Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/rJwkYVnH8Yu6a1OrbAUUM5uV5fM.roa
File: rJwkYVnH8Yu6a1OrbAUUM5uV5fM.roa (raw, json)
Hash identifier: X9DQQvspORnAB5bGQARX+ElPIyKFjk6Aj8xdeJW2w6E=
Subject key identifier: AC:9C:24:61:59:C7:F1:8B:BA:6B:53:AB:6C:05:14:33:9B:95:E5:F3
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019F7FA007FC5A2050568EA89F3E01314A2C
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/rJwkYVnH8Yu6a1OrbAUUM5uV5fM.roa
Signing time: Mon 20 Jul 2026 13:03:41 +0000
ROA not before: Mon 20 Jul 2026 13:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 94.228.168.0/24 maxlen: 24
178.236.244.0/23 maxlen: 24
178.236.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:a0:07:fc:5a:20:50:56:8e:a8:9f:3e:01:31:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 20 13:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac9c246159c7f18bba6b53ab6c0514339b95e5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:96:72:73:f4:79:7f:30:3d:69:31:78:81:
f6:94:9a:48:22:16:31:3d:5e:79:65:f4:d0:50:2d:
35:5c:34:57:26:a4:cb:ee:b9:9f:fe:5c:7f:bd:af:
9e:58:bc:93:7c:01:19:d7:82:ad:37:fe:2e:56:87:
f8:12:c5:a7:43:4b:68:59:df:5a:7c:64:54:1d:2e:
cc:f3:cf:b0:1e:d7:89:a2:d0:aa:8c:89:ee:8d:90:
72:cc:c2:15:d2:16:13:ef:72:11:5d:87:5a:94:4b:
04:08:83:5a:44:3e:bf:70:41:2e:e5:43:cf:f3:a5:
33:f1:3b:69:20:35:d4:6b:74:f9:92:a5:68:b5:42:
40:64:05:6e:7f:12:fc:e6:93:88:97:53:cf:19:ed:
6b:d4:19:f2:c6:8b:f7:cb:19:11:4f:58:d3:17:63:
7e:47:7e:a7:97:c8:3b:d8:40:ea:9f:bc:18:05:85:
27:e4:c3:4f:10:38:63:29:d8:26:83:59:61:ab:6a:
2c:99:f0:86:b2:b0:70:17:a8:a2:4c:c9:be:3a:c3:
03:37:77:82:37:96:26:2a:8d:ad:4c:6a:c5:79:59:
02:b9:e5:c8:a1:69:79:75:a0:a8:23:7a:4a:36:3c:
b9:c4:8d:68:a2:86:d2:b3:1c:4d:5c:1c:8c:1f:d5:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:24:61:59:C7:F1:8B:BA:6B:53:AB:6C:05:14:33:9B:95:E5:F3
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/rJwkYVnH8Yu6a1OrbAUUM5uV5fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0/24
178.236.244.0/22
Signature Algorithm: sha256WithRSAEncryption
41:62:fb:2b:e5:52:e0:e9:fc:f8:b8:a4:da:a9:b2:e5:06:56:
b4:67:ce:26:f2:e0:47:e9:05:fd:2d:1b:0a:90:70:2f:14:d0:
19:a3:9e:7c:da:26:9f:75:e0:65:78:2b:34:d4:7f:3e:13:c7:
0f:85:32:a5:5f:9b:55:33:1b:66:f2:df:90:51:b1:ce:af:dd:
fc:12:62:f8:b8:1c:44:64:b9:e1:6a:e4:7a:10:ab:fd:b0:0f:
06:d7:8b:f1:b8:e5:fb:a6:6c:8d:8d:21:f0:da:e3:f6:49:62:
51:3e:30:65:a1:6b:c7:35:09:15:f4:d2:9c:8e:a3:e7:b3:86:
6e:da:eb:1d:fc:ab:73:46:30:98:e4:77:94:61:12:b8:a1:81:
a4:76:7c:1d:3a:8f:67:2c:92:27:29:3d:01:a5:bc:e9:7e:ef:
b1:c6:7e:44:8d:ca:a2:50:64:5c:80:e0:34:60:3a:38:d2:ff:
2b:88:87:29:66:90:80:b6:2e:17:b5:f6:a8:72:ac:25:f9:d7:
a9:8e:16:79:2b:a1:88:7f:1b:d0:52:ba:07:b1:cb:14:f9:dd:
64:0b:d4:9a:72:1b:8f:a3:6f:ee:27:30:fb:bd:53:4b:64:49:
72:25:e0:05:13:47:96:22:0f:99:50:dd:62:51:31:5a:6b:5a:
de:55:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:17 2026 by rpki-client