Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/zy4Qbw7fTqIkA6Z6I6IoduYLYpQ.roa
File: zy4Qbw7fTqIkA6Z6I6IoduYLYpQ.roa (raw, json)
Hash identifier: 7Q1rYG2Xrx72MRu0g7+KNiZYjMY0GDAtCJj++ROFkwE=
Subject key identifier: CF:2E:10:6F:0E:DF:4E:A2:24:03:A6:7A:23:A2:28:76:E6:0B:62:94
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01A1350744BD9B8203DAA62B32C2B67C3E27
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/zy4Qbw7fTqIkA6Z6I6IoduYLYpQ.roa
Signing time: Tue 13 Oct 2026 11:30:31 +0000
ROA not before: Tue 13 Oct 2026 11:30:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 94.228.173.0/24 maxlen: 24
94.228.175.0/24 maxlen: 24
178.236.242.0/24 maxlen: 24
178.236.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:07:44:bd:9b:82:03:da:a6:2b:32:c2:b6:7c:3e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Oct 13 11:30:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf2e106f0edf4ea22403a67a23a22876e60b6294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:77:76:8b:7d:1d:64:6b:04:da:97:f6:a8:
9c:36:2a:87:73:a1:0e:4c:e6:43:0f:04:f8:bd:00:
5b:b6:19:a3:38:68:fc:dc:9b:ab:5b:55:b7:53:f1:
89:3c:14:72:8c:7f:da:38:f8:be:53:3a:e1:8f:5c:
da:6d:50:34:14:39:30:8f:a8:c9:97:2d:b9:4a:7d:
2d:4a:67:be:9d:34:a4:2a:bc:29:10:b6:27:fb:af:
d7:1b:98:65:e1:b9:be:93:52:db:48:8b:27:4a:ad:
6e:7b:f9:cd:6e:c6:3b:5a:9a:f0:bc:07:f6:f6:ad:
f0:2e:00:94:46:72:f7:a0:5e:57:72:e1:51:cc:19:
5a:a8:6c:cc:3e:dd:d4:b4:e1:03:49:d9:f7:e7:15:
6b:b8:4d:9a:0d:a5:e3:e9:a2:97:71:f1:b4:76:75:
3f:1a:c5:59:f2:62:01:b0:f2:c1:f2:6b:07:d0:33:
5f:5e:46:ab:8b:e2:1a:04:20:74:d2:a8:62:8c:71:
1d:78:a4:d3:1c:24:0f:a4:50:f3:3c:4d:d7:33:9f:
6b:bb:49:45:a0:c2:06:a1:ed:a6:ea:b9:11:41:20:
a5:ad:85:82:8c:ca:cd:cb:e2:1d:14:6b:25:32:cf:
df:a0:66:a9:2b:58:f2:e4:42:2b:54:13:df:9f:c6:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:10:6F:0E:DF:4E:A2:24:03:A6:7A:23:A2:28:76:E6:0B:62:94
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/zy4Qbw7fTqIkA6Z6I6IoduYLYpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.173.0/24
94.228.175.0/24
178.236.242.0/24
178.236.250.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c3:36:1b:2b:fc:f2:53:58:5d:08:b0:00:74:e1:13:70:7f:
74:55:aa:b2:da:8f:39:fe:9c:c2:47:da:41:c6:24:09:23:88:
e5:8a:28:f8:1b:0c:7f:df:b8:b5:2c:e4:a4:3f:8f:41:0f:7d:
53:98:5e:da:6d:96:b5:69:9e:4f:72:7a:60:bf:0d:7a:8e:e2:
75:68:b8:66:54:b3:39:21:09:e2:48:ce:a9:53:0b:f6:3c:85:
a4:ee:ae:24:c2:49:80:ab:df:c7:08:86:e0:74:12:e5:17:17:
b6:a8:ea:e5:c8:fd:5f:41:c0:d7:d4:2e:26:01:a6:83:f0:db:
cf:2a:86:f3:54:c7:4e:03:c8:5c:c8:68:84:67:70:91:ae:c0:
c6:53:62:85:97:6c:fe:41:30:fc:f5:f2:c8:99:79:99:36:7b:
41:c5:7e:33:df:d6:15:53:33:d3:b9:ba:c2:4c:c8:9e:d8:fe:
a7:c5:fd:58:c5:46:d1:07:82:c2:bd:53:bd:dd:44:0d:d1:01:
04:57:42:19:06:c5:ac:e2:d3:f5:c3:cf:02:06:6e:62:ad:85:
a8:f0:59:83:e8:f9:3a:d6:e7:9c:8e:24:4c:94:e8:bb:7d:2f:
90:ef:52:ad:66:d8:f8:fb:94:fe:39:7d:d1:74:15:7e:74:c1:
8a:9b:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:06 2026 by rpki-client