Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Os7BlM-9yHu1ta2iAqI46vc8kXI.roa
File: Os7BlM-9yHu1ta2iAqI46vc8kXI.roa (raw, json)
Hash identifier: yExbcBOehh0Y8arv4U3tss3lsjzX2WQwxziv86HBTYE=
Subject key identifier: 3A:CE:C1:94:CF:BD:C8:7B:B5:B5:AD:A2:02:A2:38:EA:F7:3C:91:72
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23691D1DD994E39BD2C74CBCE3095B13
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Os7BlM-9yHu1ta2iAqI46vc8kXI.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399073
IP address blocks: 77.107.105.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
82.152.51.0/24 maxlen: 24
82.153.159.0/24 maxlen: 24
82.153.215.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
217.145.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:1d:d9:94:e3:9b:d2:c7:4c:bc:e3:09:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3acec194cfbdc87bb5b5ada202a238eaf73c9172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:5d:d2:9a:54:68:02:b2:10:ac:66:4d:f3:
fd:f4:90:f6:e8:ed:24:ba:25:fe:9b:2a:4d:46:0b:
33:d3:e9:78:ca:00:24:76:08:34:90:ca:ec:70:95:
cd:23:0d:9c:90:92:c2:52:e1:14:84:41:09:a6:d7:
89:8d:b3:c9:a2:c0:c4:0c:4f:84:df:fa:27:44:a9:
87:8a:c8:f3:7c:78:44:e2:61:32:77:da:3f:70:99:
d9:82:25:7d:51:ca:56:12:cd:84:b8:46:ff:1f:5f:
ce:88:1e:18:a5:f3:2d:bd:cc:3a:0c:17:ab:9b:cf:
90:84:b2:b3:79:9d:a4:3e:57:2e:02:b7:6c:57:d6:
f2:34:7c:48:ce:d3:f8:1f:a3:dc:5d:52:8a:10:aa:
d1:71:39:7a:d3:3a:2a:92:a5:68:38:64:29:74:08:
68:20:be:6d:2f:31:2e:1e:19:1d:2d:86:4a:5c:f2:
1c:9a:db:6b:7f:cf:f6:84:2a:06:18:39:14:52:8f:
51:6a:e2:04:51:f8:c5:6c:8c:c1:55:ff:41:eb:68:
33:35:a7:4b:b0:84:0b:ea:eb:0b:66:3b:2c:4b:cc:
f2:e2:5b:40:9d:d8:31:89:ff:9a:0f:02:43:d7:d3:
07:d2:f3:1f:70:4e:4f:04:d4:1f:61:d5:65:f5:4f:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:C1:94:CF:BD:C8:7B:B5:B5:AD:A2:02:A2:38:EA:F7:3C:91:72
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Os7BlM-9yHu1ta2iAqI46vc8kXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.105.0/24
81.168.126.0/24
82.152.51.0/24
82.153.159.0/24
82.153.215.0/24
89.213.139.0/24
89.213.152.0/24
109.176.193.0/24
217.145.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:37:fb:fe:1a:1f:3b:f0:75:8f:b1:99:46:a5:d2:09:fc:5b:
5c:5a:1f:7e:1b:bb:55:4f:31:bb:91:f5:c4:11:ee:8b:57:67:
7a:98:49:49:00:bb:93:c4:f1:09:91:a3:34:ef:96:1e:ff:de:
d3:8c:58:39:fd:2f:30:61:d2:11:f7:e6:e9:6a:b2:19:2f:29:
3d:6f:75:13:cc:ce:54:9d:fb:a8:98:9d:8b:c0:8a:4f:41:31:
65:45:75:1f:d2:88:54:ac:7e:94:6e:78:16:74:a5:55:2b:ff:
5f:db:c5:41:5d:18:88:f3:49:d7:59:46:7b:64:40:70:a0:e7:
4b:4a:d0:06:d1:a8:9d:34:e7:25:f5:3d:07:f8:61:70:82:dc:
78:5d:26:e1:4e:f4:5e:5f:a1:76:25:7e:46:ac:3f:86:66:29:
d2:5a:2b:20:5a:3c:75:10:ee:f9:65:fd:aa:0d:5e:f8:d7:e9:
17:ef:a1:75:ac:0c:a7:ef:08:90:d9:62:0e:c6:fb:12:fb:bf:
31:b9:1f:81:70:a3:2f:83:fe:bb:0d:c6:f8:b8:74:4b:3d:0c:
4e:06:ca:b5:11:84:03:15:41:37:fc:71:1d:e0:27:b3:f9:a4:
ee:d6:0f:0f:34:bb:9a:3f:6c:68:a3:47:aa:c6:60:47:fd:b5:
a6:91:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:47 2026 by rpki-client