Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OscYL73h55Z0B61noFD4qYrrbGI.roa
File: OscYL73h55Z0B61noFD4qYrrbGI.roa (raw, json)
Hash identifier: Ooxyna65i+JPE2g1xtm5Wvgl6Sqy4X/WFD6fBLaXenQ=
Subject key identifier: 3A:C7:18:2F:BD:E1:E7:96:74:07:AD:67:A0:50:F8:A9:8A:EB:6C:62
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F23684E6A296AE5FE506028460D23CB65
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OscYL73h55Z0B61noFD4qYrrbGI.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31277
IP address blocks: 79.173.74.0/23 maxlen: 23
79.173.76.0/24 maxlen: 24
94.243.220.0/22 maxlen: 22
94.243.220.0/24 maxlen: 24
94.243.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4e:6a:29:6a:e5:fe:50:60:28:46:0d:23:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ac7182fbde1e7967407ad67a050f8a98aeb6c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2c:5c:a2:6f:ca:3b:1e:f5:8d:33:38:3d:cd:
c6:5f:f3:46:2b:11:72:9e:db:30:56:ef:08:c4:b9:
00:4f:66:c7:89:75:ee:77:0e:25:d0:d9:92:22:00:
db:d7:c6:55:d6:cd:c3:d7:de:77:e1:71:d5:97:88:
9a:34:f3:fc:92:75:b2:ce:26:df:4a:f9:db:05:53:
ed:1a:db:cc:10:a2:ca:3d:ec:a6:e5:1a:54:c5:95:
2e:83:06:d0:89:62:d6:9d:00:28:07:79:23:9b:fe:
f4:ce:c3:80:ec:2f:20:8d:87:c2:9d:62:3d:e4:24:
87:d5:b0:2b:8e:85:be:ec:96:66:40:e3:ff:d1:9f:
32:04:bc:71:b4:10:2f:8d:b8:db:d4:48:bf:3d:e3:
e8:3a:44:ae:01:96:64:0d:81:0f:c9:0f:1b:77:2f:
c8:72:f9:34:b8:53:b9:32:35:e3:b8:e5:f8:cb:9f:
13:44:4e:79:c2:4c:84:79:87:c2:67:21:16:84:fc:
6b:61:56:e2:ff:25:ee:41:c0:48:41:da:b0:75:4e:
51:9d:8c:e9:39:5f:73:f7:66:e3:a4:f1:5f:39:f9:
fa:ce:cd:96:ea:bf:91:e0:f2:23:db:7f:b4:12:7a:
61:c7:d1:85:83:f7:2e:ee:c3:86:85:51:6e:e2:57:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:18:2F:BD:E1:E7:96:74:07:AD:67:A0:50:F8:A9:8A:EB:6C:62
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OscYL73h55Z0B61noFD4qYrrbGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.74.0-79.173.76.255
94.243.220.0/22
Signature Algorithm: sha256WithRSAEncryption
47:a9:a7:87:ab:81:e0:0c:c8:a2:f4:68:db:60:74:8b:1d:9b:
27:75:56:c2:57:30:89:ca:36:69:9d:9d:b5:75:07:4e:f3:f8:
3d:6c:e6:32:45:b0:68:db:78:13:d8:cd:e2:e2:cc:76:51:4f:
85:c2:10:b9:69:ee:63:95:f8:89:51:69:59:29:57:9b:40:cd:
4e:ff:26:ce:e9:99:6a:24:38:2f:b6:a6:1f:a3:00:0f:9e:e3:
c0:20:ed:76:09:9d:57:b2:fd:aa:bf:d0:c7:70:c1:09:a3:51:
b5:f8:27:d2:13:bc:a5:d7:e1:b9:77:fe:1e:63:de:80:16:4c:
ca:a4:ad:b0:62:12:04:a4:9c:b9:b9:a1:9b:6c:5d:50:16:91:
23:bd:12:e9:ea:87:f7:4b:c3:7c:ed:47:5a:60:9f:4f:20:44:
13:fc:f5:77:c4:ff:21:33:a0:66:60:9e:54:82:68:b8:b8:7b:
97:a7:6e:7b:36:e9:15:d9:47:d1:78:25:1d:b1:4d:36:4c:0f:
84:9d:4e:27:1e:a0:a2:35:5d:55:4c:2b:59:54:10:d7:e8:9e:
71:72:3c:3e:d6:dc:d9:65:fa:08:4a:c4:6e:e4:fa:0e:0f:ae:
79:21:40:54:91:fc:57:42:d3:ae:2f:0d:50:23:5c:ac:a0:af:
bd:b1:d2:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:22:07 2026 by rpki-client