Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/1dHlyfa-zj_4XJRf53IIawmZB2g.roa
File: 1dHlyfa-zj_4XJRf53IIawmZB2g.roa (raw, json)
Hash identifier: 7Gsd4l0mgerJ9lacPTBOjZNbYITadUNBw4vyVFstkgY=
Subject key identifier: D5:D1:E5:C9:F6:BE:CE:3F:F8:5C:94:5F:E7:72:08:6B:09:99:07:68
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019F46DCCFE4983FB530FB8D88F1C6E7CCD5
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/1dHlyfa-zj_4XJRf53IIawmZB2g.roa
Signing time: Thu 09 Jul 2026 12:31:43 +0000
ROA not before: Thu 09 Jul 2026 12:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48467
IP address blocks: 94.228.160.0/24 maxlen: 24
94.228.167.0/24 maxlen: 24
94.228.172.0/22 maxlen: 22
94.228.172.0/24 maxlen: 24
178.236.242.0/24 maxlen: 24
178.236.248.0/22 maxlen: 22
178.236.255.0/24 maxlen: 24
185.46.44.0/22 maxlen: 22
185.46.44.0/23 maxlen: 23
185.46.44.0/24 maxlen: 24
185.46.45.0/24 maxlen: 24
185.46.46.0/23 maxlen: 23
185.46.46.0/24 maxlen: 24
185.46.47.0/24 maxlen: 24
2a02:2070::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:dc:cf:e4:98:3f:b5:30:fb:8d:88:f1:c6:e7:cc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 9 12:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5d1e5c9f6bece3ff85c945fe772086b09990768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:e4:ff:cd:c6:7a:5d:6f:dc:7d:fe:e8:e9:
68:85:64:dc:c1:40:29:e0:41:00:a9:19:86:6d:07:
8e:9f:c4:8f:b1:61:c6:ab:ef:4f:a2:01:9c:bb:03:
17:b1:ef:9b:ce:78:a7:dd:78:e2:2c:3a:9c:b3:92:
83:2c:5e:f8:cb:fd:ec:86:6d:3b:4f:e5:56:25:c1:
09:6b:95:99:e4:46:a3:c5:58:ed:6c:09:4e:42:53:
f6:4f:a3:1a:9f:af:77:e4:b0:db:a9:d0:b2:67:02:
40:8c:cc:c4:b2:8b:81:d2:39:31:7c:0f:b6:f1:87:
d7:9f:52:cd:36:e0:4a:92:0d:09:7e:aa:b0:5c:a4:
38:b0:1b:b3:8c:ae:ec:84:ea:40:0f:13:1d:8b:4b:
2e:93:5e:fc:9d:63:8c:35:ae:32:76:92:f9:93:cf:
84:b0:e4:7b:d2:47:7b:36:af:30:a6:e3:79:d1:54:
9b:a7:09:fe:02:76:f6:e5:97:74:e5:85:b6:b2:bc:
d7:64:02:95:a7:bd:e7:f2:50:90:63:5d:e3:5f:37:
31:a2:32:8b:5b:69:5c:6b:c7:9c:58:dc:90:bf:90:
14:3b:83:95:7a:75:b6:11:21:ce:f1:32:ed:b5:86:
5c:09:44:99:5d:91:78:3e:55:ed:3e:cb:af:89:6f:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:E5:C9:F6:BE:CE:3F:F8:5C:94:5F:E7:72:08:6B:09:99:07:68
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/1dHlyfa-zj_4XJRf53IIawmZB2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.160.0/24
94.228.167.0/24
94.228.172.0/22
178.236.242.0/24
178.236.248.0/22
178.236.255.0/24
185.46.44.0/22
IPv6:
2a02:2070::/32
Signature Algorithm: sha256WithRSAEncryption
91:85:ca:bd:8a:5a:17:07:1b:90:06:3b:eb:4b:a0:6b:28:a0:
8e:ff:28:5b:2d:37:a9:ef:89:e8:6d:d3:51:e1:c1:40:ec:f5:
7b:0e:73:d3:aa:98:63:e2:80:22:cc:44:24:d9:5f:82:c7:06:
48:3e:d9:62:56:f1:49:9c:c4:c3:1c:44:63:59:05:e9:b5:31:
7e:1e:7b:0a:1e:ab:ed:c1:8d:f8:eb:6b:0d:ad:d7:4c:81:85:
8b:c7:39:dd:9b:2b:3a:e5:f0:b4:a8:15:26:11:c7:55:be:f6:
c7:8b:5a:ee:d5:b9:4e:ed:b1:30:22:e1:b3:10:80:15:b8:17:
56:57:f1:9a:d4:01:c1:52:b7:f3:c5:71:9d:06:e9:7d:72:a4:
78:9a:98:4a:18:62:89:a3:01:07:9e:37:51:bb:c3:3b:4b:bc:
33:f5:d9:70:10:8a:f2:a9:e2:b8:d4:ad:72:4d:aa:80:58:01:
3a:b2:77:d0:22:16:4a:c9:a8:ff:21:69:d2:47:72:b6:d0:b3:
b0:36:6c:ef:f4:0b:cf:26:83:34:ac:96:85:b5:a1:11:57:0d:
ce:f2:f6:3f:ef:f7:6d:de:82:d0:3a:0e:c4:e1:c2:7c:8d:41:
a0:09:2d:2b:7e:46:41:a6:ae:39:b2:40:34:d6:d4:ed:5c:cf:
37:b4:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:59 2026 by rpki-client