Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/_OsxCQ1e4_ibO69prTBr0y__bJ0.roa
File: _OsxCQ1e4_ibO69prTBr0y__bJ0.roa (raw, json)
Hash identifier: jyzI1ocjI/t6Rr16QFOtQXXWn6pUug9g1eA1+Oe0GVs=
Subject key identifier: FC:EB:31:09:0D:5E:E3:F8:9B:3B:AF:69:AD:30:6B:D3:2F:FF:6C:9D
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019D62B6466ADFE35F16A25DE4EB87DB1D90
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/_OsxCQ1e4_ibO69prTBr0y__bJ0.roa
Signing time: Mon 06 Apr 2026 12:13:25 +0000
ROA not before: Mon 06 Apr 2026 12:13:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 72.56.16.0/20 maxlen: 24
72.56.64.0/19 maxlen: 24
72.56.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:b6:46:6a:df:e3:5f:16:a2:5d:e4:eb:87:db:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Apr 6 12:13:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fceb31090d5ee3f89b3baf69ad306bd32fff6c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:4b:9b:89:c3:a0:95:44:1e:58:fd:eb:ae:
ab:67:d1:f5:d8:d6:3a:33:3c:8f:ba:32:2f:94:13:
65:8d:2d:1e:9c:b4:03:5f:3b:67:1a:0b:01:ce:bb:
02:78:b2:79:df:11:56:cb:f1:b3:48:39:b3:79:f0:
9c:06:6d:fd:dc:10:2b:92:f3:28:19:95:2f:82:5d:
f9:07:53:7d:31:22:f6:a3:96:41:0d:d9:2f:3e:e6:
b9:08:8e:87:57:95:0a:e0:61:cb:d7:8e:01:c0:9d:
5f:2f:7a:5e:af:8c:0f:57:74:0c:7d:28:b0:9f:4f:
8b:12:69:55:ae:07:44:01:96:8e:9c:74:0a:5b:2c:
21:43:41:97:e7:df:5b:5e:3c:de:62:44:a3:27:68:
50:48:50:e5:98:76:5f:a0:a4:30:1d:bc:ab:87:ad:
0b:f4:c2:5a:e7:17:8e:92:a7:a6:2c:24:92:b2:fa:
4b:f6:67:6e:f7:19:2e:3a:64:85:20:5d:43:f2:24:
0c:e3:69:d5:eb:28:2b:1e:ec:4f:31:f0:12:2a:ad:
30:48:12:2d:e1:4f:01:cd:52:31:27:c3:6f:70:d0:
3c:98:73:c6:9e:93:a9:d2:fa:03:a1:fc:78:d4:16:
9d:a1:f1:ac:e6:52:75:d9:ae:97:35:4a:05:f4:5f:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EB:31:09:0D:5E:E3:F8:9B:3B:AF:69:AD:30:6B:D3:2F:FF:6C:9D
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/_OsxCQ1e4_ibO69prTBr0y__bJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.16.0/20
72.56.64.0/18
Signature Algorithm: sha256WithRSAEncryption
da:db:b7:d1:4f:f3:05:23:e2:b5:e4:54:43:2d:d2:42:95:ab:
cb:7e:45:9b:b7:71:65:d7:38:04:eb:f9:78:2e:e9:9e:51:da:
0a:39:3d:9a:96:1e:aa:54:6b:f1:ba:4c:ff:40:ad:a7:be:23:
01:e8:74:18:69:ec:69:50:f6:12:a5:f2:4c:d7:cf:72:d8:02:
33:25:cb:73:8c:d2:54:0b:e6:df:80:a6:f6:4f:6f:9c:1e:fb:
ed:de:76:4a:ab:25:bb:c1:aa:21:f8:d1:82:d0:18:ed:88:53:
c7:5c:dc:c1:c5:f8:56:bc:fb:3e:d1:bf:40:2f:07:33:3c:c9:
84:50:5c:00:e5:3a:58:4d:5d:cf:b2:a9:52:ee:5d:4f:09:c6:
10:e0:9a:02:7d:39:e9:e6:3e:b9:f4:e5:31:2d:8c:1c:42:c5:
ac:08:4a:a9:ba:9b:89:ed:74:f9:0b:4d:5a:e3:b7:08:f5:7e:
ea:33:d0:17:38:69:61:9e:cc:2f:71:0f:17:cf:8f:68:00:63:
fa:b9:f6:e5:63:d7:f7:fe:d5:66:0a:89:e0:ca:9c:a5:fb:b2:
14:6c:7b:8b:06:8b:87:1e:7f:c9:3f:d2:4e:85:7a:54:b3:80:
6a:08:b1:f7:35:6a:da:14:08:cc:42:cb:60:a8:d3:23:96:38:
c0:00:48:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1itkZq3+NfFqJd5OuH2x2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYwNDA2MTIxMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2ViMzEwOTBkNWVlM2Y4OWIzYmFmNjlhZDMwNmJkMzJmZmY2YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukFLm4nDoJVEHlj9666rZ9H12NY6
MzyPujIvlBNljS0enLQDXztnGgsBzrsCeLJ53xFWy/GzSDmzefCcBm393BArkvMo
GZUvgl35B1N9MSL2o5ZBDdkvPua5CI6HV5UK4GHL144BwJ1fL3per4wPV3QMfSiw
n0+LEmlVrgdEAZaOnHQKWywhQ0GX599bXjzeYkSjJ2hQSFDlmHZfoKQwHbyrh60L
9MJa5xeOkqemLCSSsvpL9mdu9xkuOmSFIF1D8iQM42nV6ygrHuxPMfASKq0wSBIt
4U8BzVIxJ8NvcNA8mHPGnpOp0voDofx41BadofGs5lJ12a6XNUoF9F+6iQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPzrMQkNXuP4mzuvaa0wa9Mv/2ydMB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvX09zeENRMWU0X2liTzY5cHJUQnIweV9fYkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQESDgQAwQG
SDhAMA0GCSqGSIb3DQEBCwUAA4IBAQDa27fRT/MFI+K15FRDLdJClavLfkWbt3Fl
1zgE6/l4LumeUdoKOT2alh6qVGvxukz/QK2nviMB6HQYaexpUPYSpfJM189y2AIz
JctzjNJUC+bfgKb2T2+cHvvt3nZKqyW7waoh+NGC0BjtiFPHXNzBxfhWvPs+0b9A
LwczPMmEUFwA5TpYTV3PsqlS7l1PCcYQ4JoCfTnp5j659OUxLYwcQsWsCEqpupuJ
7XT5C01a47cI9X7qM9AXOGlhnswvcQ8Xz49oAGP6ufblY9f3/tVmCongypyl+7IU
bHuLBouHHn/JP9JOhXpUs4BqCLH3NWraFAjMQstgqNMjljjAAEgo
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:19:23 2026 by rpki-client