Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/0E3xILl8WVZPEgrYoNWZoMVkTpg.roa
File: 0E3xILl8WVZPEgrYoNWZoMVkTpg.roa (raw, json)
Hash identifier: vQCOMzQ12V3c85FGpIjN0usTjxM0EfMLxP/m3PtHPDI=
Subject key identifier: D0:4D:F1:20:B9:7C:59:56:4F:12:0A:D8:A0:D5:99:A0:C5:64:4E:98
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019C9E32FB44E439BD6957DE4CE061057FCE
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/0E3xILl8WVZPEgrYoNWZoMVkTpg.roa
Signing time: Fri 27 Feb 2026 08:24:27 +0000
ROA not before: Fri 27 Feb 2026 08:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 178.236.240.0/24 maxlen: 24
178.236.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:32:fb:44:e4:39:bd:69:57:de:4c:e0:61:05:7f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Feb 27 08:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d04df120b97c59564f120ad8a0d599a0c5644e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:14:b1:58:2d:5e:06:1f:6e:8e:b2:5e:b7:
c2:a2:b8:c6:c4:e7:b4:1b:03:cb:c7:80:2b:a8:04:
4d:aa:a4:d5:08:9c:1e:ca:29:af:b3:36:9e:6a:b1:
7f:b1:48:20:1c:1c:4e:29:7a:0f:97:5c:57:0e:61:
c0:0e:9d:e8:22:ab:d8:2a:f0:2a:33:e4:a1:42:7d:
79:78:45:86:83:ff:15:5e:7f:2d:be:25:58:cf:96:
cb:c2:ef:05:02:e5:7c:e9:80:62:5a:24:74:a6:e3:
f0:f7:1e:c4:75:72:a6:da:29:7e:26:81:5e:ae:0f:
b1:23:45:59:13:a4:9d:04:5c:1d:51:66:ab:06:ae:
33:1b:9d:57:04:90:d9:1a:51:b0:55:0b:4f:b8:eb:
d6:73:7a:ae:3e:5d:12:84:78:61:d4:78:18:65:3d:
2c:99:a0:ab:89:ff:ef:0c:df:76:10:73:5f:ee:93:
1e:1f:7b:19:ee:34:b4:ce:bb:9c:c5:37:f3:b5:08:
ee:eb:82:8a:27:05:52:40:79:cc:06:80:d9:c1:10:
21:47:14:6c:f2:f9:5b:9f:36:17:1c:3d:2f:fc:bc:
77:ce:2f:04:51:fa:f0:14:e8:1a:03:cf:da:3d:2e:
d1:8a:24:a6:29:53:62:0b:8c:e6:a1:a6:28:ef:9c:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4D:F1:20:B9:7C:59:56:4F:12:0A:D8:A0:D5:99:A0:C5:64:4E:98
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/0E3xILl8WVZPEgrYoNWZoMVkTpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.240.0/24
178.236.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:47:df:ed:c0:19:6e:e0:b8:24:3c:75:27:96:9b:18:0e:68:
c0:f8:c2:e6:7b:34:fe:06:cf:79:c4:39:79:b4:8d:f0:ba:e9:
69:5b:48:0c:e1:26:05:63:1c:ae:ed:36:99:f6:72:7e:68:71:
ed:9d:68:9f:9f:a4:e3:42:cc:32:b4:d3:bd:1e:14:a6:4c:0f:
a3:36:a6:46:fc:43:f1:80:40:b5:29:58:6b:d7:3f:93:50:29:
f8:2a:f0:c6:f4:37:60:73:28:ef:c6:e7:32:f0:61:91:51:00:
2d:90:fa:1f:98:e0:3f:7f:2f:f2:f3:c9:22:0f:1f:7a:f8:cd:
86:58:11:36:22:f7:4b:27:03:3d:29:3b:63:6b:8b:9b:5f:d6:
a6:33:50:b1:2c:df:a8:26:c5:71:5c:73:ad:2e:88:b9:5a:5a:
fc:2b:2f:90:f0:8f:90:ec:7a:68:71:2b:0e:da:e2:83:31:bd:
1e:66:2f:16:91:8f:20:c0:d5:9f:27:a3:2f:50:a6:0e:96:40:
0b:31:5e:de:21:5b:bb:86:81:28:07:4a:72:38:25:34:fe:dd:
ab:8e:b9:9c:c1:6a:b7:07:ab:66:9a:81:f5:af:33:05:bc:fb:
a1:76:a7:e7:ab:34:71:40:85:c9:eb:18:1e:c4:29:1a:6b:cb:
7c:1b:4c:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyeMvtE5Dm9aVfeTOBhBX/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjYwMjI3MDgyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDRkZjEyMGI5N2M1OTU2NGYxMjBhZDhhMGQ1OTlhMGM1NjQ0ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOsUsVgtXgYfbo6yXrfCorjGxOe0
GwPLx4ArqARNqqTVCJweyimvszaearF/sUggHBxOKXoPl1xXDmHADp3oIqvYKvAq
M+ShQn15eEWGg/8VXn8tviVYz5bLwu8FAuV86YBiWiR0puPw9x7EdXKm2il+JoFe
rg+xI0VZE6SdBFwdUWarBq4zG51XBJDZGlGwVQtPuOvWc3quPl0ShHhh1HgYZT0s
maCrif/vDN92EHNf7pMeH3sZ7jS0zrucxTfztQju64KKJwVSQHnMBoDZwRAhRxRs
8vlbnzYXHD0v/Lx3zi8EUfrwFOgaA8/aPS7RiiSmKVNiC4zmoaYo75yT1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNBN8SC5fFlWTxIK2KDVmaDFZE6YMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvMEUzeElMbDhXVlpQRWdyWW9OV1pvTVZrVHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsuzwAwQA
suzzMA0GCSqGSIb3DQEBCwUAA4IBAQCkR9/twBlu4LgkPHUnlpsYDmjA+MLmezT+
Bs95xDl5tI3wuulpW0gM4SYFYxyu7TaZ9nJ+aHHtnWifn6TjQswytNO9HhSmTA+j
NqZG/EPxgEC1KVhr1z+TUCn4KvDG9Ddgcyjvxucy8GGRUQAtkPofmOA/fy/y88ki
Dx96+M2GWBE2IvdLJwM9KTtja4ubX9amM1CxLN+oJsVxXHOtLoi5Wlr8Ky+Q8I+Q
7HpocSsO2uKDMb0eZi8WkY8gwNWfJ6MvUKYOlkALMV7eIVu7hoEoB0pyOCU0/t2r
jrmcwWq3B6tmmoH1rzMFvPuhdqfnqzRxQIXJ6xgexCkaa8t8G0xO
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:55 2026 by rpki-client