Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/os3bcu3roUzbLBzHQwm9bp3nxZ8.roa
File: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (raw, json)
Hash identifier: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=
Subject key identifier: A2:CD:DB:72:ED:EB:A1:4C:DB:2C:1C:C7:43:09:BD:6E:9D:E7:C5:9F
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691C48C44C1BB89717B50C3737AB5C
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/os3bcu3roUzbLBzHQwm9bp3nxZ8.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30885
IP address blocks: 86.105.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:48:c4:4c:1b:b8:97:17:b5:0c:37:37:ab:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2cddb72edeba14cdb2c1cc74309bd6e9de7c59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:5e:55:7c:89:30:fc:85:af:85:4a:7b:12:
67:8e:25:67:77:9c:d6:67:19:0d:0b:80:c2:d8:7f:
10:c4:65:f7:e1:17:78:86:4c:3d:45:64:dc:c3:b9:
dc:0c:d4:36:a5:df:95:6b:1e:9a:3f:dd:93:5d:34:
7e:f6:fd:a5:8f:2e:b2:f3:84:eb:84:14:b1:c9:57:
f5:a2:bd:08:98:34:58:98:55:53:9e:16:9e:46:ea:
00:07:9e:24:cf:a1:ad:ab:c3:8b:ae:ee:02:4d:3f:
70:e0:17:c1:2a:09:33:91:2f:74:3d:d9:34:2d:32:
e3:6f:09:b9:8d:87:d1:3d:92:35:6a:17:d3:c2:fa:
62:c8:b4:69:d0:75:13:73:9e:d8:d7:fb:36:26:7b:
1c:1e:1c:e2:5d:be:95:34:b7:2d:05:89:ef:73:a2:
1b:bf:8f:1e:72:af:fb:fb:3d:cb:dc:ad:cb:05:71:
19:e3:1a:c9:0a:71:1e:a9:9e:3b:20:e2:ea:bc:e9:
6d:2f:4e:ec:21:f7:d6:a0:88:84:e6:39:af:6b:42:
31:14:2b:52:07:13:4c:d6:1b:43:d9:fa:5d:c6:6e:
da:85:5f:fc:4c:d8:c7:7d:b6:d5:8b:f6:9d:77:17:
c8:4e:87:a9:eb:1c:48:ff:2d:8f:25:ac:23:c8:2e:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:DB:72:ED:EB:A1:4C:DB:2C:1C:C7:43:09:BD:6E:9D:E7:C5:9F
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/os3bcu3roUzbLBzHQwm9bp3nxZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:69:58:bb:e9:bf:b4:1b:88:8b:12:e5:0c:cd:28:67:f4:52:
a0:64:3a:22:df:70:09:cc:77:fc:11:3d:d9:d3:f9:b6:1f:08:
41:14:46:8a:8e:67:00:3c:8a:c4:18:c3:49:06:94:c6:a4:75:
9c:a9:55:95:54:04:a2:e4:17:00:c1:d0:86:98:81:7a:7e:09:
a4:05:1b:8c:16:cc:d6:d2:a4:08:58:df:3d:39:42:9f:77:9a:
6b:e7:80:a6:3c:60:69:b8:93:ee:b5:f9:8c:43:0e:71:c0:b1:
fb:fb:de:82:6a:5a:81:bb:0b:5b:e3:e3:cd:42:93:82:ab:bf:
b7:87:56:13:b4:18:65:a7:2d:16:65:c1:e0:2d:23:61:1d:63:
1a:c4:e8:54:22:00:ca:89:66:1f:5a:3e:6e:c9:6a:01:92:48:
2d:a0:03:be:c3:e1:eb:01:7f:8e:3a:99:01:1d:4c:6c:1d:29:
ed:46:c0:37:53:10:58:7c:ed:af:f1:a5:b7:40:cc:e4:e9:3d:
21:1f:54:75:43:5a:a5:67:4d:d0:ca:66:d8:c9:a7:1d:34:ce:
31:3e:f1:36:ec:b4:0d:a9:15:1e:f8:4b:95:de:dd:fa:00:40:
5f:eb:b6:f6:9b:32:96:2a:53:d7:36:46:ea:94:a0:8c:6e:e8:
ae:83:8c:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRxIxEwbuJcXtQw3N6tcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmNkZGI3MmVkZWJhMTRjZGIyYzFjYzc0MzA5YmQ2ZTlkZTdjNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSteVXyJMPyFr4VKexJnjiVnd5zW
ZxkNC4DC2H8QxGX34Rd4hkw9RWTcw7ncDNQ2pd+Vax6aP92TXTR+9v2ljy6y84Tr
hBSxyVf1or0ImDRYmFVTnhaeRuoAB54kz6Gtq8OLru4CTT9w4BfBKgkzkS90Pdk0
LTLjbwm5jYfRPZI1ahfTwvpiyLRp0HUTc57Y1/s2JnscHhziXb6VNLctBYnvc6Ib
v48ecq/7+z3L3K3LBXEZ4xrJCnEeqZ47IOLqvOltL07sIffWoIiE5jmva0IxFCtS
BxNM1htD2fpdxm7ahV/8TNjHfbbVi/addxfIToep6xxI/y2PJawjyC5xAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKLN23Lt66FM2ywcx0MJvW6d58WfMB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvb3MzYmN1M3JvVXpiTEJ6SFF3bTlicDNueFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmnBMA0G
CSqGSIb3DQEBCwUAA4IBAQA+aVi76b+0G4iLEuUMzShn9FKgZDoi33AJzHf8ET3Z
0/m2HwhBFEaKjmcAPIrEGMNJBpTGpHWcqVWVVASi5BcAwdCGmIF6fgmkBRuMFszW
0qQIWN89OUKfd5pr54CmPGBpuJPutfmMQw5xwLH7+96CalqBuwtb4+PNQpOCq7+3
h1YTtBhlpy0WZcHgLSNhHWMaxOhUIgDKiWYfWj5uyWoBkkgtoAO+w+HrAX+OOpkB
HUxsHSntRsA3UxBYfO2v8aW3QMzk6T0hH1R1Q1qlZ03QymbYyacdNM4xPvE27LQN
qRUe+EuV3t36AEBf67b2mzKWKlPXNkbqlKCMbuiug4yM
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:18:43 2026 by rpki-client