Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/TofV3AYiLol1nK_ziXIWs1U6cns.roa
File: TofV3AYiLol1nK_ziXIWs1U6cns.roa (raw, json)
Hash identifier: BA580/kzSfVKR3Nb6YAQorHKRZ3iII+XXZW26eOjuv0=
Subject key identifier: 4E:87:D5:DC:06:22:2E:89:75:9C:AF:F3:89:72:16:B3:55:3A:72:7B
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 019F236832A80AAD7014D7BCBDDCAC56DFED
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/TofV3AYiLol1nK_ziXIWs1U6cns.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211908
IP address blocks: 185.194.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:a8:0a:ad:70:14:d7:bc:bd:dc:ac:56:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e87d5dc06222e89759caff3897216b3553a727b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:3e:80:a4:10:4a:c5:35:01:6d:56:97:dc:
17:2c:b2:3d:92:b1:1a:20:f9:fa:6e:95:b1:09:5d:
31:80:40:4a:d7:e0:f8:05:77:af:68:fe:00:6b:22:
f7:9e:2d:f4:6e:95:72:5f:04:19:9b:db:1c:85:95:
d1:59:0c:ff:64:e5:37:95:14:9a:4e:88:40:fd:cc:
88:58:f1:49:00:b3:d3:ff:3e:87:22:95:48:f5:34:
02:fd:09:fe:d8:24:14:94:75:8b:7a:24:d7:e1:59:
c1:fa:90:bc:64:b8:ba:89:54:76:19:7d:88:0e:90:
c0:ec:97:0e:4f:2b:ce:48:a8:f0:af:14:4a:3a:c7:
29:65:3b:c0:e9:bf:96:09:6c:bc:21:5f:3b:eb:6d:
84:2b:60:ef:54:1e:e0:9e:e3:da:33:5b:77:aa:76:
93:c3:0f:db:a2:38:7e:95:2f:61:3d:b7:8a:55:b8:
f2:01:ae:b8:a7:d7:1c:18:41:6c:51:b4:66:25:86:
26:96:91:ce:ef:b7:b0:7f:54:99:57:ae:f2:64:2f:
85:0e:4d:91:75:6f:2b:ef:f3:93:99:d7:72:20:0f:
45:67:ea:1c:4d:44:ad:2b:a5:01:f3:24:75:16:00:
64:0a:ef:21:28:5d:8b:64:cd:e2:b7:d5:ae:fe:27:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:D5:DC:06:22:2E:89:75:9C:AF:F3:89:72:16:B3:55:3A:72:7B
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/TofV3AYiLol1nK_ziXIWs1U6cns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b3:a7:23:9f:f3:d8:d2:17:12:28:f1:82:58:11:4e:5f:8a:
87:34:96:88:2a:7a:cb:37:75:84:0e:69:2c:61:ea:f6:93:7c:
5e:cc:f3:11:23:f6:3e:78:14:1e:ee:ee:a6:b7:59:38:eb:13:
8d:27:3c:18:f8:23:10:19:7b:63:58:84:f5:a2:03:70:25:f6:
18:c8:e1:6e:c5:73:fa:0d:3d:af:78:a1:e0:29:52:a2:10:63:
b1:09:0c:23:20:cb:ab:c5:cb:17:5d:ea:a5:cc:52:49:26:96:
e3:a7:30:de:06:05:02:4d:fa:d9:61:98:54:46:d5:4d:d1:e7:
7e:f4:53:b0:ca:56:4e:90:a0:25:a4:a4:f5:64:55:a8:73:2b:
eb:da:12:f7:9b:d1:9c:d0:27:7e:a2:45:3c:60:8f:04:5e:de:
cf:17:a3:8f:54:89:82:98:99:57:19:b9:d7:13:56:55:75:d5:
28:f5:c0:cb:67:41:c1:d3:9c:de:ae:bd:7f:9a:2b:0c:f7:fd:
8a:d0:51:79:2f:a3:23:5d:b5:65:31:65:9c:46:96:e3:d7:a6:
58:21:22:cc:09:90:73:a9:ce:d4:27:7d:d0:91:c9:ea:60:00:
b0:e2:11:72:47:73:50:df:1f:72:14:3a:9e:5c:7b:67:ac:9a:
cb:ae:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:54:33 2026 by rpki-client