Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/1-OkOJRfBqhNom3BlAfd09-IWYvs.roa
File: 1-OkOJRfBqhNom3BlAfd09-IWYvs.roa (raw, json)
Hash identifier: +50nGq+XhMdi1qov7zanpW/t72gfVecF0VpQ18FCxto=
Subject key identifier: F8:E9:0E:25:17:C1:AA:13:68:9B:70:65:01:F7:74:F7:E2:16:62:FB
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 019F6A3D3EF512846DB4A011F909061E5F8C
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/1-OkOJRfBqhNom3BlAfd09-IWYvs.roa
Signing time: Thu 16 Jul 2026 09:23:46 +0000
ROA not before: Thu 16 Jul 2026 09:23:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219220
IP address blocks: 194.114.77.0/24 maxlen: 24
194.114.78.0/23 maxlen: 23
194.114.80.0/23 maxlen: 23
194.114.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:3d:3e:f5:12:84:6d:b4:a0:11:f9:09:06:1e:5f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jul 16 09:23:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8e90e2517c1aa13689b706501f774f7e21662fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:91:d6:4c:7e:c7:9e:0f:dd:e2:31:57:89:
5e:4b:98:8a:c1:71:08:26:09:31:e3:82:b4:1d:48:
e2:a7:96:3f:ca:89:58:9f:73:0c:67:d7:52:3f:12:
82:7a:b7:56:f8:30:e3:25:d6:b9:0c:a1:a3:4f:66:
d9:88:a8:e1:a5:45:6e:5f:66:3e:be:e3:dd:b5:10:
57:4a:84:0e:18:66:50:aa:bb:a9:5c:ec:44:bd:cd:
c1:b1:1c:e5:fa:37:23:1c:a2:88:0b:13:26:e1:cf:
85:97:7e:de:d3:be:cf:a5:70:a4:54:12:e3:a6:e3:
03:c6:8e:f0:9d:dd:0c:de:79:9d:a7:a4:63:ca:59:
cc:f0:e8:e0:25:80:69:d2:89:44:d1:f0:e1:4c:73:
57:b4:3e:69:41:23:70:e4:be:4c:b3:5a:3a:56:6b:
63:30:54:d4:99:af:93:1f:41:37:89:c9:c9:5c:d2:
a4:ad:fa:0a:1f:00:7b:03:9e:cd:9a:c4:56:11:b3:
77:a6:4e:b2:32:d2:a8:3a:37:18:26:a7:84:86:cc:
3e:6e:6a:8a:85:49:a0:1f:b2:a7:2d:25:2a:bf:f2:
91:32:84:17:8e:21:87:af:63:ad:88:56:2b:2f:89:
09:06:0f:60:9e:a0:90:d4:86:34:57:1e:cf:e9:41:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E9:0E:25:17:C1:AA:13:68:9B:70:65:01:F7:74:F7:E2:16:62:FB
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/1-OkOJRfBqhNom3BlAfd09-IWYvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.77.0-194.114.81.255
194.114.94.0/23
Signature Algorithm: sha256WithRSAEncryption
51:cd:7a:e7:a8:de:80:33:1a:9b:4f:cd:94:bd:b5:f9:5c:9e:
c8:8a:a1:54:ca:ca:3e:65:40:1f:17:48:b6:fb:4e:d6:30:a9:
0a:ab:49:dd:29:59:a5:cf:49:44:90:ef:25:6a:12:96:cb:c5:
04:99:96:23:ab:12:3d:87:4c:f2:c4:eb:b1:43:49:f6:31:19:
f7:24:ab:b9:77:c2:97:56:07:3f:0b:aa:56:69:63:ef:c0:4c:
ee:dd:2e:37:1c:6e:31:97:46:87:c4:1d:84:a7:70:3d:49:1c:
7a:cc:d6:7a:fa:f2:54:59:f6:c4:60:2c:ed:e3:9a:30:6d:79:
50:19:f9:d4:11:58:df:e4:db:3d:3a:6c:9b:89:86:8c:c5:c9:
24:93:0d:a4:4c:18:4e:5f:03:99:77:cc:13:b2:3a:c0:ef:68:
64:3a:21:0c:3f:0e:b8:12:91:5f:3d:5e:fd:d2:74:f3:6f:92:
ea:cc:00:66:b0:0c:7b:54:50:cf:cc:8a:ac:0b:a1:93:8c:2d:
3d:ca:f4:26:60:f7:c2:1f:a0:f2:17:78:45:e4:b3:42:0d:f9:
85:0a:04:2f:4c:8d:34:86:0a:14:5a:99:35:11:88:06:a0:a4:
ed:45:81:a9:ff:27:ce:d4:b0:bc:b4:f7:24:f0:6b:24:1b:18:
bc:8f:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:03:47 2026 by rpki-client