Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/TiQ4vjMLH1FazbNoVVE22iRFSqA.roa
File: TiQ4vjMLH1FazbNoVVE22iRFSqA.roa (raw, json)
Hash identifier: buAzya8v6dzETk0jAkamyhGbdNsEZzxGd3GNb0RdJSQ=
Subject key identifier: 4E:24:38:BE:33:0B:1F:51:5A:CD:B3:68:55:51:36:DA:24:45:4A:A0
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019E733E0D61C5CC7381F6E182D7E1D69BFF
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/TiQ4vjMLH1FazbNoVVE22iRFSqA.roa
Signing time: Fri 29 May 2026 10:18:26 +0000
ROA not before: Fri 29 May 2026 10:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 178.236.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:3e:0d:61:c5:cc:73:81:f6:e1:82:d7:e1:d6:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 29 10:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e2438be330b1f515acdb368555136da24454aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:7d:e3:d0:2e:ce:a1:0d:9d:6a:9e:2a:d4:
1d:87:0d:82:74:ea:af:2c:20:a2:3b:15:3f:a3:0d:
ab:be:01:84:8e:4c:56:6f:63:76:5d:a5:d8:91:bd:
38:a9:82:f4:cf:0c:4c:de:29:92:5b:c5:56:2d:38:
dd:e7:99:da:f4:3f:a2:b1:0a:15:82:f7:ae:2c:0c:
28:7e:c9:9f:cf:7c:a0:a2:68:61:c7:ec:61:ee:85:
1e:f6:93:9c:6a:c8:27:99:45:6d:8f:3c:c6:d6:4c:
be:5b:73:1c:6c:3c:7b:59:8e:05:eb:dd:bf:a5:9a:
ad:83:29:b6:ef:93:09:ca:3d:9e:85:f6:1e:d3:f1:
15:f3:27:2e:7e:eb:5e:05:75:89:e5:2d:c4:59:cb:
41:f5:15:70:11:d5:bf:ce:f1:3a:58:1c:70:16:cc:
45:ab:81:97:5c:33:d1:16:31:d4:7b:41:84:88:0b:
fe:47:04:8e:4e:7f:1c:d0:6a:22:7b:08:61:a9:9a:
9c:a2:8b:1e:9c:7f:34:b7:7e:b5:90:6f:f4:11:53:
cb:65:d8:fa:43:c2:60:93:3a:b4:a1:7b:8b:4d:c2:
b2:6f:21:5a:45:41:1f:a0:69:95:86:f1:74:36:df:
83:65:e0:4e:65:62:3b:7c:b2:44:39:98:6e:39:5d:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:38:BE:33:0B:1F:51:5A:CD:B3:68:55:51:36:DA:24:45:4A:A0
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/TiQ4vjMLH1FazbNoVVE22iRFSqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8c:31:5f:42:1f:d5:1d:d3:11:69:bd:45:fc:3c:08:3a:b0:
0f:5b:b1:08:c2:db:d6:ef:d2:16:47:66:3e:95:ad:91:fd:c4:
86:a9:a3:52:63:0d:ef:95:41:65:25:d6:17:66:39:e7:28:01:
f5:90:3b:12:15:62:07:3c:c1:5e:87:55:34:d4:ab:51:a6:44:
d9:39:db:25:86:c6:b3:1a:75:00:9d:8a:7c:c4:34:e7:09:92:
bd:de:65:81:46:83:b0:69:05:65:fe:3e:ce:cf:ae:a9:6d:0e:
e2:57:a5:c6:75:f4:04:2a:15:ff:43:f4:79:9e:b9:b5:a1:bc:
8f:7d:ed:5c:f4:fd:d9:19:42:f6:d7:b8:18:28:48:21:34:01:
8f:d6:67:8e:92:63:fd:cf:12:b9:f1:5d:00:5e:39:69:ed:54:
60:c4:02:4f:96:69:83:8e:09:98:4a:aa:50:b4:5f:f9:15:20:
88:12:60:fb:16:59:49:47:d8:6f:a5:3e:5d:34:0e:9b:80:a4:
89:b0:05:5c:ca:16:ae:39:f5:a6:dc:e9:48:91:43:11:35:9f:
d0:72:f2:27:ad:e9:dc:37:f2:47:b1:92:e0:1e:4c:22:16:86:
91:42:cc:87:e0:9d:8a:89:35:bf:e4:cb:f2:29:22:df:eb:85:
ce:3c:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:22:02 2026 by rpki-client