Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/ospxyuscZUt12OJ3jV2ziDWVxr4.roa
File: ospxyuscZUt12OJ3jV2ziDWVxr4.roa (raw, json)
Hash identifier: HK4EzYmG6c9gmfKK671rBfu/m90Pfh30a4zU8YJa+So=
Subject key identifier: A2:CA:71:CA:EB:1C:65:4B:75:D8:E2:77:8D:5D:B3:88:35:95:C6:BE
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019DF887A3855899E4AAE959545E00B00C1E
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/ospxyuscZUt12OJ3jV2ziDWVxr4.roa
Signing time: Tue 05 May 2026 14:25:31 +0000
ROA not before: Tue 05 May 2026 14:25:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216321
IP address blocks: 69.38.204.0/22 maxlen: 24
176.10.89.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
2a13:d8c0::/40 maxlen: 40
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 48
2a13:d8c2::/40 maxlen: 40
2a13:d8c2:6::/48 maxlen: 48
2a13:d8c3::/32 maxlen: 32
2a13:d8c3:2::/48 maxlen: 48
2a13:d8c4:2::/48 maxlen: 48
2a13:d8c4:7::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:87:a3:85:58:99:e4:aa:e9:59:54:5e:00:b0:0c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: May 5 14:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2ca71caeb1c654b75d8e2778d5db3883595c6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:0f:02:3b:9e:93:fe:02:88:da:62:ac:fb:
d5:a5:98:f3:59:6e:2b:bd:a8:9d:be:8b:88:93:f5:
e7:5f:07:fe:7b:7d:d2:3a:41:b2:50:46:dd:08:c7:
c7:50:5c:3f:be:60:dc:e5:9a:fc:8b:80:95:17:a3:
bc:97:c6:3b:f1:83:18:70:9a:be:63:2c:29:34:d1:
bd:cf:b4:58:cf:17:28:a5:de:94:0e:30:e6:ae:c5:
b2:1f:10:47:30:6d:90:ca:32:be:03:c7:6b:01:61:
04:f8:ec:f4:94:ca:45:79:33:c9:16:56:f1:3b:a8:
0d:e5:12:11:ec:f8:66:9d:a8:1c:90:8a:14:a3:80:
dc:e7:33:da:35:f1:e6:e3:53:05:0d:2b:ee:5d:31:
ec:70:02:c3:54:62:c3:71:a0:fd:22:95:41:f6:e8:
e8:45:1e:79:8a:f5:6e:d6:bf:23:6f:58:42:ca:4a:
09:36:f7:4e:49:af:2d:03:c5:23:a7:4d:61:0d:0d:
e6:1d:87:9d:54:8f:ea:3b:75:98:2c:74:c6:58:d9:
d3:5d:9f:c7:1f:cd:27:e5:66:f4:db:cd:03:67:d6:
80:92:a8:87:f2:99:aa:b3:59:a5:96:84:ac:0a:76:
c6:1f:26:46:b1:21:c8:7e:42:2e:90:72:6b:e6:11:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CA:71:CA:EB:1C:65:4B:75:D8:E2:77:8D:5D:B3:88:35:95:C6:BE
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/ospxyuscZUt12OJ3jV2ziDWVxr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.38.204.0/22
176.10.89.0/24
202.181.204.0/24
IPv6:
2a13:d8c0::/40
2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff
2a13:d8c4:2::/48
2a13:d8c4:7::/48
2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2b:3a:c9:21:95:56:57:c5:26:40:12:c7:bd:35:fd:eb:40:1d:
ba:6f:72:b2:76:f0:9a:cc:78:cf:fb:79:52:eb:2c:8e:a7:59:
3f:97:70:69:23:0f:b2:d8:13:63:5e:06:7f:36:ae:a3:39:ce:
c5:8f:74:86:9f:b4:a1:86:a3:21:c3:03:68:53:58:94:1b:a0:
16:b7:2b:5c:64:e9:fd:07:b5:5d:a0:78:50:c9:c4:91:f8:a2:
1c:f7:71:e9:42:8f:0b:c5:08:8a:e6:55:5c:18:86:8f:bc:d4:
8f:a6:9b:1d:0b:d4:39:ef:b3:12:85:dc:9f:5b:a2:d0:b8:0e:
1d:0f:32:d0:c1:b6:4d:b0:3c:8e:78:a3:54:e3:31:45:1a:04:
d4:cf:bf:f4:0e:fb:33:33:39:0d:52:1f:3d:a4:e5:a3:6c:dd:
f9:78:64:7f:69:d9:2d:c0:86:44:37:55:7a:20:c9:19:89:75:
da:43:b3:4d:0b:8e:9d:b5:3d:91:cd:63:b0:7d:3d:68:3b:ca:
c2:b5:0b:94:03:fd:7b:4f:3c:d5:f7:3f:74:32:d9:15:1b:0d:
eb:26:83:7a:05:74:ab:40:6b:f3:d8:e5:c0:b2:6b:d6:bf:0f:
04:c4:2a:23:6c:56:73:7b:9b:0c:9c:4c:13:84:e8:5f:a2:2e:
20:f1:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:26:48 2026 by rpki-client