Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/4lXhdtO-8jtqiWXl5xe-u2WhA1w.roa
File: 4lXhdtO-8jtqiWXl5xe-u2WhA1w.roa (raw, json)
Hash identifier: fL5awUnSOk/QoGPF4GHt+L9d0fyEYoOrVsP3Ctb1ZMM=
Subject key identifier: E2:55:E1:76:D3:BE:F2:3B:6A:89:65:E5:E7:17:BE:BB:65:A1:03:5C
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019F7FA008BB0784511F9F9F888842DE0809
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/4lXhdtO-8jtqiWXl5xe-u2WhA1w.roa
Signing time: Mon 20 Jul 2026 13:03:42 +0000
ROA not before: Mon 20 Jul 2026 13:03:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213893
IP address blocks: 194.59.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:a0:08:bb:07:84:51:1f:9f:9f:88:88:42:de:08:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 20 13:03:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e255e176d3bef23b6a8965e5e717bebb65a1035c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:21:fa:f9:cb:4c:1b:ba:ee:ac:1a:c6:f6:
94:58:a6:d1:e8:80:89:42:2a:35:de:6d:0c:09:e5:
20:10:26:29:91:c7:fd:c1:98:9e:7a:3d:f4:a6:4f:
93:19:14:3c:ed:a7:3e:5d:ba:d6:e7:b3:48:38:ea:
a7:15:f0:ab:4e:6a:c5:c7:4c:fd:e1:21:23:48:e1:
fd:ef:94:3b:85:6b:bc:16:2e:a6:f4:62:2e:2b:6e:
c0:e2:1d:28:71:70:4c:15:f5:8e:16:fe:72:04:a1:
90:79:c4:d2:d5:e2:a9:16:4f:05:92:5d:fc:36:0c:
aa:8a:a1:0e:07:f8:a2:48:5f:0c:18:6b:c5:fb:cc:
75:68:2d:f0:f4:fd:df:69:69:0c:4d:12:4e:f9:e4:
5c:a0:a3:53:83:c3:7a:bc:07:5c:bd:20:f4:ad:ba:
96:8e:b8:24:22:ce:3c:0e:23:f8:8a:20:61:7c:f8:
0c:ea:e7:b3:56:1e:e2:d9:4b:72:82:0f:c0:c0:39:
eb:e4:57:8a:70:82:dc:a4:f1:c2:0e:3d:04:25:81:
76:09:c1:fb:ce:62:ad:b7:aa:eb:79:b1:9a:14:33:
39:61:f0:a9:5b:27:f2:6d:79:f5:50:df:7d:87:ae:
ad:0e:74:d7:0e:c1:d8:71:2f:11:5e:18:91:62:48:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:E1:76:D3:BE:F2:3B:6A:89:65:E5:E7:17:BE:BB:65:A1:03:5C
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/4lXhdtO-8jtqiWXl5xe-u2WhA1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
16:58:e9:2a:9b:c7:04:23:90:8c:9b:b5:36:90:33:49:a0:be:
16:55:19:38:53:97:ba:32:8c:85:85:89:2d:17:e3:09:a2:97:
50:1a:c3:f3:be:80:6d:4c:04:27:ef:3a:79:11:4a:e5:13:c8:
b6:09:f8:8b:43:f5:16:5e:7e:e6:13:c1:8f:99:48:fb:ab:20:
33:23:0b:0a:43:b4:87:57:b3:21:56:c0:8e:06:ad:f6:75:ff:
7c:0e:88:42:56:5c:6e:ab:78:1d:fd:c8:34:5c:b6:e2:89:30:
74:85:37:22:37:57:c2:ef:ac:bd:7e:2b:11:4b:c1:1a:1d:dc:
4d:16:6a:9d:9a:00:14:51:b6:25:33:d9:a1:c8:f6:a3:61:31:
e5:57:07:c2:6e:ec:20:15:44:89:fe:3e:f3:a1:bf:d5:1e:bb:
24:50:32:c2:5b:d5:1a:41:71:d4:06:76:d0:03:2b:71:71:50:
72:69:84:ba:6e:05:a7:87:4f:ec:33:af:4a:50:82:81:21:bc:
d3:9a:0d:da:55:3d:67:20:64:b4:03:f2:d7:23:6f:b9:69:85:
25:7b:1d:77:f5:ce:d5:61:bc:4d:ec:f7:f8:79:3a:8a:db:53:
0f:b7:8b:29:9f:12:14:92:2a:ac:09:ff:0e:f3:bc:c8:16:e8:
2d:ae:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:33 2026 by rpki-client