Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/iviXyjyGaS-f47kJzFwp_XHMupA.roa
File: iviXyjyGaS-f47kJzFwp_XHMupA.roa (raw, json)
Hash identifier: xMullCVMEGwcle1lxrs1RWpJWAICMHkEDBcmwO9pUk0=
Subject key identifier: 8A:F8:97:CA:3C:86:69:2F:9F:E3:B9:09:CC:5C:29:FD:71:CC:BA:90
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019E72AAA887370A8BFF74455CCB4206156B
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/iviXyjyGaS-f47kJzFwp_XHMupA.roa
Signing time: Fri 29 May 2026 07:37:27 +0000
ROA not before: Fri 29 May 2026 07:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 94.228.168.0/24 maxlen: 24
178.236.244.0/23 maxlen: 24
178.236.246.0/23 maxlen: 24
178.236.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:aa:a8:87:37:0a:8b:ff:74:45:5c:cb:42:06:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 29 07:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8af897ca3c86692f9fe3b909cc5c29fd71ccba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:d8:1e:95:61:a3:ad:82:8e:35:9b:d5:28:
da:dd:90:68:b3:bb:d1:e7:68:ea:d9:35:95:35:0b:
4a:b9:ba:c6:da:b6:01:29:b3:a3:4a:0f:48:02:b4:
84:e5:55:98:e6:2e:ee:e9:88:dd:0c:e1:90:5b:0c:
4f:ff:c6:0e:e0:f5:d1:ac:7d:71:ac:8a:a6:23:71:
0e:6e:97:af:ef:57:b7:2a:82:4f:ef:2e:62:9d:d3:
c9:fe:cb:ef:2a:0d:c3:88:57:f6:d6:02:54:20:86:
36:44:3f:b4:07:b8:02:c6:3f:ae:09:13:73:84:87:
a9:f0:d9:26:36:05:68:12:8d:cb:19:ee:c2:ef:2c:
dd:fd:9c:6d:01:2a:82:3f:5f:5f:91:2f:9a:31:fb:
8c:2a:b4:58:23:c0:a9:b5:a4:42:3e:be:d6:f0:ee:
0a:ff:82:12:5b:35:46:41:08:c5:e5:a0:29:53:ff:
69:1f:ed:c5:de:b8:fb:bb:3b:32:19:ff:91:fd:2f:
0a:d0:74:02:ad:bf:e9:d3:66:b8:9e:69:13:5a:52:
58:2c:ad:dd:9a:d2:48:6e:97:31:55:3e:38:5b:d5:
55:84:e4:ca:ef:ec:e6:bc:94:17:3a:29:01:a7:42:
5c:4f:e4:92:31:9f:12:43:f2:2d:5d:2f:00:c9:80:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F8:97:CA:3C:86:69:2F:9F:E3:B9:09:CC:5C:29:FD:71:CC:BA:90
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/iviXyjyGaS-f47kJzFwp_XHMupA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0/24
178.236.244.0/22
178.236.253.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a0:5d:34:df:d7:c5:dc:23:f9:a5:e3:84:90:96:7c:8a:a9:
f4:ed:6e:96:28:f3:7d:a0:39:f0:e5:ed:35:00:98:0c:1b:0f:
a2:2d:c5:09:8f:4b:33:52:21:42:12:59:84:9f:76:d0:b9:5c:
29:a8:0d:1c:c3:b7:2e:ea:1e:4a:78:ae:57:da:78:d7:de:eb:
53:33:31:9a:3d:fe:ae:71:a8:3a:3d:d5:1d:5f:8b:96:e1:cd:
ca:ed:3f:1b:00:28:99:50:2f:4a:01:3d:82:07:55:f7:6d:6b:
d9:e0:55:17:60:eb:89:45:26:eb:b1:13:96:de:4f:2f:26:b3:
32:c1:76:4d:16:40:e3:05:02:04:84:bb:60:90:7e:93:71:31:
08:de:4d:13:40:82:b7:13:a3:fe:d3:1d:3b:32:a9:85:6e:d3:
7a:6d:18:90:34:54:5b:e3:00:55:f7:a4:a1:13:59:7c:84:08:
98:a7:5c:ec:16:f0:90:79:87:c8:53:86:1b:55:c4:25:64:e8:
99:d1:0a:ff:a0:95:86:9d:11:ae:64:47:34:dc:c2:84:91:d9:
12:26:e9:de:f4:41:30:83:33:54:3b:ec:8e:be:95:a6:4e:97:
0e:a5:01:d6:4e:51:31:51:a0:f2:98:d0:e8:e0:75:68:e2:99:
e0:2d:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:24:44 2026 by rpki-client