTuj2Kk=
Subject key identifier: A3:3C:6E:6E:84:2E:8D:77:62:22:65:10:DB:7D:B9:F6:B8:09:C5:35
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019EF507958058CB1D9FBD4E7169254212ED
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/ozxuboQujXdiImUQ23259rgJxTU.roa
Signing time: Tue 23 Jun 2026 15:09:35 +0000
ROA not before: Tue 23 Jun 2026 15:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8641
IP address blocks: 77.73.24.0/21 maxlen: 21
77.73.31.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.150.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.154.0/24 maxlen: 24
81.26.155.0/24 maxlen: 24
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.135.0/24 maxlen: 24
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.143.0/24 maxlen: 24
84.47.144.0/23 maxlen: 23
84.47.147.0/24 maxlen: 24
84.47.150.0/23 maxlen: 32
84.47.152.0/23 maxlen: 23
84.47.156.0/22 maxlen: 22
84.47.158.0/23 maxlen: 23
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.164.0/23 maxlen: 23
84.47.164.0/24 maxlen: 24
84.47.168.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
84.47.174.0/23 maxlen: 23
84.47.176.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
84.47.181.0/24 maxlen: 24
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
84.47.190.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
85.91.112.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
91.197.183.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
193.105.11.0/24 maxlen: 24
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.82.0/23 maxlen: 23
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
213.135.92.0/24 maxlen: 24
213.135.94.0/23 maxlen: 24
213.135.95.0/24 maxlen: 24
213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:07:95:80:58:cb:1d:9f:bd:4e:71:69:25:42:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jun 23 15:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a33c6e6e842e8d7762226510db7db9f6b809c535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:e0:b8:45:eb:39:4c:e6:cb:1d:fd:30:88:
a2:23:67:38:42:30:a0:a6:cf:98:4f:fa:48:48:08:
7f:c6:3c:dc:8a:0d:ad:13:3d:12:fc:d5:c5:08:f8:
8a:d2:e2:54:e3:05:e0:81:9f:b9:3a:4d:1f:44:e2:
54:34:c8:15:14:94:73:6c:4c:57:fe:e5:13:f0:14:
b2:c2:09:d6:7a:b2:21:76:e4:16:99:f6:5e:ec:c1:
96:49:2b:fd:9b:16:65:13:27:99:5a:14:90:a5:b2:
1a:fd:0b:d2:03:d3:e6:ab:0d:39:b4:1b:8b:04:f7:
13:e4:cf:c0:10:31:de:8f:81:45:35:11:0c:c2:13:
98:b4:42:5c:9e:4c:1f:3d:a5:c8:c3:40:53:f0:73:
e1:05:fc:74:79:b4:02:85:9f:e7:c6:fc:43:47:53:
0e:d3:2c:10:f0:f9:88:29:c3:77:1a:1b:54:a4:fc:
8c:d8:5d:db:01:82:a4:5b:89:39:c0:95:ea:d2:74:
3b:b3:d9:54:62:4a:61:c0:51:63:07:04:4a:77:d7:
fb:b1:3c:fa:f3:e7:11:a9:1a:9b:41:37:8b:86:14:
91:53:c2:9f:29:04:ef:f3:9d:80:8a:2c:9e:b0:29:
f3:5d:eb:32:db:31:b2:17:c0:c3:25:91:f4:ef:d4:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:6E:6E:84:2E:8D:77:62:22:65:10:DB:7D:B9:F6:B8:09:C5:35
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/ozxuboQujXdiImUQ23259rgJxTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
91.197.183.0/24
185.106.107.0/24
193.105.11.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.82.0-213.135.92.255
213.135.94.0/23
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.188.0/22
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
97:ec:27:aa:c5:c1:ca:d0:e4:d3:51:33:f1:22:a5:bc:68:37:
04:81:ec:54:5d:c9:c1:8c:dd:ee:a1:11:6c:e7:1d:6d:5f:c5:
29:e8:3b:9c:90:81:8e:6d:01:07:80:e5:16:cb:c6:36:1e:c0:
0f:5d:43:27:5c:d3:f1:b6:ca:57:13:e9:97:77:1d:61:71:b2:
14:79:b4:2a:31:1f:a9:e9:44:d1:ac:85:c8:7e:f2:7f:7c:e9:
86:9e:37:64:63:95:cf:c1:ef:f4:41:c6:f2:13:d4:bb:0c:0f:
8a:fe:6a:f7:ec:ba:f6:78:cb:3d:85:97:28:54:56:25:7c:5d:
c1:17:45:80:95:60:53:e1:65:fb:f7:ea:b7:a0:cb:49:08:46:
6b:1a:0e:66:a9:50:bb:fe:e9:f3:60:ed:11:62:43:95:9d:8c:
a0:c7:27:5d:34:ea:51:72:77:14:f8:2f:aa:d5:ec:b5:e4:2d:
b8:ad:9f:66:93:f4:b6:77:11:d1:b8:7d:61:88:53:f6:32:54:
e1:14:cd:6f:11:de:4d:86:0f:5c:fc:54:48:c4:da:0d:00:a5:
4a:22:21:0a:e8:12:80:69:30:73:33:d5:68:26:3f:b2:d1:db:
b3:0a:33:f5:91:a3:7c:6b:3b:2c:9b:13:df:3f:05:4e:3c:3f:
c0:b9:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 08:35:36 2026 by rpki-client