Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/tOl8eQz1L7gxaPsy73riCk65h1Y.roa
File: tOl8eQz1L7gxaPsy73riCk65h1Y.roa (raw, json)
Hash identifier: 3FpjN78Srk9wFogI0ZDqk3v3BwbmdBVEvTDB+w5yxVU=
Subject key identifier: B4:E9:7C:79:0C:F5:2F:B8:31:68:FB:32:EF:7A:E2:0A:4E:B9:87:56
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019F70A90B201C580F461E08FBB7FB61D416
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/tOl8eQz1L7gxaPsy73riCk65h1Y.roa
Signing time: Fri 17 Jul 2026 15:19:14 +0000
ROA not before: Fri 17 Jul 2026 15:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56703
IP address blocks: 194.26.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:a9:0b:20:1c:58:0f:46:1e:08:fb:b7:fb:61:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jul 17 15:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4e97c790cf52fb83168fb32ef7ae20a4eb98756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:cb:89:b6:d4:51:49:cf:3a:cc:70:89:a1:
04:18:aa:b7:b1:16:7a:63:14:2c:be:20:a3:c7:a5:
99:cf:42:37:43:9e:0b:84:4b:0e:a7:2a:4a:8f:8b:
69:4d:cf:08:04:07:12:f8:a7:62:9d:06:43:b9:1e:
d1:4f:32:d5:85:46:cf:6d:63:16:77:f5:55:69:ab:
ab:7b:a8:fb:8b:71:27:52:2b:db:7e:3d:cd:11:e5:
97:9f:0b:da:ab:81:a1:ea:99:ae:fd:ed:cc:4c:cb:
1f:63:47:23:31:b7:6c:c3:40:04:7c:9b:5c:f2:11:
20:5a:29:aa:99:a6:3c:e9:8d:b9:cf:f8:a7:9e:69:
36:1a:e2:83:c0:c9:7c:60:37:1e:34:31:2a:5a:4c:
ec:a0:cf:0b:d5:40:ca:c0:aa:79:bc:e2:8b:10:b0:
1e:77:eb:b8:19:87:5f:f6:b9:90:21:68:20:0a:88:
1f:d8:a6:fe:fb:ef:b1:de:59:4a:d5:25:97:b2:da:
66:dd:cd:10:c4:b1:11:ae:66:10:91:39:0b:4c:c8:
84:ba:4f:bb:30:78:fa:0f:c4:9f:92:56:88:c7:c9:
14:33:9e:34:cb:82:be:ab:e5:ac:b8:1b:6b:91:6e:
c0:c5:92:15:f6:25:61:22:8f:58:61:57:77:05:93:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:7C:79:0C:F5:2F:B8:31:68:FB:32:EF:7A:E2:0A:4E:B9:87:56
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/tOl8eQz1L7gxaPsy73riCk65h1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.117.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5a:b6:bd:f3:92:06:6e:5e:8b:55:e3:16:0e:d2:9d:86:09:
df:19:31:75:bb:69:0c:5d:22:b9:89:3d:67:f8:1a:64:50:52:
83:86:78:01:98:c3:75:02:68:30:67:8f:01:ed:65:69:87:79:
de:f1:cf:67:05:e5:bf:d7:5b:06:d6:a6:4a:59:9f:3a:ab:6a:
76:d0:82:7d:15:6f:21:2e:af:bd:1b:ed:c2:19:84:92:c3:bc:
81:03:1a:92:b9:48:19:cb:6f:a8:52:62:6a:3d:7f:f0:69:19:
9a:38:45:1c:67:e3:a9:61:a1:92:a2:5a:1f:c0:f4:f2:3d:69:
ae:a5:2b:70:0a:8f:1f:32:32:0a:4a:fa:bb:ef:d6:6e:01:85:
86:67:1e:c7:70:be:d1:9a:0c:35:af:11:42:1c:fe:7c:45:28:
55:42:57:d6:0e:22:57:22:05:93:31:d0:a9:6a:8b:21:92:b3:
db:c2:c4:00:21:2f:2e:75:b1:10:8d:20:20:22:c0:69:78:06:
36:56:8b:4f:9e:03:ad:14:0e:ea:ff:5e:41:35:ae:1b:45:0b:
00:2b:a2:81:8c:0b:ae:4c:20:58:dd:b0:4e:80:a8:28:2f:91:
7a:20:ca:6e:e4:6b:9f:30:78:c6:e1:26:33:39:7d:dc:f0:d7:
56:e5:8e:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9wqQsgHFgPRh4I+7f7YdQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5
YWQxZTIwHhcNMjYwNzE3MTUxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGU5N2M3OTBjZjUyZmI4MzE2OGZiMzJlZjdhZTIwYTRlYjk4NzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgbLibbUUUnPOsxwiaEEGKq3sRZ6
YxQsviCjx6WZz0I3Q54LhEsOpypKj4tpTc8IBAcS+KdinQZDuR7RTzLVhUbPbWMW
d/VVaaure6j7i3EnUivbfj3NEeWXnwvaq4Gh6pmu/e3MTMsfY0cjMbdsw0AEfJtc
8hEgWimqmaY86Y25z/innmk2GuKDwMl8YDceNDEqWkzsoM8L1UDKwKp5vOKLELAe
d+u4GYdf9rmQIWggCogf2Kb++++x3llK1SWXstpm3c0QxLERrmYQkTkLTMiEuk+7
MHj6D8SfklaIx8kUM540y4K+q+WsuBtrkW7AxZIV9iVhIo9YYVd3BZN+vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLTpfHkM9S+4MWj7Mu964gpOuYdWMB8GA1UdIwQY
MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt
NTE0NmYxM2I3MWExLzEvdE9sOGVRejFMN2d4YVBzeTczcmlDazY1aDFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx
LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhp1MA0G
CSqGSIb3DQEBCwUAA4IBAQA2Wra985IGbl6LVeMWDtKdhgnfGTF1u2kMXSK5iT1n
+BpkUFKDhngBmMN1AmgwZ48B7WVph3ne8c9nBeW/11sG1qZKWZ86q2p20IJ9FW8h
Lq+9G+3CGYSSw7yBAxqSuUgZy2+oUmJqPX/waRmaOEUcZ+OpYaGSolofwPTyPWmu
pStwCo8fMjIKSvq779ZuAYWGZx7HcL7Rmgw1rxFCHP58RShVQlfWDiJXIgWTMdCp
aoshkrPbwsQAIS8udbEQjSAgIsBpeAY2VotPngOtFA7q/15BNa4bRQsAK6KBjAuu
TCBY3bBOgKgoL5F6IMpu5GufMHjG4SYzOX3c8NdW5Y51
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:57:21 2026 by rpki-client