Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/OBLMUGZooru5WuUse6LJOkuTz70.roa
File: OBLMUGZooru5WuUse6LJOkuTz70.roa (raw, json)
Hash identifier: xJrMc/yTNWmmgImV90G4WNUvy9d7gyIEGZPZ8Hiw5LY=
Subject key identifier: 38:12:CC:50:66:68:A2:BB:B9:5A:E5:2C:7B:A2:C9:3A:4B:93:CF:BD
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019F92D6BCF2864959810D90D923A4B692C5
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/OBLMUGZooru5WuUse6LJOkuTz70.roa
Signing time: Fri 24 Jul 2026 06:36:14 +0000
ROA not before: Fri 24 Jul 2026 06:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22445
IP address blocks: 194.26.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:d6:bc:f2:86:49:59:81:0d:90:d9:23:a4:b6:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Jul 24 06:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3812cc506668a2bbb95ae52c7ba2c93a4b93cfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:73:5b:c5:b4:4d:53:bc:f8:9f:13:50:c2:8d:
f9:8c:b1:75:0a:65:75:d4:ae:13:d8:e7:d4:eb:1c:
c0:b5:e4:24:0b:30:a0:cd:68:a1:aa:c7:78:9c:a4:
49:e7:0c:87:68:46:1b:06:25:4d:36:11:2d:50:e9:
4f:6a:50:26:40:48:ea:a9:e3:49:b3:77:26:13:e8:
24:31:f6:8d:04:ad:b7:15:77:73:7b:69:40:4b:33:
13:3c:61:18:e4:2c:93:ee:5a:2b:3e:15:ed:cc:fd:
13:52:5d:20:c0:0e:0c:af:f7:9e:d2:2d:1a:12:b6:
6f:38:4f:b7:b4:c0:53:86:5b:c7:28:48:50:bc:f6:
68:f7:96:41:e2:9a:b9:0f:e3:47:d2:26:3d:68:5f:
b7:7b:e9:e1:31:bf:17:53:38:7a:b1:93:d5:eb:a9:
de:7f:62:a6:b0:3d:2a:b1:df:6a:98:0e:bd:6b:84:
b1:4a:91:13:bf:f9:e3:18:83:4a:6a:9e:dc:25:ed:
c1:cd:fd:fe:dc:1c:d3:63:3c:a9:93:12:57:d4:35:
95:9c:6d:b7:df:f4:b1:84:38:da:01:87:93:69:c7:
98:eb:ad:9a:f5:20:9d:d6:31:08:9e:00:de:b3:26:
ee:0f:b1:8c:e1:45:0a:fe:41:3f:77:45:63:76:1a:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:CC:50:66:68:A2:BB:B9:5A:E5:2C:7B:A2:C9:3A:4B:93:CF:BD
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/OBLMUGZooru5WuUse6LJOkuTz70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:be:88:b6:45:c5:67:4c:4e:df:94:ae:24:9f:43:f4:ee:07:
19:17:66:d2:be:80:24:2a:5c:64:60:d8:c3:b8:a5:dc:0a:97:
22:f6:ac:4f:79:c4:86:96:fa:ce:e2:80:5a:a8:10:9b:0a:bf:
b1:5a:9b:5a:2d:8f:d6:bc:b7:9c:4e:22:5b:b8:c0:e1:bf:0b:
51:79:47:ae:73:f6:0b:97:1e:61:d9:a0:0b:27:18:12:4e:39:
d1:4b:ee:c8:06:5a:4f:0f:f6:f9:44:12:25:91:7e:29:93:8e:
95:65:f4:4d:28:8d:60:0f:01:6f:6e:c3:a7:0e:bf:f8:7f:12:
62:57:9a:1a:be:4e:10:d3:f3:b4:4c:2c:53:2e:a6:5b:fb:30:
33:db:d2:2a:ec:0f:07:5f:73:21:3e:24:4b:e2:73:77:cf:c6:
62:d8:c3:10:13:c2:23:ef:40:c3:d0:e9:1c:23:32:6f:b6:1e:
c8:99:1a:d0:56:40:2f:26:15:79:f9:6e:0c:e3:72:4a:98:31:
1f:fc:42:d5:4e:df:a3:38:30:f1:31:2c:e7:20:f8:8d:65:ad:
cd:67:d8:19:5f:b0:81:61:73:af:cb:27:cb:1b:75:da:62:72:
82:fe:29:21:20:90:b7:06:68:e4:6f:d4:0d:eb:d4:81:63:55:
e5:e4:99:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+S1rzyhklZgQ2Q2SOktpLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey
ZTUxYTYwHhcNMjYwNzI0MDYzNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODEyY2M1MDY2NjhhMmJiYjk1YWU1MmM3YmEyYzkzYTRiOTNjZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XNbxbRNU7z4nxNQwo35jLF1CmV1
1K4T2OfU6xzAteQkCzCgzWihqsd4nKRJ5wyHaEYbBiVNNhEtUOlPalAmQEjqqeNJ
s3cmE+gkMfaNBK23FXdze2lASzMTPGEY5CyT7lorPhXtzP0TUl0gwA4Mr/ee0i0a
ErZvOE+3tMBThlvHKEhQvPZo95ZB4pq5D+NH0iY9aF+3e+nhMb8XUzh6sZPV66ne
f2KmsD0qsd9qmA69a4SxSpETv/njGINKap7cJe3Bzf3+3BzTYzypkxJX1DWVnG23
3/SxhDjaAYeTaceY662a9SCd1jEIngDesybuD7GM4UUK/kE/d0VjdhrHfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgSzFBmaKK7uVrlLHuiyTpLk8+9MB8GA1UdIwQY
MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt
MzQ1YjJhYjBkYjE4LzEvT0JMTVVHWm9vcnU1V3VVc2U2TEpPa3VUejcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4
LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhp2MA0G
CSqGSIb3DQEBCwUAA4IBAQBbvoi2RcVnTE7flK4kn0P07gcZF2bSvoAkKlxkYNjD
uKXcCpci9qxPecSGlvrO4oBaqBCbCr+xWptaLY/WvLecTiJbuMDhvwtReUeuc/YL
lx5h2aALJxgSTjnRS+7IBlpPD/b5RBIlkX4pk46VZfRNKI1gDwFvbsOnDr/4fxJi
V5oavk4Q0/O0TCxTLqZb+zAz29Iq7A8HX3MhPiRL4nN3z8Zi2MMQE8Ij70DD0Okc
IzJvth7ImRrQVkAvJhV5+W4M43JKmDEf/ELVTt+jODDxMSznIPiNZa3NZ9gZX7CB
YXOvyyfLG3XaYnKC/ikhIJC3Bmjkb9QN69SBY1Xl5Jkm
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:17 2026 by rpki-client