Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/4GFqVoHAvDJGSMikiQZjE6m3ycA.roa
File: 4GFqVoHAvDJGSMikiQZjE6m3ycA.roa (raw, json)
Hash identifier: 3KzMwiSXOiNOWFGVkqOkBvCJJti1SV8n9AZF2X4+w0A=
Subject key identifier: E0:61:6A:56:81:C0:BC:32:46:48:C8:A4:89:06:63:13:A9:B7:C9:C0
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019C9E32FA6992D59B02584CBB77D628FB67
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/4GFqVoHAvDJGSMikiQZjE6m3ycA.roa
Signing time: Fri 27 Feb 2026 08:24:26 +0000
ROA not before: Fri 27 Feb 2026 08:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 178.236.252.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:32:fa:69:92:d5:9b:02:58:4c:bb:77:d6:28:fb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Feb 27 08:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0616a5681c0bc324648c8a489066313a9b7c9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:5e:19:25:1a:33:7a:a8:90:d4:1b:b9:5c:
40:ea:56:87:7d:be:33:6e:6c:91:aa:02:ff:e4:40:
d9:aa:70:4f:68:05:ec:75:54:64:6e:47:d8:d5:97:
d4:32:34:10:3a:d0:04:2b:d1:37:01:95:54:c2:fb:
85:d1:71:3a:a8:e8:81:88:9b:f2:32:9e:c1:ec:df:
ac:2e:94:ed:23:5a:f0:af:99:ea:c5:e0:1c:76:75:
41:67:b5:e5:6a:54:a2:59:0e:a8:ad:48:12:99:9b:
7e:16:0c:0f:1e:ba:b5:ad:15:97:5a:70:2d:0a:b8:
a4:c6:2b:28:b9:84:ce:9e:89:69:2c:c4:6b:4c:fd:
ee:f0:a8:7b:55:21:b1:56:d6:83:33:dd:8c:bc:17:
a4:19:45:b6:c2:d8:67:43:31:51:99:c2:4a:7d:06:
a5:30:e0:f0:b9:ed:ed:72:5b:d4:1b:7a:df:38:0c:
14:c8:4f:0e:96:02:af:61:dd:b1:8b:72:72:ec:42:
df:aa:bc:0c:a0:32:39:b0:23:d2:19:58:d3:28:4a:
9b:29:9c:fa:b1:70:2e:55:0b:fa:42:25:5b:43:40:
f5:08:76:8b:25:d5:53:19:13:56:23:71:85:76:8a:
d4:53:ad:c0:55:f7:40:01:60:cf:2e:1e:da:46:53:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:61:6A:56:81:C0:BC:32:46:48:C8:A4:89:06:63:13:A9:B7:C9:C0
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/4GFqVoHAvDJGSMikiQZjE6m3ycA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.252.0/24
178.236.254.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5c:00:66:fd:b3:57:03:91:f1:03:b2:64:90:2d:cb:cc:5f:
94:26:33:01:de:ab:7a:08:26:dc:bb:35:7a:ae:98:0b:a5:74:
61:2b:b3:b4:66:78:b8:80:ab:16:44:40:09:1e:79:fc:53:5f:
e7:c5:61:66:71:8b:81:82:a8:68:c5:c9:18:06:ec:c0:77:95:
2e:2d:39:50:90:25:46:83:da:f1:11:9e:e1:1f:18:e6:a8:1e:
ce:52:db:5a:e8:f1:b1:07:05:d3:e3:36:f1:1b:d2:7d:23:33:
f0:a3:74:94:34:e1:ab:f4:1b:6b:6d:b1:4a:9a:f8:43:de:7e:
1b:30:24:37:89:8a:44:99:ed:df:6c:8d:76:0d:30:2d:d4:c5:
4a:0e:8c:9d:45:af:f2:23:44:6a:ef:d9:0a:f8:c1:15:fa:f1:
b4:25:63:b1:eb:3e:bb:4b:85:1c:4f:fb:d5:2e:16:31:55:39:
c9:2b:07:60:78:d3:c4:36:fd:58:b7:09:39:dd:60:0a:d6:ba:
2f:9a:42:67:c0:e8:94:07:19:3a:1d:e3:d0:14:6b:20:31:95:
6e:1f:6c:c9:99:6f:90:ff:75:1b:b3:4a:38:0b:3f:1f:02:4a:
0d:60:fd:fb:42:a2:0f:fa:4d:f2:38:b1:c3:79:fb:14:3e:18:
49:4d:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:33 2026 by rpki-client