Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/5rTQMsqeSKGU8mkUBrkv0lmiXRg.roa
File: 5rTQMsqeSKGU8mkUBrkv0lmiXRg.roa (raw, json)
Hash identifier: +USy9gsExMUyXejPN6R4baify38QVvVcmNoXKqpg9Gg=
Subject key identifier: E6:B4:D0:32:CA:9E:48:A1:94:F2:69:14:06:B9:2F:D2:59:A2:5D:18
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01A08B46CBB7BAFDF6EE85D2B24708915CA9
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/5rTQMsqeSKGU8mkUBrkv0lmiXRg.roa
Signing time: Thu 10 Sep 2026 12:24:27 +0000
ROA not before: Thu 10 Sep 2026 12:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 94.228.160.0/24 maxlen: 24
94.228.161.0/24 maxlen: 24
94.228.166.0/24 maxlen: 24
94.228.167.0/24 maxlen: 24
94.228.168.0/24 maxlen: 24
94.228.171.0/24 maxlen: 24
94.228.174.0/24 maxlen: 24
178.236.240.0/24 maxlen: 24
178.236.241.0/24 maxlen: 24
178.236.243.0/24 maxlen: 24
178.236.244.0/24 maxlen: 24
178.236.245.0/24 maxlen: 24
178.236.249.0/24 maxlen: 24
178.236.253.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:46:cb:b7:ba:fd:f6:ee:85:d2:b2:47:08:91:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Sep 10 12:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6b4d032ca9e48a194f2691406b92fd259a25d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:12:db:7f:af:de:93:80:d6:df:db:9e:65:
29:ef:09:1e:f6:2f:3f:c4:e0:6c:70:37:9e:57:e7:
f8:87:32:ef:c4:1c:bf:02:32:88:41:89:b8:b6:63:
16:a2:f9:1b:31:ee:6d:02:58:ee:4a:2f:50:ed:0e:
b4:c0:6a:5b:a5:d7:be:a4:8d:2d:19:aa:d1:4c:db:
39:40:a2:e3:5c:85:1a:02:05:24:a0:81:df:68:9a:
5c:05:01:65:03:3a:25:26:00:f3:ca:14:c0:d8:79:
c0:e5:78:e2:e7:13:5b:0a:67:65:f0:06:62:f5:c0:
9c:39:52:0e:6c:78:f9:76:a1:bc:54:7e:8c:f1:f5:
22:dc:24:13:0b:61:8e:79:c3:f6:70:17:8f:68:96:
c7:b6:8c:76:c1:93:b4:ee:27:55:59:73:e9:aa:37:
d0:5f:9a:76:d1:1d:c6:5b:1a:14:68:fd:bc:06:a4:
df:15:71:14:b7:96:ad:b8:00:c9:02:78:8e:09:61:
7c:86:af:89:4b:25:da:62:a0:b2:ea:7f:5c:27:ed:
a7:72:30:f7:51:d3:39:6b:63:b5:ef:ef:0c:b5:33:
1b:76:8a:53:2a:26:9e:8c:a0:aa:36:f0:56:9f:8e:
d7:31:9f:8d:1f:1d:ca:a4:2a:35:00:77:fb:e9:19:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:D0:32:CA:9E:48:A1:94:F2:69:14:06:B9:2F:D2:59:A2:5D:18
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/5rTQMsqeSKGU8mkUBrkv0lmiXRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.160.0/23
94.228.166.0-94.228.168.255
94.228.171.0/24
94.228.174.0/24
178.236.240.0/23
178.236.243.0-178.236.245.255
178.236.249.0/24
178.236.253.0-178.236.254.255
Signature Algorithm: sha256WithRSAEncryption
92:bd:3a:bc:06:a5:d3:2e:77:08:07:ce:40:61:e0:bf:aa:c2:
2d:da:4b:7c:e0:74:78:6c:cb:4c:8d:d1:43:e6:4c:45:dd:8c:
3f:ab:aa:05:c3:fe:8d:af:f0:2b:3d:a5:9f:1c:1e:c0:87:95:
2b:dc:89:c9:95:91:3c:f5:5e:39:48:ad:bc:8c:ba:e2:f0:45:
70:a2:ec:ed:24:cb:24:99:24:86:5d:0b:d8:ca:b6:8d:40:d1:
05:57:81:c9:4f:3f:2c:16:51:79:b0:5e:25:a5:9e:68:39:e5:
18:96:dc:49:e2:1b:3a:1f:7a:ff:e9:77:55:c7:29:df:23:56:
b4:a9:d3:d6:71:c2:e2:32:14:46:74:0b:2f:ca:aa:80:25:69:
85:4a:f2:84:9c:91:ea:8e:03:0e:e9:9a:14:35:41:ed:dc:9d:
d2:e3:0d:09:67:3f:0d:5e:c6:a0:bc:29:ee:84:02:7e:27:8f:
1c:db:78:20:67:e0:c3:ef:57:55:85:2e:c9:94:51:93:11:4f:
46:1e:c2:76:4b:74:b1:82:e7:ff:8e:b7:2d:03:8b:8c:2d:18:
2e:ad:f8:ef:1b:73:b3:0d:e0:d4:bd:51:47:db:ac:f0:a7:13:
bb:e3:d2:bb:1b:a0:23:3c:83:f2:9f:7c:ca:36:1d:74:2f:e1:
90:47:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:54 2026 by rpki-client