Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OSm1N4m7yRb-WWoqzHUhQnuo_TQ.roa
File: OSm1N4m7yRb-WWoqzHUhQnuo_TQ.roa (raw, json)
Hash identifier: CZY5QKmg5rfQCUzU7+5ENQX4AmyHF++ZLNvKKkMpV64=
Subject key identifier: 39:29:B5:37:89:BB:C9:16:FE:59:6A:2A:CC:75:21:42:7B:A8:FD:34
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F616433DB0DAAC29438E05E8D6DEC145D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OSm1N4m7yRb-WWoqzHUhQnuo_TQ.roa
Signing time: Tue 14 Jul 2026 16:09:44 +0000
ROA not before: Tue 14 Jul 2026 16:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 85.189.2.0/24 maxlen: 24
85.189.28.0/24 maxlen: 24
87.83.3.0/24 maxlen: 24
87.85.70.0/24 maxlen: 24
194.242.159.0/24 maxlen: 24
195.40.159.0/24 maxlen: 24
195.72.173.0/24 maxlen: 24
217.79.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:64:33:db:0d:aa:c2:94:38:e0:5e:8d:6d:ec:14:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 14 16:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3929b53789bbc916fe596a2acc7521427ba8fd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:5d:7a:af:4b:c6:52:d7:92:ee:9c:e1:ad:
1b:b4:be:5a:a7:ed:43:0e:73:f8:21:a0:55:00:43:
bb:23:f3:2a:34:a0:9d:20:a1:bf:a6:18:de:f4:db:
d0:b8:36:09:50:58:21:92:2c:b3:65:5d:be:fc:d7:
92:29:a0:2a:e9:c4:8e:91:91:d9:98:31:0a:b2:9e:
15:b3:46:bd:db:6a:4c:b9:c5:42:10:47:01:9c:28:
c1:45:ee:44:b9:22:6a:95:2a:21:a8:33:57:0b:44:
90:ee:64:43:ad:48:da:b3:bd:08:f3:9c:bf:62:21:
4d:20:2d:ab:89:5f:23:84:8d:e0:ed:48:8e:02:79:
ed:62:fb:f1:3d:30:3b:8b:81:21:ef:ed:17:00:1e:
5c:30:0d:50:e0:c4:3d:7d:01:f7:38:2a:37:6b:e4:
1c:01:56:4a:f4:b2:13:c7:1f:3e:2e:89:1c:ec:98:
04:4c:2d:59:22:ee:95:de:a4:15:b6:83:fe:ef:fd:
54:b1:ad:f4:3e:3f:f2:57:13:ad:d4:38:1a:bb:1d:
42:74:3d:a5:6e:b2:b7:19:d7:52:2a:72:ef:48:e2:
09:3a:ca:95:88:a5:fb:e9:61:56:f1:9c:3b:28:40:
27:48:56:6d:2e:13:1e:9c:73:8e:f3:e8:83:b2:4b:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:B5:37:89:BB:C9:16:FE:59:6A:2A:CC:75:21:42:7B:A8:FD:34
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OSm1N4m7yRb-WWoqzHUhQnuo_TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.2.0/24
85.189.28.0/24
87.83.3.0/24
87.85.70.0/24
194.242.159.0/24
195.40.159.0/24
195.72.173.0/24
217.79.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:37:d1:53:4f:39:20:af:b3:57:28:64:21:4f:64:56:cd:8e:
f2:ff:02:b0:2e:67:4a:3a:39:96:3e:18:6a:1a:4a:4a:07:bf:
3f:97:1d:7d:57:33:32:1d:19:25:59:01:b7:7b:fb:e3:db:34:
36:d8:fc:d8:ab:27:f3:de:5f:bc:6b:e2:f1:1f:74:54:82:fc:
29:9f:3b:a1:e1:d5:48:0e:bd:64:81:bb:fe:8c:28:4a:b0:81:
3c:d9:fd:94:b5:c5:f7:41:72:66:7a:e2:ab:7c:f8:1d:0d:2b:
2b:b2:d6:8d:9c:f7:38:6c:3a:3f:b7:10:3f:a1:ce:d4:e7:cf:
44:9e:69:a5:77:87:3d:32:94:22:b5:43:fe:98:13:ee:48:c0:
03:67:df:af:eb:6c:65:2f:89:91:67:b1:f4:8b:21:19:a3:b2:
2e:75:e4:43:7f:f5:17:41:cd:66:c2:bb:a0:a3:f5:b3:2b:d6:
1a:18:da:20:dd:7c:59:a9:aa:9a:1b:eb:a4:66:52:c6:e1:ec:
27:2a:ab:fd:cb:45:73:d8:47:e3:99:d9:ef:0a:cf:33:ca:c8:
cf:36:28:1f:64:39:da:47:cc:1b:e6:e6:81:33:20:36:49:88:
b9:5b:d6:d4:f2:22:fa:33:22:cc:b0:cd:c6:e7:b8:8b:a9:3d:
71:1a:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:27:55 2026 by rpki-client