Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/hYlMUbEIe0MLoygNNsCndzd_sdc.roa
File: hYlMUbEIe0MLoygNNsCndzd_sdc.roa (raw, json)
Hash identifier: R3m4ydan5qsoqyQOAlJIHjMQYZOyrodNzBBOLFgmlxI=
Subject key identifier: 85:89:4C:51:B1:08:7B:43:0B:A3:28:0D:36:C0:A7:77:37:7F:B1:D7
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01A0049374E7EDF4B340F679EFD08F412BEB
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/hYlMUbEIe0MLoygNNsCndzd_sdc.roa
Signing time: Sat 15 Aug 2026 08:39:27 +0000
ROA not before: Sat 15 Aug 2026 08:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 178.236.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:93:74:e7:ed:f4:b3:40:f6:79:ef:d0:8f:41:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 15 08:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85894c51b1087b430ba3280d36c0a777377fb1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:c1:e0:bb:d6:15:c9:0f:cb:4d:7d:62:7a:
f2:c0:d9:98:3f:44:e5:2d:91:ce:82:24:4d:8b:7d:
a8:26:23:b2:02:80:8a:e6:b9:d0:89:2b:9c:36:6d:
98:f9:27:3d:9d:8e:9a:f5:f2:2c:ab:bc:a9:5c:2d:
62:96:7d:3f:b5:7c:f1:3e:65:43:4d:c5:3c:c5:fc:
01:3b:85:0c:31:92:98:32:08:be:19:ca:1f:da:d6:
53:2e:e3:09:de:01:c7:8c:0b:db:fa:7c:16:f2:f0:
18:dc:02:72:57:b6:4d:f6:2b:e6:35:5b:f5:94:ae:
54:ba:20:14:a5:6d:c9:90:bf:f5:5d:1a:1b:71:20:
11:4c:f4:08:e3:91:bb:ec:f7:de:ac:d1:84:13:08:
45:e9:af:28:fa:c0:49:f6:5a:63:20:c6:ef:e9:5a:
29:5f:ac:2d:74:06:3b:e7:1e:2c:32:bf:20:f0:8e:
7f:87:9a:b1:e4:e9:40:aa:f5:95:7d:58:fb:4f:af:
42:70:f5:2b:cf:00:1d:a6:71:06:54:00:34:74:a7:
97:40:8f:6a:7b:91:1f:56:0f:9d:3b:d9:86:64:6e:
da:b3:43:13:6e:f1:1b:d0:55:6a:b9:52:12:bc:2e:
bd:38:d9:ec:36:79:07:02:5a:82:bd:20:51:74:f9:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:4C:51:B1:08:7B:43:0B:A3:28:0D:36:C0:A7:77:37:7F:B1:D7
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/hYlMUbEIe0MLoygNNsCndzd_sdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:26:63:3a:f9:06:96:e1:cc:4e:f2:fb:5e:9f:bb:2a:fb:8a:
e8:d0:fb:2b:e3:1a:03:9d:8f:62:fd:25:38:66:76:2f:50:3b:
e7:97:2f:f2:4c:3e:fa:85:88:a7:12:f7:f4:83:d0:61:3b:0a:
63:a4:1f:a3:a6:9b:0f:ab:b1:97:5a:66:e6:1a:12:e6:0c:e0:
d9:07:bd:ae:bb:a1:7d:35:36:42:cd:4e:e3:90:12:69:55:ec:
31:9a:7d:d5:47:54:07:09:b4:b9:4d:8a:70:0f:72:16:52:a6:
db:ed:68:c1:67:11:c5:28:d1:30:81:6d:16:bc:36:61:ff:bf:
a0:0d:4e:1d:9a:db:1b:5b:b6:3d:3a:dd:b0:36:91:01:79:62:
82:a4:a6:79:f0:9d:ac:00:58:dc:21:e7:e4:7f:97:ac:54:2c:
4b:26:80:38:c9:ab:ff:16:79:31:dc:97:7c:0d:4d:02:4c:95:
31:17:6f:ce:8a:56:df:0a:07:6d:d4:a0:1f:92:44:ca:5d:64:
52:66:e0:f2:db:2b:d1:28:5b:f1:e1:0b:bf:e0:f0:dc:5d:b2:
a8:e1:89:79:4a:08:bd:66:ab:bc:58:1e:6d:60:90:9c:39:07:
95:b6:50:55:ec:9f:1a:c6:25:c4:d3:3a:84:e1:5b:da:ba:12:
84:0f:59:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:06 2026 by rpki-client