Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/n8I8ZajfLynBL8q5AYFlpnwrE94.roa
File: n8I8ZajfLynBL8q5AYFlpnwrE94.roa (raw, json)
Hash identifier: uTv+A652cRdlBfX8QK5YnMVpGclO8HSAfxLw9WkkXIY=
Subject key identifier: 9F:C2:3C:65:A8:DF:2F:29:C1:2F:CA:B9:01:81:65:A6:7C:2B:13:DE
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019F46DCD05371B26DD94A0119E1BAD063B9
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/n8I8ZajfLynBL8q5AYFlpnwrE94.roa
Signing time: Thu 09 Jul 2026 12:31:44 +0000
ROA not before: Thu 09 Jul 2026 12:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 94.228.171.0/24 maxlen: 24
178.236.241.0/24 maxlen: 24
178.236.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:dc:d0:53:71:b2:6d:d9:4a:01:19:e1:ba:d0:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 9 12:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc23c65a8df2f29c12fcab9018165a67c2b13de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:50:0f:70:85:25:38:77:2c:5f:4a:f9:a1:
80:32:c9:51:2c:49:38:ce:dd:82:4f:8e:25:23:54:
bd:d0:00:29:3f:bc:9a:67:12:55:b6:34:46:43:4b:
87:7a:b2:84:d8:4b:1f:f4:5a:79:76:a0:c6:39:11:
a6:b9:4b:c0:f2:09:ea:ee:f2:ae:72:b1:91:b7:57:
bb:63:bf:5f:80:8d:1d:58:e6:a9:df:35:4b:ac:ad:
24:a5:51:44:9f:c3:23:7a:e0:7f:eb:41:6b:65:05:
10:9b:03:43:79:b8:6c:3f:e0:dd:8f:8b:17:52:ae:
2a:f0:91:31:21:0e:3e:91:0a:c5:3f:da:61:75:07:
65:e9:3c:5f:a6:ed:54:60:1c:3f:31:4f:e0:80:b9:
b4:d0:13:5c:dc:71:8b:a6:cc:40:fb:19:ff:98:e2:
22:44:2a:ee:9c:35:a9:cc:10:c2:23:30:1b:7c:d0:
58:05:d2:12:67:6d:4b:cf:13:0f:b5:0d:55:6f:ee:
d2:20:64:95:01:36:49:89:4f:32:df:57:67:5c:c9:
d8:1f:c7:a2:37:9e:9a:30:d8:f6:11:8b:e1:89:be:
2b:9f:cf:a3:ce:10:7b:cd:24:08:9d:cc:7e:c6:f9:
88:0f:b2:f0:a1:d4:8b:c1:54:d8:06:c8:f8:fa:eb:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:3C:65:A8:DF:2F:29:C1:2F:CA:B9:01:81:65:A6:7C:2B:13:DE
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/n8I8ZajfLynBL8q5AYFlpnwrE94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.171.0/24
178.236.241.0/24
178.236.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f9:7e:9c:a5:83:f6:05:b7:4d:1c:f7:12:71:46:01:3e:49:
05:33:f1:29:a2:fb:d3:32:dc:c4:bf:4a:13:7d:43:42:f9:bc:
c9:69:cc:3c:7b:2c:a3:8f:06:63:dc:49:32:9d:ff:c8:29:a0:
07:dc:2b:8b:a8:4a:e1:d8:15:71:73:ba:3a:39:0d:d1:70:ea:
73:e7:a8:65:d5:7d:67:fe:c4:8c:b1:b6:b1:34:a7:e1:75:82:
69:57:69:92:64:84:5b:58:ff:37:65:c7:ae:89:31:31:73:c9:
16:d7:6d:fd:2b:96:58:8e:ed:20:bd:78:28:36:46:e9:29:41:
86:42:62:fe:71:53:97:e4:6d:12:a2:64:39:49:34:d1:9e:22:
c9:9a:17:44:2c:88:b4:d6:88:5c:52:b3:a1:8b:c2:eb:59:80:
ed:37:bc:ae:64:3c:dc:80:7f:c6:3d:d8:8a:63:75:55:c7:aa:
e1:d4:e6:3f:bd:01:da:0c:dd:58:54:e8:c9:cb:9a:5c:dd:0d:
67:df:7b:5f:dc:38:e0:d0:e5:31:6d:45:e9:91:df:7c:7d:f4:
1b:b0:84:46:5a:2d:6c:b4:95:5a:88:b4:3d:9f:97:98:31:fb:
1a:88:f1:3a:c3:02:88:3c:1b:1a:4d:ec:88:85:08:11:67:ae:
e8:a3:2d:5f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9G3NBTcbJt2UoBGeG60GO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjYwNzA5MTIzMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmMyM2M2NWE4ZGYyZjI5YzEyZmNhYjkwMTgxNjVhNjdjMmIxM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkFQD3CFJTh3LF9K+aGAMslRLEk4
zt2CT44lI1S90AApP7yaZxJVtjRGQ0uHerKE2Esf9Fp5dqDGORGmuUvA8gnq7vKu
crGRt1e7Y79fgI0dWOap3zVLrK0kpVFEn8MjeuB/60FrZQUQmwNDebhsP+Ddj4sX
Uq4q8JExIQ4+kQrFP9phdQdl6Txfpu1UYBw/MU/ggLm00BNc3HGLpsxA+xn/mOIi
RCrunDWpzBDCIzAbfNBYBdISZ21LzxMPtQ1Vb+7SIGSVATZJiU8y31dnXMnYH8ei
N56aMNj2EYvhib4rn8+jzhB7zSQIncx+xvmID7LwodSLwVTYBsj4+utmyQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ/CPGWo3y8pwS/KuQGBZaZ8KxPeMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvbjhJOFphamZMeW5CTDhxNUFZRmxwbndyRTk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXuSrAwQA
suzxAwQAsuz5MA0GCSqGSIb3DQEBCwUAA4IBAQCj+X6cpYP2BbdNHPcScUYBPkkF
M/EpovvTMtzEv0oTfUNC+bzJacw8eyyjjwZj3Ekynf/IKaAH3CuLqErh2BVxc7o6
OQ3RcOpz56hl1X1n/sSMsbaxNKfhdYJpV2mSZIRbWP83ZceuiTExc8kW1239K5ZY
ju0gvXgoNkbpKUGGQmL+cVOX5G0SomQ5STTRniLJmhdELIi01ohcUrOhi8LrWYDt
N7yuZDzcgH/GPdiKY3VVx6rh1OY/vQHaDN1YVOjJy5pc3Q1n33tf3Djg0OUxbUXp
kd98ffQbsIRGWi1stJVaiLQ9n5eYMfsaiPE6wwKIPBsaTeyIhQgRZ67ooy1f
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:53 2026 by rpki-client