Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/8MQUhAj6ypfAOVIXA3WVcUTM-FI.roa
File: 8MQUhAj6ypfAOVIXA3WVcUTM-FI.roa (raw, json)
Hash identifier: lP1KOaToLMkzKCUhCgsJfBnES1ippDW8Bx45uFNVy+s=
Subject key identifier: F0:C4:14:84:08:FA:CA:97:C0:39:52:17:03:75:95:71:44:CC:F8:52
Certificate issuer: /CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Certificate serial: 019F2368F81F77C6FC87B540D10D1D9ECCD6
Authority key identifier: 4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/8MQUhAj6ypfAOVIXA3WVcUTM-FI.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60635
IP address blocks: 95.66.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:1f:77:c6:fc:87:b5:40:d1:0d:1d:9e:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbda9a6842d43d26b7e7d852f1747391ea83ed9
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c4148408faca97c03952170375957144ccf852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:2b:46:2f:77:eb:5b:82:2c:fe:ca:fc:14:
f5:bf:6f:df:7b:cf:8f:23:a2:40:65:9d:ce:c5:97:
47:f1:d8:41:6f:b3:28:c2:9f:51:c3:3e:a4:be:6b:
28:8a:dd:74:fc:c6:8e:a8:97:46:10:9c:a1:e8:2c:
73:40:c3:03:44:a7:99:d1:49:bc:31:6b:2e:c9:5d:
64:c8:42:a6:2f:60:26:69:b3:67:8a:01:fb:3e:5c:
a5:f2:99:76:fd:70:e6:ec:8b:ad:a2:0d:f4:13:30:
e0:4e:b1:1b:d2:67:10:98:00:b5:4d:e3:aa:69:86:
94:3a:d4:2c:51:18:90:68:63:ae:05:a4:8e:90:6b:
bd:4e:51:27:7a:9c:09:f8:72:78:24:aa:ba:6a:86:
66:01:2c:77:05:3e:ee:b5:1c:36:e3:1d:f5:8d:4a:
98:62:49:81:1f:71:d5:6d:0f:e0:46:de:1a:3f:59:
fa:5d:ff:e7:e0:03:d9:12:59:d1:af:f6:a1:3c:fc:
65:14:69:95:1b:a3:92:ab:ed:aa:4f:f6:c3:45:29:
67:56:0f:d8:f5:d2:b8:ed:a9:18:43:b4:a5:b1:48:
e2:e1:2a:3c:1e:bf:81:15:65:92:fa:6f:81:0c:c6:
1b:74:ea:37:b2:27:fd:be:60:09:f3:b8:d7:f1:70:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:14:84:08:FA:CA:97:C0:39:52:17:03:75:95:71:44:CC:F8:52
X509v3 Authority Key Identifier:
keyid:4B:BD:A9:A6:84:2D:43:D2:6B:7E:7D:85:2F:17:47:39:1E:A8:3E:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/8MQUhAj6ypfAOVIXA3WVcUTM-FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/S72ppoQtQ9Jrfn2FLxdHOR6oPtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0d:bf:5e:8f:9a:b5:4f:31:77:80:2b:da:d2:32:d5:22:43:
91:25:c4:40:eb:e1:f0:87:e8:e1:44:2a:fc:9b:15:7d:b5:ac:
f3:36:56:33:dc:e2:6e:f2:01:9a:86:2f:49:bb:1f:e1:30:37:
6e:90:8b:5c:7e:01:e0:b1:b0:c7:b6:57:fb:1a:ca:20:93:e2:
0a:57:fe:40:53:e1:c9:57:1c:4c:c6:f6:0e:04:04:35:d9:c2:
ef:0e:00:fa:7f:7f:27:5e:82:8b:d4:f8:fd:14:54:16:1f:08:
85:bf:c5:f9:c7:45:b8:89:1d:28:f8:35:f1:10:c2:ff:de:52:
6a:9e:4a:8a:37:b6:35:79:db:1d:17:62:76:2a:62:42:57:fd:
8e:08:c5:cb:af:f7:ef:99:41:6a:de:04:0b:91:95:e7:89:d6:
a5:20:22:58:68:fb:97:e1:38:8e:27:ac:3f:26:17:0a:cc:d7:
08:73:76:df:33:09:b7:46:c1:bf:1c:2d:f4:5f:64:1f:6b:48:
dd:21:cb:64:c9:d5:64:2f:e7:ec:f8:7f:12:15:0d:5f:25:88:
a3:09:4d:aa:f8:46:55:c6:04:78:88:fd:66:6f:e9:d0:f2:06:
c1:ac:aa:33:f1:7f:37:fb:89:c0:12:b1:af:9f:6c:bd:ce:d2:
61:f4:aa:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPgfd8b8h7VA0Q0dnszWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYmRhOWE2ODQyZDQzZDI2YjdlN2Q4NTJmMTc0NzM5MWVh
ODNlZDkwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGM0MTQ4NDA4ZmFjYTk3YzAzOTUyMTcwMzc1OTU3MTQ0Y2NmODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva4rRi9361uCLP7K/BT1v2/fe8+P
I6JAZZ3OxZdH8dhBb7Mowp9Rwz6kvmsoit10/MaOqJdGEJyh6CxzQMMDRKeZ0Um8
MWsuyV1kyEKmL2AmabNnigH7Plyl8pl2/XDm7Iutog30EzDgTrEb0mcQmAC1TeOq
aYaUOtQsURiQaGOuBaSOkGu9TlEnepwJ+HJ4JKq6aoZmASx3BT7utRw24x31jUqY
YkmBH3HVbQ/gRt4aP1n6Xf/n4APZElnRr/ahPPxlFGmVG6OSq+2qT/bDRSlnVg/Y
9dK47akYQ7SlsUji4So8Hr+BFWWS+m+BDMYbdOo3sif9vmAJ87jX8XAhTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPDEFIQI+sqXwDlSFwN1lXFEzPhSMB8GA1UdIwQY
MBaAFEu9qaaELUPSa359hS8XRzkeqD7ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzcycHBvUXRROUpyZm4yRkx4ZEhPUjZvUHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt
MTI3OGE0MmUwOTJhLzEvOE1RVWhBajZ5cGZBT1ZJWEEzV1ZjVVRNLUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh
LzEvUzcycHBvUXRROUpyZm4yRkx4ZEhPUjZvUHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX0LiMA0G
CSqGSIb3DQEBCwUAA4IBAQBPDb9ej5q1TzF3gCva0jLVIkORJcRA6+Hwh+jhRCr8
mxV9tazzNlYz3OJu8gGahi9Jux/hMDdukItcfgHgsbDHtlf7Gsogk+IKV/5AU+HJ
VxxMxvYOBAQ12cLvDgD6f38nXoKL1Pj9FFQWHwiFv8X5x0W4iR0o+DXxEML/3lJq
nkqKN7Y1edsdF2J2KmJCV/2OCMXLr/fvmUFq3gQLkZXnidalICJYaPuX4TiOJ6w/
JhcKzNcIc3bfMwm3RsG/HC30X2Qfa0jdIctkydVkL+fs+H8SFQ1fJYijCU2q+EZV
xgR4iP1mb+nQ8gbBrKoz8X83+4nAErGvn2y9ztJh9KqF
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:49:42 2026 by rpki-client