Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/STyrgbkCb9xlgPIzAru5881XqTY.roa
File: STyrgbkCb9xlgPIzAru5881XqTY.roa (raw, json)
Hash identifier: gaJwMLjeuZm5j33YRWZEGZW2tX1zUrw7a26V3n33Oag=
Subject key identifier: 49:3C:AB:81:B9:02:6F:DC:65:80:F2:33:02:BB:B9:F3:CD:57:A9:36
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019EA7DCDD385A6483A98C8893A2548B6EA1
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/STyrgbkCb9xlgPIzAru5881XqTY.roa
Signing time: Mon 08 Jun 2026 15:32:09 +0000
ROA not before: Mon 08 Jun 2026 15:32:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48467
IP address blocks: 94.228.160.0/24 maxlen: 24
94.228.167.0/24 maxlen: 24
94.228.171.0/24 maxlen: 24
94.228.172.0/22 maxlen: 22
94.228.172.0/24 maxlen: 24
178.236.241.0/24 maxlen: 24
178.236.242.0/24 maxlen: 24
178.236.248.0/22 maxlen: 22
178.236.255.0/24 maxlen: 24
185.46.44.0/22 maxlen: 22
185.46.44.0/23 maxlen: 23
185.46.44.0/24 maxlen: 24
185.46.45.0/24 maxlen: 24
185.46.46.0/23 maxlen: 23
185.46.46.0/24 maxlen: 24
185.46.47.0/24 maxlen: 24
2a02:2070::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:dc:dd:38:5a:64:83:a9:8c:88:93:a2:54:8b:6e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jun 8 15:32:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=493cab81b9026fdc6580f23302bbb9f3cd57a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:4d:97:dc:57:7b:ef:69:cb:2f:4c:1e:a9:
39:28:57:96:57:96:88:0d:50:09:a2:74:0c:44:83:
39:25:90:51:c0:2c:01:e8:9e:4d:8e:f9:0a:18:f4:
d4:83:2a:70:58:42:09:d9:4f:9d:57:6d:82:c1:1d:
f1:a7:8e:cd:b2:e4:55:3c:3a:38:0b:40:cb:3f:82:
bd:ad:4c:78:82:6d:21:56:84:74:b3:4d:f5:b7:0c:
02:a0:e9:a8:44:e5:4e:ad:3a:41:e9:df:ba:b4:07:
6c:b4:5e:f9:8e:10:ce:11:25:76:88:72:98:a7:f8:
e8:9e:03:e5:e9:f1:a1:cd:d1:65:66:05:b6:f2:bd:
d8:07:3b:1a:0b:13:af:ac:6e:0e:dd:08:16:c7:f5:
2a:39:5a:7c:5c:0e:08:06:6c:8c:a9:6d:bb:86:37:
53:72:86:d8:9f:4a:3c:09:97:c7:63:2c:2e:3a:73:
97:2a:14:06:57:20:b4:ac:8e:bd:f4:6c:d6:0e:08:
86:0c:e6:5f:e6:a0:ad:59:73:c8:cc:b6:88:80:f1:
81:b1:78:ae:ee:03:a6:0a:f3:2c:b4:cb:42:72:6d:
59:9d:1b:65:cb:01:b1:c2:29:6c:cd:4e:28:ff:4a:
da:37:8d:41:62:52:26:f8:20:a5:8a:89:9a:90:a9:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:AB:81:B9:02:6F:DC:65:80:F2:33:02:BB:B9:F3:CD:57:A9:36
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/STyrgbkCb9xlgPIzAru5881XqTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.160.0/24
94.228.167.0/24
94.228.171.0-94.228.175.255
178.236.241.0-178.236.242.255
178.236.248.0/22
178.236.255.0/24
185.46.44.0/22
IPv6:
2a02:2070::/32
Signature Algorithm: sha256WithRSAEncryption
aa:48:5c:1b:c8:23:b6:27:77:ba:0d:ef:72:fc:06:6e:7d:19:
35:0d:4e:b3:5f:bf:46:4d:9c:23:99:27:a6:25:bd:37:d5:20:
84:bf:35:52:72:52:06:bd:18:b6:f2:ad:7f:01:7b:12:61:c8:
99:b0:74:58:4f:bd:58:d4:5b:32:5f:59:7c:88:c4:4f:af:34:
87:3f:bb:10:1f:a4:49:82:97:cb:b4:39:64:d5:53:a3:45:12:
52:80:bf:63:7d:69:04:6d:b6:bc:65:50:c9:30:4a:fe:75:ae:
ad:e4:ba:45:b0:a8:70:af:08:08:c4:8f:05:ba:2e:98:d9:ac:
cc:4c:91:37:f6:68:34:a8:88:77:21:7f:46:b7:79:57:58:4e:
32:7b:e7:25:1f:45:47:a9:ba:dd:25:f0:ea:49:75:51:17:97:
4e:d3:c5:a7:cc:b5:8f:68:a2:5e:fe:41:2c:39:66:38:a9:b0:
ac:c1:e0:70:4c:8d:86:0f:91:cd:8f:47:3d:ab:28:91:17:a8:
47:3f:a8:2a:cd:07:06:8b:dc:25:57:c3:e3:79:83:69:a1:db:
f0:67:c3:c1:fb:06:bf:cf:4b:fc:aa:bd:c8:a8:91:ed:27:7b:
74:7f:0f:ea:ce:6b:9e:0a:28:18:9a:4a:73:db:4c:a4:1f:41:
e9:38:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:23:57 2026 by rpki-client