Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HqCLV0l2nt9pKEsL94bTe6_FhqY.roa
File: HqCLV0l2nt9pKEsL94bTe6_FhqY.roa (raw, json)
Hash identifier: Les2aQVRPDaXdfOtmzGNJ2opx87qCboK17cmZRJUK9s=
Subject key identifier: 1E:A0:8B:57:49:76:9E:DF:69:28:4B:0B:F7:86:D3:7B:AF:C5:86:A6
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019FDC03E728830B9693DA5012CFBF045D57
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HqCLV0l2nt9pKEsL94bTe6_FhqY.roa
Signing time: Fri 07 Aug 2026 11:37:51 +0000
ROA not before: Fri 07 Aug 2026 11:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 94.228.171.0/24 maxlen: 24
178.236.240.0/24 maxlen: 24
178.236.241.0/24 maxlen: 24
178.236.243.0/24 maxlen: 24
178.236.249.0/24 maxlen: 24
178.236.253.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:03:e7:28:83:0b:96:93:da:50:12:cf:bf:04:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 7 11:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ea08b5749769edf69284b0bf786d37bafc586a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:59:30:f8:d1:86:04:48:5c:a2:ed:e7:b3:
f2:12:77:ee:fc:4c:01:c8:08:14:d1:e8:e7:00:a4:
78:9f:79:fe:83:82:be:e9:0e:12:60:bb:ca:48:85:
e0:9b:9c:53:3e:90:ea:0a:8f:d3:ed:17:31:59:6c:
a9:76:10:af:ed:8b:6e:8c:61:42:06:61:80:42:af:
c4:39:a7:9f:75:72:c2:69:15:f8:8a:67:65:ec:8d:
7d:e8:55:1b:95:88:2c:fd:44:4a:f3:ce:6d:22:12:
e1:fe:6d:dd:46:e9:05:76:53:ca:87:48:99:76:3b:
5b:b2:43:a3:d1:c8:15:32:07:98:9a:33:ff:e6:1d:
6e:69:fd:2a:0e:97:a8:96:03:d2:85:26:d3:27:f1:
5e:8c:0f:d5:bb:f0:88:9e:25:4f:40:8e:08:2b:6b:
a1:ff:eb:db:c0:5e:0f:63:f7:f8:c5:92:c3:b3:63:
a8:77:ac:f6:ce:59:a2:f9:d3:3d:fa:48:6a:3e:84:
71:d4:9d:73:9d:80:2b:a2:94:f9:43:2a:a9:38:fd:
58:18:38:24:b1:c6:af:9b:3a:d3:6f:43:be:ce:52:
de:ad:18:e0:73:58:40:11:f3:4a:c1:1f:f5:1e:7b:
84:85:48:6e:55:b9:b2:3c:d2:4d:c4:f9:f8:c9:37:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:8B:57:49:76:9E:DF:69:28:4B:0B:F7:86:D3:7B:AF:C5:86:A6
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HqCLV0l2nt9pKEsL94bTe6_FhqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.171.0/24
178.236.240.0/23
178.236.243.0/24
178.236.249.0/24
178.236.253.0-178.236.254.255
Signature Algorithm: sha256WithRSAEncryption
70:4b:5d:12:e6:6e:3c:32:aa:09:bb:3a:e8:54:5c:57:e5:01:
4c:b4:3a:9f:73:e8:9b:5b:51:df:a4:77:a4:5e:dc:e9:fb:26:
76:99:bd:a4:b5:a5:72:a1:73:73:f7:f7:f7:4d:2b:50:92:2c:
58:a0:8f:9f:96:ea:5d:da:c2:53:13:2e:42:a7:95:51:6f:fe:
54:06:b1:98:b1:7c:aa:1b:8c:cc:ae:03:c8:19:26:85:d5:91:
63:01:db:d8:64:c3:c1:b0:24:63:d4:03:87:6e:bc:0a:a6:3e:
e1:e7:bc:16:c6:d1:92:97:b8:27:79:01:cd:99:a3:a7:85:bf:
d6:d2:e4:fe:9f:37:45:54:97:de:b0:c6:22:2b:c6:6c:68:ac:
ed:f5:9d:f8:f5:ef:9c:5d:78:00:63:6b:ba:f5:33:b8:68:2e:
62:60:35:0c:4d:08:f4:5f:00:36:5d:0d:13:14:8f:22:96:08:
e3:eb:a6:ef:ba:95:1e:ff:ad:c8:e2:10:e5:a5:0f:be:af:4b:
5a:f9:62:7b:88:ca:52:1e:2a:6c:8d:fd:40:be:2a:53:8c:38:
9c:61:c0:48:35:14:24:69:d1:0b:8f:7a:7e:08:a2:51:f0:68:
5b:08:51:ee:26:2d:f7:de:5d:b2:38:a0:dd:b8:86:39:85:59:
c9:6a:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:01:07 2026 by rpki-client