Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/Osa6LFpPjxzccoJpJWUFai3FcOM.roa
File: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (raw, json)
Hash identifier: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=
Subject key identifier: 3A:C6:BA:2C:5A:4F:8F:1C:DC:72:82:69:25:65:05:6A:2D:C5:70:E3
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019EF0D3D68A164F8F9D36C44D8FC69102B7
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/Osa6LFpPjxzccoJpJWUFai3FcOM.roa
Signing time: Mon 22 Jun 2026 19:34:35 +0000
ROA not before: Mon 22 Jun 2026 19:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6893
IP address blocks: 185.25.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:d3:d6:8a:16:4f:8f:9d:36:c4:4d:8f:c6:91:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jun 22 19:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ac6ba2c5a4f8f1cdc7282692565056a2dc570e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:ea:a2:17:f8:77:ae:55:b7:c7:74:58:b2:
04:87:c1:96:6c:08:f3:6d:5e:cb:6e:95:10:ad:ca:
a8:2e:f6:8b:2c:0e:aa:2c:f0:22:11:11:98:1d:b1:
2b:fa:1f:2f:85:6b:1b:10:7c:a7:0e:bd:31:86:eb:
1d:1d:eb:c1:28:c6:ac:62:52:95:9e:68:95:08:d0:
6c:03:9c:08:47:32:e5:f7:c9:0f:2d:ac:66:92:65:
44:65:b6:f7:35:53:aa:3d:dc:dc:d8:45:0f:62:bb:
0b:e5:49:f4:9d:d2:87:11:59:5d:a4:13:ad:c3:67:
11:df:45:e5:87:05:c4:b4:44:45:b4:54:a5:a6:91:
3e:b1:8a:ed:3d:7d:d7:3d:66:2b:03:2f:e8:59:43:
ce:e0:07:96:5c:87:b6:17:a4:73:08:20:89:18:96:
82:f6:c1:a3:ce:62:a3:cd:78:ec:0a:7c:48:48:23:
f0:08:4b:a1:0d:34:1d:97:91:2d:74:55:94:bd:f6:
88:12:12:27:a0:95:14:a2:08:4b:96:b0:a3:75:9a:
ad:81:70:dd:11:da:68:62:4a:be:93:00:b8:fc:fe:
91:c4:e0:40:34:c5:54:2a:ac:7a:d6:7b:cc:0c:3f:
11:09:9b:86:28:50:97:ed:1d:ab:25:95:9b:6c:bc:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:BA:2C:5A:4F:8F:1C:DC:72:82:69:25:65:05:6A:2D:C5:70:E3
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/Osa6LFpPjxzccoJpJWUFai3FcOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.225.0/24
Signature Algorithm: sha256WithRSAEncryption
04:04:e1:dd:02:e1:b6:b2:28:61:24:ab:83:8d:3b:d6:ed:31:
9f:63:a6:1b:8a:49:6f:4b:c5:4c:9a:66:57:9f:a2:52:15:62:
0b:55:d1:e1:bb:4f:68:44:bb:ca:63:70:83:eb:d4:19:63:a1:
7a:68:e8:1d:3a:02:4e:ce:ae:ff:11:7b:85:57:97:4d:d0:a8:
d2:c2:81:86:e1:d5:c7:6f:07:e3:0d:01:f9:76:d8:12:47:63:
5d:33:83:42:e5:96:6b:12:a3:1d:2d:b1:8e:a1:41:17:7c:ed:
42:35:8b:d4:62:6c:da:b0:0d:ab:1b:49:ef:4f:90:75:89:c7:
78:ec:4d:d3:3c:01:5d:c3:b2:b8:8a:e8:c4:44:b7:59:9c:d9:
d0:cc:e3:9d:92:8c:ac:aa:c8:f3:f6:e5:5f:ee:50:19:1f:dc:
36:48:34:82:9b:6e:37:3a:85:4a:02:9e:ae:cb:9e:5d:68:cd:
87:ba:d2:4e:d7:e4:c4:ed:88:ca:0e:81:c6:61:e8:f8:c5:97:
6e:ef:76:82:80:17:79:2a:0f:61:f1:05:89:72:f2:cd:07:91:
98:a6:02:fc:20:f6:3b:1d:5e:7c:0a:34:21:8e:2e:5e:10:d9:
e1:14:26:a3:e6:e9:a1:ab:27:bd:e2:ed:6c:6f:f7:7f:3b:e6:
39:b0:fd:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7w09aKFk+PnTbETY/GkQK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy
OTcyMmUwHhcNMjYwNjIyMTkzNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWM2YmEyYzVhNGY4ZjFjZGM3MjgyNjkyNTY1MDU2YTJkYzU3MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFnqohf4d65Vt8d0WLIEh8GWbAjz
bV7LbpUQrcqoLvaLLA6qLPAiERGYHbEr+h8vhWsbEHynDr0xhusdHevBKMasYlKV
nmiVCNBsA5wIRzLl98kPLaxmkmVEZbb3NVOqPdzc2EUPYrsL5Un0ndKHEVldpBOt
w2cR30XlhwXEtERFtFSlppE+sYrtPX3XPWYrAy/oWUPO4AeWXIe2F6RzCCCJGJaC
9sGjzmKjzXjsCnxISCPwCEuhDTQdl5EtdFWUvfaIEhInoJUUoghLlrCjdZqtgXDd
EdpoYkq+kwC4/P6RxOBANMVUKqx61nvMDD8RCZuGKFCX7R2rJZWbbLxi8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDrGuixaT48c3HKCaSVlBWotxXDjMB8GA1UdIwQY
MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt
YTQwOWUyMmEyNDNlLzEvT3NhNkxGcFBqeHpjY29KcEpXVUZhaTNGY09NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl
LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRnhMA0G
CSqGSIb3DQEBCwUAA4IBAQAEBOHdAuG2sihhJKuDjTvW7TGfY6YbiklvS8VMmmZX
n6JSFWILVdHhu09oRLvKY3CD69QZY6F6aOgdOgJOzq7/EXuFV5dN0KjSwoGG4dXH
bwfjDQH5dtgSR2NdM4NC5ZZrEqMdLbGOoUEXfO1CNYvUYmzasA2rG0nvT5B1icd4
7E3TPAFdw7K4iujERLdZnNnQzOOdkoysqsjz9uVf7lAZH9w2SDSCm243OoVKAp6u
y55daM2HutJO1+TE7YjKDoHGYej4xZdu73aCgBd5Kg9h8QWJcvLNB5GYpgL8IPY7
HV58CjQhji5eENnhFCaj5umhqye94u1sb/d/O+Y5sP3F
-----END CERTIFICATE-----
Generated at Thu Jun 25 00:11:58 2026 by rpki-client