Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/aNRzxkkEVZdbPxBdyV26hwFZ67o.roa
File: aNRzxkkEVZdbPxBdyV26hwFZ67o.roa (raw, json)
Hash identifier: 6j268G3+t6+8A9cd0OyjRSmrucclZF9lasSoOH1XzhU=
Subject key identifier: 68:D4:73:C6:49:04:55:97:5B:3F:10:5D:C9:5D:BA:87:01:59:EB:BA
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019F704C935876E81DE3BC3AB028FB68538D
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/aNRzxkkEVZdbPxBdyV26hwFZ67o.roa
Signing time: Fri 17 Jul 2026 13:38:14 +0000
ROA not before: Fri 17 Jul 2026 13:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 178.236.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:4c:93:58:76:e8:1d:e3:bc:3a:b0:28:fb:68:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 17 13:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68d473c6490455975b3f105dc95dba870159ebba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:33:6e:9e:25:77:1c:86:4c:ce:f4:07:81:
19:b7:1c:bb:88:65:ef:52:f4:eb:5c:27:78:06:9c:
48:da:19:ba:ba:30:53:df:ec:f7:22:df:b5:ad:20:
c3:24:57:1c:1b:a8:cc:f9:7e:95:49:ce:50:e5:f4:
0f:b5:d1:cb:88:a7:8f:d3:59:a1:9f:df:b6:ba:92:
23:20:73:02:74:a2:60:67:53:46:88:2a:49:a6:0d:
03:7d:1a:43:92:0e:df:f1:79:4e:6c:99:c3:c5:c2:
16:ab:9a:dd:2d:fb:ef:04:cc:42:26:bf:55:45:13:
e2:90:ec:fd:64:2f:65:ff:68:19:51:a3:68:72:65:
70:de:b1:b1:3a:d5:10:51:f7:73:d3:4a:7e:ac:c6:
18:d1:7f:8f:c9:a2:8a:91:00:c3:ac:51:5d:66:1b:
c8:03:6c:de:38:bc:10:e4:b0:21:84:77:01:94:7e:
88:be:e0:9b:fb:22:87:4d:29:8b:c9:e1:26:97:3b:
70:c1:1b:84:9f:18:b4:e3:c9:47:50:d4:f8:56:9a:
75:4d:29:86:ee:93:ea:fd:3f:2f:e9:dc:9a:b7:ae:
cc:0c:7a:b3:df:7a:21:ea:0c:30:1b:4d:59:22:48:
aa:66:c8:e4:be:e6:96:37:5f:4c:c2:e6:12:3b:a8:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:73:C6:49:04:55:97:5B:3F:10:5D:C9:5D:BA:87:01:59:EB:BA
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/aNRzxkkEVZdbPxBdyV26hwFZ67o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.250.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f5:54:1a:e6:01:99:d2:99:8c:d9:05:9a:55:8e:af:e2:9d:
e8:17:41:40:fc:de:f3:d6:7d:21:e7:0c:51:da:2a:84:69:8d:
33:bb:b0:52:79:2b:e0:75:7f:7d:f8:24:8a:19:f6:ea:d6:8f:
b8:ab:64:3c:81:1f:3d:60:42:f2:4b:d6:4f:77:16:ac:53:e8:
f8:79:4b:ab:84:71:97:77:71:50:b6:52:f9:21:37:4d:78:6e:
06:0c:f2:e6:f7:37:18:75:df:52:e5:2d:00:1f:52:0d:c5:6c:
33:a3:55:05:32:98:e9:ca:32:44:50:29:c0:5f:91:98:24:01:
90:3c:af:6d:43:cd:68:3a:7a:4d:50:f1:5c:98:45:35:49:02:
b1:01:9b:b1:02:99:23:e0:71:cd:5a:5a:c1:8a:ed:61:25:f9:
d2:55:f4:bd:13:06:07:5d:dc:cc:12:22:67:95:23:5d:13:68:
3e:4c:a4:f5:99:88:d7:b7:59:6c:00:47:78:4e:2b:3c:bb:6e:
cb:45:b4:13:06:cb:88:e3:7f:8d:58:9b:1b:76:4b:6d:df:37:
65:74:3e:dd:44:e7:69:42:55:41:31:23:ab:6b:d0:cf:ba:b6:
74:7e:1d:16:8e:d6:9e:92:6c:77:ca:27:0b:b6:19:f0:0a:ac:
0c:e9:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:34:05 2026 by rpki-client