Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OSiAFuL_dZv6t525vpwjBs-ZT9M.roa
File: OSiAFuL_dZv6t525vpwjBs-ZT9M.roa (raw, json)
Hash identifier: qrIYD3he0gvMFU23DV3zUWMrQGM7S5fCwrFrcTRaN4A=
Subject key identifier: 39:28:80:16:E2:FF:75:9B:FA:B7:9D:B9:BE:9C:23:06:CF:99:4F:D3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FB2B94C97FB6AF2B94DE213FCCCE678CF
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OSiAFuL_dZv6t525vpwjBs-ZT9M.roa
Signing time: Thu 30 Jul 2026 11:11:55 +0000
ROA not before: Thu 30 Jul 2026 11:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 31.41.253.0/24 maxlen: 24
45.10.248.0/22 maxlen: 22
45.94.228.0/22 maxlen: 22
45.95.148.0/22 maxlen: 22
45.129.4.0/22 maxlen: 22
88.151.11.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
2a12:a507::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:b9:4c:97:fb:6a:f2:b9:4d:e2:13:fc:cc:e6:78:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 30 11:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39288016e2ff759bfab79db9be9c2306cf994fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:1e:b0:80:2f:0c:c2:6d:e0:54:47:90:bc:
4f:19:da:e4:f0:0d:2f:d6:a0:6b:43:a4:a1:2c:88:
49:e0:bc:61:c2:a4:91:e9:f3:e9:68:d1:85:b9:96:
55:d8:28:5a:c4:f3:63:85:15:47:e8:f0:b2:4d:86:
9a:7b:c7:03:13:7f:26:66:9c:82:a6:18:cb:92:04:
5d:8b:77:c5:e5:40:f0:d3:75:cd:1a:4b:16:f7:bd:
c6:51:e3:21:62:f4:0d:e2:ec:db:9c:2f:3e:e5:3a:
e3:c7:77:55:2c:f1:d5:20:4b:65:b7:4f:11:71:ab:
5f:b3:01:2e:bb:7c:9d:22:b9:a2:03:a0:8b:38:00:
dc:80:2b:c3:76:cb:9e:87:80:16:85:78:f4:8d:64:
3a:f0:59:6d:19:f4:3f:41:42:bc:c7:dd:11:5e:0d:
7d:4e:55:0d:e2:2c:1f:7f:58:6d:02:79:9f:ad:43:
4d:d0:3c:99:f3:83:a5:0f:27:dd:a6:44:72:5e:6f:
d2:ff:45:07:66:60:cc:a4:88:e1:06:99:4a:52:0a:
7f:f9:04:84:f8:d5:74:2b:d2:07:a1:bb:50:58:17:
40:a8:e2:ac:48:1a:9a:45:0c:da:31:9d:96:08:33:
95:43:71:cc:63:2f:03:87:65:8f:9f:f0:12:8f:f5:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:80:16:E2:FF:75:9B:FA:B7:9D:B9:BE:9C:23:06:CF:99:4F:D3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OSiAFuL_dZv6t525vpwjBs-ZT9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.253.0/24
45.10.248.0/22
45.94.228.0/22
45.95.148.0/22
45.129.4.0/22
88.151.11.0/24
91.190.158.0/24
176.126.98.0/24
176.126.102.0/24
IPv6:
2a12:a507::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f5:26:90:b1:67:3c:7a:39:06:86:e0:a5:cf:48:59:d5:a5:
ad:fa:92:15:c6:8c:4b:7f:2e:95:50:a9:1c:d7:f9:c5:37:a1:
8e:6e:33:76:9c:73:20:14:bb:d5:e9:c8:54:fc:78:c5:63:61:
9c:ff:38:d0:c1:9a:c3:c4:f4:67:d5:4d:3e:9c:2d:83:3b:a8:
1b:4f:cf:d2:21:6b:53:4d:96:2c:f6:26:8d:bf:94:eb:a1:c9:
76:70:e9:9f:59:42:1f:39:d2:af:0f:ac:1c:51:da:14:d2:4c:
c2:ad:a7:db:c1:f8:0f:91:01:29:08:8d:fc:19:14:32:df:0f:
cb:ac:54:31:d3:8c:72:0d:1f:2f:8c:9b:8a:e3:28:65:83:4b:
80:e9:f5:0c:d4:72:56:d0:56:77:44:ca:c4:24:de:9b:f2:dd:
1c:40:48:e3:5b:07:16:a7:32:1f:49:60:84:7d:9a:4b:62:6e:
70:dd:4e:c2:47:7b:49:e4:9a:d6:be:5c:26:d0:21:7c:7c:40:
41:bb:3e:02:25:25:7a:37:25:0d:1b:14:d4:b3:c9:4b:04:c2:
6a:f5:6b:6c:e0:27:92:1a:63:b5:63:0c:13:fa:ce:41:a8:dc:
c6:e0:30:4b:19:8c:9e:7c:18:84:68:bc:10:dc:4f:7b:54:38:
a3:5d:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:12 2026 by rpki-client