Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OSLE-SF1QTMlSkEQ9EZ-HWBG7I8.roa
File: OSLE-SF1QTMlSkEQ9EZ-HWBG7I8.roa (raw, json)
Hash identifier: J/ziz79Sl4jEvRdLJ9bq8MxVCyrZiG/Jy2XOD4RZBVU=
Subject key identifier: 39:22:C4:F9:21:75:41:33:25:4A:41:10:F4:46:7E:1D:60:46:EC:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E46CB1E1A2A2CDEF28949E7A5276D738F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OSLE-SF1QTMlSkEQ9EZ-HWBG7I8.roa
Signing time: Wed 20 May 2026 19:09:37 +0000
ROA not before: Wed 20 May 2026 19:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 89.125.132.0/24 maxlen: 24
89.125.133.0/24 maxlen: 24
89.125.134.0/24 maxlen: 24
89.125.135.0/24 maxlen: 24
104.143.196.0/22 maxlen: 22
104.143.196.0/24 maxlen: 24
104.143.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:cb:1e:1a:2a:2c:de:f2:89:49:e7:a5:27:6d:73:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 20 19:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3922c4f921754133254a4110f4467e1d6046ec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:2b:65:d0:62:06:18:3b:a8:1c:98:0f:9a:
f8:3c:d3:b9:23:37:1e:4d:89:f2:25:b4:5b:54:ec:
bc:bb:27:fc:19:b0:a0:1d:b8:d9:b8:fd:8e:dc:b6:
3c:d1:f7:63:98:9e:74:13:f4:0f:c0:11:57:d6:53:
06:5a:da:6f:04:51:83:6c:3f:bd:09:4e:6e:b8:0b:
64:06:4a:b3:af:a1:f2:e5:91:35:6d:69:59:ea:f6:
ff:36:a2:00:2c:ad:7b:76:c6:01:4a:2c:57:89:ea:
e8:71:e2:fa:15:6f:43:a6:95:78:f2:9b:16:36:28:
d0:ae:70:b7:d5:46:84:c2:d5:28:67:d6:37:19:93:
6c:c5:a5:3f:81:f0:ff:73:0e:ca:c5:5e:3f:ec:21:
a9:d8:b7:b5:5d:cc:ba:6f:13:1a:df:aa:a4:ca:97:
85:64:82:f9:ff:f9:aa:2f:6e:fa:94:f2:9a:af:3e:
59:13:a4:d1:8e:e3:c9:5d:b8:b8:06:8a:d3:d3:81:
9e:15:d5:f3:e5:05:ae:b0:c5:2d:de:67:25:5e:2a:
64:cd:f0:93:5c:b5:05:45:34:ed:3f:1c:b2:ce:b9:
34:66:61:9f:c1:87:33:41:7a:3a:19:f8:67:4f:fb:
2b:88:83:f2:be:e1:2a:eb:c2:96:b3:16:83:5c:37:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:C4:F9:21:75:41:33:25:4A:41:10:F4:46:7E:1D:60:46:EC:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OSLE-SF1QTMlSkEQ9EZ-HWBG7I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.132.0/22
104.143.196.0/22
104.143.220.0/22
Signature Algorithm: sha256WithRSAEncryption
56:99:e6:e0:96:cb:a6:cc:37:dc:ac:29:49:dd:7a:99:11:06:
9b:65:96:d8:8c:bb:ed:72:d2:1d:01:14:9b:73:a5:46:1f:e7:
88:e2:c9:5d:9b:d9:51:6e:52:e5:d7:67:de:b6:a9:d5:75:ee:
40:b6:ac:00:0e:54:f9:5f:a4:e7:e0:6d:2e:b5:48:7a:4d:9f:
1f:2e:33:a6:47:3d:23:a1:00:21:27:57:cb:bc:8c:92:db:51:
be:20:43:48:d4:8d:c7:4d:b7:33:24:b8:cb:c2:3d:f4:98:1f:
62:94:ac:f8:5f:be:0a:ee:8e:8a:1d:f5:51:2c:12:6f:5b:d9:
aa:43:52:11:63:fa:ee:02:b8:73:b6:e0:9b:0b:e5:56:07:cc:
dd:10:47:54:28:8d:15:7c:01:3e:32:44:19:75:d8:f1:5a:16:
fd:1e:f7:7b:47:8c:12:7e:9b:74:b6:69:29:b2:f7:13:81:9e:
a8:59:e4:2a:a9:d2:ec:fe:3f:07:cb:57:a3:66:07:42:be:0d:
1f:99:e4:b5:cd:96:3b:4a:3c:a2:c8:35:57:4b:a7:c8:75:25:
c7:e0:55:b3:98:c2:c2:35:06:67:e1:74:3a:f7:03:ae:64:c0:
de:e8:d4:24:8a:0b:ad:fa:32:04:0d:3b:a4:ff:8d:dc:5a:f3:
a1:7f:d4:87
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ5Gyx4aKize8olJ56UnbXOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNTIwMTkwOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTIyYzRmOTIxNzU0MTMzMjU0YTQxMTBmNDQ2N2UxZDYwNDZlYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zQrZdBiBhg7qByYD5r4PNO5Izce
TYnyJbRbVOy8uyf8GbCgHbjZuP2O3LY80fdjmJ50E/QPwBFX1lMGWtpvBFGDbD+9
CU5uuAtkBkqzr6Hy5ZE1bWlZ6vb/NqIALK17dsYBSixXieroceL6FW9DppV48psW
NijQrnC31UaEwtUoZ9Y3GZNsxaU/gfD/cw7KxV4/7CGp2Le1Xcy6bxMa36qkypeF
ZIL5//mqL276lPKarz5ZE6TRjuPJXbi4BorT04GeFdXz5QWusMUt3mclXipkzfCT
XLUFRTTtPxyyzrk0ZmGfwYczQXo6GfhnT/sriIPyvuEq68KWsxaDXDc80wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDkixPkhdUEzJUpBEPRGfh1gRuyPMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvT1NMRS1TRjFRVE1sU2tFUTlFWi1IV0JHN0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX2EAwQC
aI/EAwQCaI/cMA0GCSqGSIb3DQEBCwUAA4IBAQBWmebglsumzDfcrClJ3XqZEQab
ZZbYjLvtctIdARSbc6VGH+eI4sldm9lRblLl12fetqnVde5AtqwADlT5X6Tn4G0u
tUh6TZ8fLjOmRz0joQAhJ1fLvIyS21G+IENI1I3HTbczJLjLwj30mB9ilKz4X74K
7o6KHfVRLBJvW9mqQ1IRY/ruArhztuCbC+VWB8zdEEdUKI0VfAE+MkQZddjxWhb9
Hvd7R4wSfpt0tmkpsvcTgZ6oWeQqqdLs/j8Hy1ejZgdCvg0fmeS1zZY7SjyiyDVX
S6fIdSXH4FWzmMLCNQZn4XQ69wOuZMDe6NQkigut+jIEDTuk/43cWvOhf9SH
-----END CERTIFICATE-----
Generated at Thu Jun 4 06:20:37 2026 by rpki-client