Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa
File: fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa (raw, json)
Hash identifier: 3FK6PbiJEFCVQCpQogIU0uOqOIRz4gHsO2agb5Bk1QM=
Subject key identifier: 7D:0E:DB:3E:02:BD:A2:EB:D2:ED:F6:CF:B8:8A:5F:BA:C9:4A:F9:15
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0197EA170DF9F781DD9FEBB1127F23DA83D0
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa
Signing time: Tue 08 Jul 2025 12:51:08 +0000
ROA not before: Tue 08 Jul 2025 12:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 94.228.162.0/23 maxlen: 23
94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.164.0/23 maxlen: 23
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
178.236.244.0/24 maxlen: 24
178.236.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:17:0d:f9:f7:81:dd:9f:eb:b1:12:7f:23:da:83:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 8 12:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d0edb3e02bda2ebd2edf6cfb88a5fbac94af915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:48:ea:d5:75:a8:f7:84:34:31:91:70:30:
c5:e1:d9:f9:6d:79:72:6f:de:71:90:f0:ff:5a:90:
d1:0d:8e:b7:fb:6d:84:4d:0c:70:e0:d4:e7:0e:7c:
e1:6c:27:39:15:91:2b:01:2e:64:78:c5:a2:ac:af:
b4:07:62:c9:3d:ec:54:e9:aa:63:ae:6f:b5:53:bf:
c4:c5:71:35:fd:13:b2:7f:31:f5:06:c5:4d:7f:48:
64:b1:8c:37:b0:11:db:23:90:28:59:03:b5:36:d5:
7c:41:1c:77:e5:e5:89:5f:8a:b2:4f:bd:6f:97:45:
49:97:fb:c6:a3:cd:76:42:11:91:d4:8b:48:d1:4c:
11:3d:a5:2f:06:85:9c:c6:2f:53:49:57:31:01:13:
db:56:10:d8:fb:ec:b6:ff:4e:12:57:07:5b:72:59:
89:1b:f1:39:a9:1d:bf:49:12:d1:61:b0:e8:e4:85:
00:df:a7:a9:c9:0f:fb:6f:ca:36:cd:ab:9e:d8:fb:
69:63:13:31:d0:02:3a:a7:f7:46:b2:3c:8c:45:82:
9b:13:78:29:9b:f6:d4:63:d3:93:82:da:6d:b1:bb:
1b:86:85:19:34:26:23:8e:22:ce:77:a3:64:e4:78:
fe:1b:6f:79:44:94:85:0b:40:d9:0f:f5:44:12:d5:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0E:DB:3E:02:BD:A2:EB:D2:ED:F6:CF:B8:8A:5F:BA:C9:4A:F9:15
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.168.0-94.228.170.255
178.236.244.0/24
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
08:8a:55:52:67:61:16:9c:4a:0e:50:b9:fe:b3:67:f1:e0:79:
58:bb:b8:d4:4b:9f:10:0f:b1:48:1b:06:45:f9:6b:f7:54:51:
a2:8d:a7:3c:ad:53:2c:59:a7:8d:78:44:1c:f3:2d:6e:aa:01:
f7:92:4a:01:6f:b9:ac:19:9f:33:9a:0a:3a:99:19:67:07:2b:
3a:19:0b:5d:95:95:a1:26:eb:91:3a:8f:d7:50:89:ef:ad:0e:
94:86:ee:b8:e5:7b:b6:cf:dc:de:ad:9d:ff:8b:fe:7a:4f:ea:
65:ab:3e:5c:94:cc:cc:27:20:5b:6a:80:fc:c8:bb:e6:ed:62:
45:22:22:f5:48:64:d7:2a:fe:5f:a8:48:92:90:4b:ef:67:a0:
ec:f1:0f:ca:cd:6c:cc:73:54:f5:08:88:05:ef:fe:5a:5d:c0:
cd:1d:a0:59:6b:68:fb:7c:75:f2:2f:1e:09:f5:f7:df:b4:07:
87:83:10:35:1e:3f:5f:e2:0d:00:ed:b5:51:c5:2a:44:36:40:
9d:00:45:0c:e9:3e:ef:1d:82:7e:e0:a9:e2:cc:d9:bf:61:9f:
82:e6:84:2a:0f:69:b7:01:cf:e4:cb:68:e3:cc:a9:b9:dc:25:
d4:d4:91:e6:a3:ef:2b:e1:eb:b2:65:e1:15:c7:6c:43:a8:cc:
63:04:6c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:26:21 2025 by rpki-client