Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cOSU4-gfAhBHPHmT7zXOQkabHVY.roa
File: cOSU4-gfAhBHPHmT7zXOQkabHVY.roa (raw, json)
Hash identifier: 0H/9jPO7xINTvUgr3nTCETt58fazNZCllimS3OOOBTQ=
Subject key identifier: 70:E4:94:E3:E8:1F:02:10:47:3C:79:93:EF:35:CE:42:46:9B:1D:56
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0A1018ABA2002E282CF3F76C57C5868F6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cOSU4-gfAhBHPHmT7zXOQkabHVY.roa
Signing time: Mon 14 Sep 2026 17:40:27 +0000
ROA not before: Mon 14 Sep 2026 17:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219036
IP address blocks: 194.77.10.0/23 maxlen: 24
194.77.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:01:8a:ba:20:02:e2:82:cf:3f:76:c5:7c:58:68:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 14 17:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70e494e3e81f0210473c7993ef35ce42469b1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:41:c8:59:f3:62:91:fa:30:61:d8:18:40:
b8:d3:4a:a6:63:5f:d5:04:be:45:9b:d1:66:84:ee:
bd:89:28:b9:0e:d2:9b:e4:50:c8:b1:49:8b:5c:54:
79:dc:ad:56:ae:76:2d:08:d2:41:37:59:15:08:d1:
6e:ca:42:9a:2b:7b:de:fd:91:e3:5d:79:43:c3:f1:
fd:a5:db:68:56:b2:cb:3e:3d:a8:a9:33:29:68:73:
a2:85:10:b1:35:e0:75:2c:96:b7:5e:08:33:64:68:
0e:d2:ed:06:ee:43:a4:ce:8f:c6:be:cc:1e:98:bf:
2f:d6:d4:99:68:58:9b:aa:ed:16:cb:48:c5:96:e4:
f3:f2:4d:d1:bb:c8:3e:05:14:8c:4b:bf:42:c8:3f:
8a:8a:d9:f6:1a:3d:e8:96:d3:8b:a4:6e:35:c1:93:
28:ae:7a:a5:25:23:34:8f:9b:1f:e9:1c:63:d6:31:
99:92:07:7a:b9:51:af:16:8d:63:54:25:a0:77:1b:
99:ff:3a:f2:57:d4:36:51:30:60:8f:ee:9b:df:45:
b6:9b:a2:5a:f8:d0:e2:80:1b:ef:a1:d0:99:b1:22:
75:3c:b2:91:4a:94:98:35:8f:4c:a5:f9:27:4c:fc:
b9:0e:2c:ab:90:d3:53:c3:d2:13:09:b9:27:b6:73:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:94:E3:E8:1F:02:10:47:3C:79:93:EF:35:CE:42:46:9B:1D:56
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cOSU4-gfAhBHPHmT7zXOQkabHVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.10.0/23
194.77.194.0/23
Signature Algorithm: sha256WithRSAEncryption
df:67:24:63:c8:0c:f8:05:36:f3:82:a4:86:a7:8a:20:82:44:
56:12:c2:8b:d1:32:2c:1d:7d:94:be:4a:70:81:db:6f:9f:01:
b1:fb:9b:5a:13:91:23:fa:df:6c:25:9a:53:a0:b5:98:96:08:
bf:08:c7:05:dd:74:af:fc:12:b3:53:bb:3f:50:3f:7e:dd:96:
f9:37:d6:41:5f:df:9e:bc:72:08:93:98:18:c3:14:67:cf:02:
ad:18:33:e5:60:92:15:db:81:ae:0e:1d:5f:af:d0:cb:fc:51:
5b:21:68:f6:bb:1b:22:ec:84:54:92:f4:ad:15:98:4a:eb:a4:
ee:b7:41:bd:ab:78:5c:66:1f:f1:1c:d0:ba:d6:45:03:32:a4:
d0:7d:16:4a:79:20:7b:de:d0:4e:bf:87:fe:96:0e:5a:6e:5c:
b9:ab:cf:42:37:08:57:fb:67:df:c3:3b:f5:ca:86:b2:28:d0:
bf:f0:7c:db:43:3d:e5:dd:74:ad:95:20:ba:c7:20:6f:df:74:
81:54:05:ff:63:99:26:ad:1f:d7:9d:e6:38:a5:04:bc:0f:13:
83:45:d3:0b:30:a2:aa:2a:23:af:cc:6d:ab:c1:ba:db:69:47:
81:03:88:63:a3:6d:b5:fd:27:94:60:0f:00:6a:e0:3e:d8:53:
e3:19:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:30 2026 by rpki-client