Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/lp7TuPVRF-mPwwrD06P2UcgTS9Y.roa
File: lp7TuPVRF-mPwwrD06P2UcgTS9Y.roa (raw, json)
Hash identifier: thXqVKJCv0dwyR4fySHBU+41cxVjEfkkhPGQskSjzgY=
Subject key identifier: 96:9E:D3:B8:F5:51:17:E9:8F:C3:0A:C3:D3:A3:F6:51:C8:13:4B:D6
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019F7FA0091E49AFE7E8666C129772421040
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/lp7TuPVRF-mPwwrD06P2UcgTS9Y.roa
Signing time: Mon 20 Jul 2026 13:03:42 +0000
ROA not before: Mon 20 Jul 2026 13:03:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 94.228.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:a0:09:1e:49:af:e7:e8:66:6c:12:97:72:42:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 20 13:03:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=969ed3b8f55117e98fc30ac3d3a3f651c8134bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:c0:57:e9:77:ca:56:37:3d:e3:62:06:39:
e8:d1:d4:7f:90:56:08:19:2c:25:9d:6b:0d:ff:80:
19:26:3e:a6:f3:04:bc:a4:fa:4f:03:9d:d3:ec:9c:
4c:76:9c:38:7e:22:8f:97:a8:af:ff:b6:70:db:4b:
b7:80:c5:1f:df:9b:ef:f4:0c:a3:38:48:26:25:90:
c1:3f:69:cb:ed:5a:0d:82:fa:5e:a1:b0:be:2f:45:
23:2b:dc:67:50:05:68:06:21:30:dd:d9:b7:4d:dc:
01:23:79:13:d7:f8:da:68:fd:08:c7:ff:d6:7b:d8:
76:a2:50:4f:f3:a9:3c:6c:5c:11:af:91:18:81:47:
94:71:71:9a:2f:87:a1:bc:ae:f2:e1:84:8e:d9:05:
bf:57:e7:5a:94:b7:02:e0:21:b6:52:58:cd:c9:0d:
71:ee:eb:6c:7b:56:9f:16:fc:09:b6:a6:30:bb:de:
87:82:9e:e3:93:e6:e5:f0:d0:d9:89:ba:9d:e3:9d:
dd:d6:e5:3c:f5:2a:5a:fb:fa:4a:aa:bc:7b:5e:76:
d1:46:d0:35:56:e7:07:dd:5a:46:f1:ed:30:4b:dd:
3e:40:94:31:ce:b1:79:33:33:72:5a:6f:b1:4d:d2:
6a:92:5c:db:1c:ba:fc:03:b8:b5:3a:9c:14:d6:7f:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9E:D3:B8:F5:51:17:E9:8F:C3:0A:C3:D3:A3:F6:51:C8:13:4B:D6
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/lp7TuPVRF-mPwwrD06P2UcgTS9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.161.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d1:4a:94:b6:26:c3:39:4a:8d:af:a0:51:3c:8a:f8:e8:71:
a9:59:16:7a:f9:cc:28:05:ac:de:9e:d5:3a:04:fd:b1:8f:d6:
84:4a:a2:29:bc:3c:d3:3c:4b:96:d5:51:05:1d:5b:d5:75:17:
09:44:5a:ce:10:e0:9d:e2:07:3e:f4:cf:bf:18:3a:cb:4f:0b:
4f:6b:ed:fb:0a:a6:e9:22:82:2c:f9:a6:7e:56:6a:5d:10:31:
0d:12:54:3f:58:d8:8f:1b:14:a3:b1:ef:7b:31:90:fc:e3:b4:
f6:78:0f:43:a9:5f:b5:1d:03:02:38:84:a1:0d:ce:b5:d5:ad:
62:0e:80:f8:ec:47:dc:76:7d:b9:9c:b0:44:6b:cd:51:1e:d6:
db:a8:6f:63:32:00:62:fa:6e:10:df:64:8e:80:d3:78:5f:1d:
c6:17:dc:e2:52:f8:26:07:6f:43:65:7a:1c:1d:7a:a9:ef:f2:
32:83:1f:0a:61:0f:d7:b9:e5:30:4a:b1:05:f2:80:fe:40:c3:
bf:b5:c8:a5:3d:56:aa:b9:c0:1f:02:cb:e9:95:56:9c:11:58:
aa:7c:19:a2:0d:3e:94:b8:04:7f:1a:d8:3e:1a:d0:c0:7b:25:
a6:dc:cb:4c:dd:32:83:bc:61:df:af:29:4f:c3:18:77:05:71:
6f:37:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:53 2026 by rpki-client