Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/osbxv89WG8GbWZUQ2Vkdc-Z5YJE.roa
File: osbxv89WG8GbWZUQ2Vkdc-Z5YJE.roa (raw, json)
Hash identifier: vhxwONMLn7WciOAysVcpRznbCMOzeYXuHzUh/oH5ncU=
Subject key identifier: A2:C6:F1:BF:CF:56:1B:C1:9B:59:95:10:D9:59:1D:73:E6:79:60:91
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A07113D5513F1EF096D7FEDE4DF0398052
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/osbxv89WG8GbWZUQ2Vkdc-Z5YJE.roa
Signing time: Sat 05 Sep 2026 10:18:40 +0000
ROA not before: Sat 05 Sep 2026 10:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43950
IP address blocks: 193.239.8.0/22 maxlen: 22
2a01:568::/32 maxlen: 32
2a01:568::/36 maxlen: 36
2a01:568:3000::/36 maxlen: 36
2a01:568:4000::/36 maxlen: 36
2a01:568:5000::/36 maxlen: 36
2a01:568:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:13:d5:51:3f:1e:f0:96:d7:fe:de:4d:f0:39:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 5 10:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2c6f1bfcf561bc19b599510d9591d73e6796091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:b9:4d:bd:c7:b4:44:a5:0d:f4:70:85:03:
5a:87:71:24:5a:05:2e:07:5a:cb:cd:9b:85:27:50:
06:9b:67:a2:f1:b2:25:7b:2c:6b:24:f7:32:a7:cc:
a7:aa:e9:49:79:3b:4c:57:8a:8d:df:0c:4f:33:25:
9c:43:94:70:9d:d2:b6:e6:5e:92:fc:9c:06:9c:1a:
d2:48:9e:fc:d8:a9:30:55:45:4f:37:4e:08:8a:f3:
7a:e7:c6:f8:68:6e:32:ce:74:55:50:59:11:7a:91:
91:c2:d8:b4:d2:ca:0c:db:38:45:3d:92:ea:37:82:
17:26:7e:9a:d1:61:f5:9f:a0:16:90:09:af:f7:57:
81:8b:79:a0:4c:16:f9:df:20:0a:91:b3:de:18:2a:
a5:29:bf:27:24:44:9e:de:64:aa:30:b8:44:5e:96:
2d:47:f2:4b:aa:ca:e4:82:5d:26:cb:ba:69:e9:05:
c5:6c:69:1f:fd:56:32:4b:3c:b1:8a:3a:a8:ce:72:
33:c9:14:56:0f:7e:1d:f0:58:0a:d6:df:b3:07:f4:
55:19:44:a1:3d:3f:0b:a1:4c:45:85:13:11:52:16:
d1:0e:be:5b:3e:ca:b4:d2:19:d8:2e:45:73:e2:a3:
d3:11:3c:84:53:1b:77:5e:0f:09:be:8f:93:50:21:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C6:F1:BF:CF:56:1B:C1:9B:59:95:10:D9:59:1D:73:E6:79:60:91
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/osbxv89WG8GbWZUQ2Vkdc-Z5YJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.8.0/22
IPv6:
2a01:568::/32
Signature Algorithm: sha256WithRSAEncryption
82:c3:56:e6:a7:7a:b8:cb:0f:aa:ce:dd:a8:57:2c:73:57:ac:
2e:15:1a:c3:35:3b:0a:5e:cd:79:b5:36:ff:fa:ee:2b:b4:2a:
ea:1a:53:16:63:ff:e8:f2:37:66:b5:49:4f:14:73:bd:61:d2:
60:a9:29:45:5f:8c:eb:33:09:fe:ed:f6:0b:90:b8:60:fa:90:
67:e2:e8:3a:ab:c6:95:72:d0:4a:36:37:4b:14:bc:16:9b:03:
7b:ac:2d:83:2d:20:6b:bd:7f:d8:a4:04:c3:b7:09:34:b3:0d:
92:02:4a:b3:4b:21:16:50:c0:6d:13:dc:5b:b6:2b:e0:1d:22:
f0:4d:34:8b:de:55:6a:b5:e6:56:d4:37:6d:cd:06:38:de:41:
18:08:50:db:fd:a7:f7:b3:22:31:cd:7d:cd:82:d7:30:eb:a3:
5b:1a:af:00:5c:35:d9:ec:62:76:45:59:86:61:0f:18:7b:34:
7c:64:33:45:70:e9:d8:d3:dd:e4:d3:9a:e5:23:9a:0b:ee:cd:
13:90:07:32:d0:4d:5c:33:96:8b:48:6c:1a:5c:86:37:a1:9b:
ef:33:76:91:21:13:98:ec:27:d8:22:e0:ab:03:68:16:e1:9f:
ac:0b:ca:50:09:32:e5:57:68:f7:6e:b4:da:73:ef:60:52:27:
18:07:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:18 2026 by rpki-client