Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/_qz-ECkX7rdYXe18FxvwEN_o4KY.roa
File: _qz-ECkX7rdYXe18FxvwEN_o4KY.roa (raw, json)
Hash identifier: aTo9YpsZgixQXbTOLfy5tHzbGWaSn/wixJhBUe3ESI4=
Subject key identifier: FE:AC:FE:10:29:17:EE:B7:58:5D:ED:7C:17:1B:F0:10:DF:E8:E0:A6
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019EB0E66DE1366AC673E2FF39FAAEAFBCAC
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/_qz-ECkX7rdYXe18FxvwEN_o4KY.roa
Signing time: Wed 10 Jun 2026 09:39:11 +0000
ROA not before: Wed 10 Jun 2026 09:39:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
94.228.172.0/24 maxlen: 24
178.236.246.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
178.236.248.0/24 maxlen: 24
178.236.250.0/24 maxlen: 24
178.236.251.0/24 maxlen: 24
178.236.252.0/24 maxlen: 24
178.236.255.0/24 maxlen: 24
194.59.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:e6:6d:e1:36:6a:c6:73:e2:ff:39:fa:ae:af:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jun 10 09:39:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feacfe102917eeb7585ded7c171bf010dfe8e0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:28:29:5c:7e:83:c2:a7:93:e5:6d:89:d1:
ac:b3:87:fb:be:63:b3:7c:aa:71:ef:15:e3:55:95:
76:56:73:e4:12:03:e8:8b:93:19:25:f6:43:e3:39:
97:3d:00:fd:c3:a7:12:c9:56:31:29:dc:fe:38:18:
fd:80:48:09:af:13:79:aa:83:09:4e:20:61:b3:67:
f3:80:cf:55:80:b7:5b:19:cb:ba:d3:37:4a:74:df:
db:f7:97:21:00:89:f9:3c:36:96:2e:2b:2a:53:59:
6d:da:02:c2:cf:d3:6f:eb:fa:71:36:0d:f2:8d:3c:
46:9d:fb:c2:f0:a2:c3:c7:e0:6a:a4:a2:24:4c:f2:
55:e9:6d:ff:b0:54:8b:86:c1:5d:e3:2b:68:e0:cf:
a0:b3:df:30:d6:f5:1a:3d:5e:14:d5:09:ab:33:fd:
35:ea:eb:1b:5d:49:5c:8e:bf:c4:2c:b1:e6:63:27:
c4:d8:0a:9a:4b:05:0b:84:01:ca:8f:3f:a5:95:cc:
61:4b:2f:0e:e8:c5:b0:8f:36:05:dc:fa:bb:b6:55:
99:be:11:ef:f3:d5:f8:c4:d2:1e:26:63:0c:44:cf:
7d:e0:d8:7b:fe:0b:8d:77:d6:43:f4:18:a2:b9:17:
b4:0f:0b:00:42:e4:c9:24:a3:38:bc:e1:2f:fa:78:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:FE:10:29:17:EE:B7:58:5D:ED:7C:17:1B:F0:10:DF:E8:E0:A6
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/_qz-ECkX7rdYXe18FxvwEN_o4KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.169.0-94.228.170.255
94.228.172.0/24
178.236.246.0-178.236.248.255
178.236.250.0-178.236.252.255
178.236.255.0/24
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:96:24:63:c9:51:4c:b9:53:0e:43:2c:a4:8f:8a:11:11:67:
19:b0:71:a1:75:0c:50:15:ef:e0:92:8e:01:5d:9a:cd:26:48:
ad:bf:c3:52:53:31:9a:53:2a:b1:91:ee:f3:1b:5b:57:f2:1a:
ac:04:64:00:36:2e:4a:6d:c7:8b:0a:da:df:58:fe:7d:b5:73:
57:70:45:6b:f1:02:88:25:02:d9:3b:54:2f:09:68:89:fc:f2:
f9:aa:e5:10:24:0b:69:0c:f2:a7:27:97:ab:32:26:b3:a8:05:
6a:8e:6a:64:c3:f7:b9:dd:37:d5:ef:66:f9:75:15:87:23:42:
d8:8c:26:3b:4c:61:ce:0e:c4:69:47:d3:2f:f5:db:58:ee:48:
91:d6:04:75:da:18:4e:b4:99:7b:86:f2:54:71:d1:e9:57:f9:
75:18:48:68:bf:03:a2:c3:81:4f:1a:56:c8:07:a6:34:4c:d4:
6c:22:a2:a9:1a:58:6f:7c:e6:f5:6e:07:a0:8c:88:cc:00:a7:
65:4f:23:01:1a:62:3a:23:83:e9:7b:f0:64:04:03:b5:34:47:
75:0b:98:69:1a:24:2d:37:26:4d:c2:18:de:48:25:7a:27:71:
c7:69:a8:ef:52:ab:e0:f3:98:cb:8e:fa:22:28:1c:fb:6c:8e:
1c:1e:ad:cc
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZ6w5m3hNmrGc+L/Ofqur7ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjYwNjEwMDkzOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWFjZmUxMDI5MTdlZWI3NTg1ZGVkN2MxNzFiZjAxMGRmZThlMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD8oKVx+g8Knk+VtidGss4f7vmOz
fKpx7xXjVZV2VnPkEgPoi5MZJfZD4zmXPQD9w6cSyVYxKdz+OBj9gEgJrxN5qoMJ
TiBhs2fzgM9VgLdbGcu60zdKdN/b95chAIn5PDaWLisqU1lt2gLCz9Nv6/pxNg3y
jTxGnfvC8KLDx+BqpKIkTPJV6W3/sFSLhsFd4yto4M+gs98w1vUaPV4U1QmrM/01
6usbXUlcjr/ELLHmYyfE2AqaSwULhAHKjz+llcxhSy8O6MWwjzYF3Pq7tlWZvhHv
89X4xNIeJmMMRM994Nh7/guNd9ZD9BiiuRe0DwsAQuTJJKM4vOEv+nhtewIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFP6s/hApF+63WF3tfBcb8BDf6OCmMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvX3F6LUVDa1g3cmRZWGUxOEZ4dndFTl9vNEtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBAFe5KID
BAFe5KQwDAMEAF7kqQMEAF7kqgMEAF7krDAMAwQBsuz2AwQAsuz4MAwDBAGy7PoD
BACy7PwDBACy7P8DBADCO7owDQYJKoZIhvcNAQELBQADggEBAKmWJGPJUUy5Uw5D
LKSPihERZxmwcaF1DFAV7+CSjgFdms0mSK2/w1JTMZpTKrGR7vMbW1fyGqwEZAA2
Lkptx4sK2t9Y/n21c1dwRWvxAoglAtk7VC8JaIn88vmq5RAkC2kM8qcnl6syJrOo
BWqOamTD97ndN9XvZvl1FYcjQtiMJjtMYc4OxGlH0y/121juSJHWBHXaGE60mXuG
8lRx0elX+XUYSGi/A6LDgU8aVsgHpjRM1GwioqkaWG985vVuB6CMiMwAp2VPIwEa
Yjojg+l78GQEA7U0R3ULmGkaJC03Jk3CGN5IJXonccdpqO9Sq+DzmMuO+iIoHPts
jhwercw=
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:22:35 2026 by rpki-client