Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HrT1lTqe_aIcXko6U1nEny6CG3o.roa
File: HrT1lTqe_aIcXko6U1nEny6CG3o.roa (raw, json)
Hash identifier: ZmNmxtWNBsJcVLdDyG9R5PUvi8HkbO9eNlOQ8hIJ0zs=
Subject key identifier: 1E:B4:F5:95:3A:9E:FD:A2:1C:5E:4A:3A:53:59:C4:9F:2E:82:1B:7A
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01A08B47B592F84B155AA88EC94B1F5E2BC5
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HrT1lTqe_aIcXko6U1nEny6CG3o.roa
Signing time: Thu 10 Sep 2026 12:25:27 +0000
ROA not before: Thu 10 Sep 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48467
IP address blocks: 94.228.173.0/24 maxlen: 24
94.228.175.0/24 maxlen: 24
178.236.242.0/24 maxlen: 24
185.46.44.0/22 maxlen: 22
185.46.44.0/24 maxlen: 24
185.46.45.0/24 maxlen: 24
185.46.46.0/24 maxlen: 24
185.46.47.0/24 maxlen: 24
2a02:2070::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:47:b5:92:f8:4b:15:5a:a8:8e:c9:4b:1f:5e:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Sep 10 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb4f5953a9efda21c5e4a3a5359c49f2e821b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:47:a9:42:86:fb:25:f0:cc:ab:2a:4b:7e:
2a:02:70:e9:2c:4b:d8:78:e2:d7:c2:a0:ff:15:a2:
92:1e:ac:ba:2b:0c:86:d5:4a:3e:1b:97:89:e4:89:
a7:b7:94:d3:67:48:87:ae:03:8f:6c:39:b6:b3:7d:
ed:4e:b0:f4:b8:f7:f2:fc:b6:7b:6e:9f:f0:81:ca:
34:88:82:b5:5a:43:6d:33:83:c7:af:47:ab:8d:dd:
5f:9a:4e:42:30:5f:c3:41:a6:d8:34:f4:86:dc:fa:
51:7c:42:25:a7:16:a1:13:12:1a:43:c6:6b:b2:a0:
a4:e8:db:6f:ca:25:a0:6c:47:f5:e6:96:08:39:54:
18:fe:05:b8:f8:03:b3:a6:8c:5f:a3:a5:af:99:2d:
8d:fb:86:f1:c5:ce:d3:46:58:fd:40:3f:78:77:7d:
fa:82:a8:ea:b7:08:79:22:da:a4:3d:54:a8:e2:90:
89:7d:ea:14:2e:ad:f5:60:a5:a5:f1:03:57:5d:63:
b0:ea:20:73:a6:44:c7:b3:1f:55:05:23:5d:26:8e:
7f:98:ad:7c:ff:85:ac:81:82:0e:ab:ad:89:59:51:
da:57:30:09:26:6e:f0:27:30:d1:3e:18:2d:3d:23:
39:bf:90:fb:d7:04:95:b1:1f:51:92:40:d4:e4:9e:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:F5:95:3A:9E:FD:A2:1C:5E:4A:3A:53:59:C4:9F:2E:82:1B:7A
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HrT1lTqe_aIcXko6U1nEny6CG3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.173.0/24
94.228.175.0/24
178.236.242.0/24
185.46.44.0/22
IPv6:
2a02:2070::/32
Signature Algorithm: sha256WithRSAEncryption
a4:e1:eb:dd:15:d1:20:38:f4:91:85:2f:80:18:64:b9:15:12:
64:04:d2:e9:45:3c:21:69:1d:eb:cc:20:10:58:5f:eb:59:3f:
00:73:29:5e:6a:4f:f5:2e:09:3c:8c:6d:60:92:00:4e:67:c8:
93:3f:7b:4e:cf:5b:3c:e7:fc:2d:d9:68:07:4a:7a:45:61:7e:
e1:a1:96:5d:62:8c:98:b6:eb:f4:9b:3c:6b:9c:8e:86:07:01:
89:49:87:09:1c:31:39:a2:85:0e:99:b0:00:20:16:13:9a:c6:
f9:94:bb:fb:b1:65:48:2a:dc:da:28:ef:3c:77:cc:bd:70:21:
ec:af:9f:86:df:f8:02:b6:d3:8e:76:90:33:af:4c:e2:13:2a:
6f:a6:a8:97:b0:8f:04:e9:04:9c:4b:f8:57:9f:85:5b:9d:9b:
14:e1:a9:a2:7c:a3:d0:89:da:75:d5:69:f2:f0:bf:ad:23:73:
53:20:8e:f5:c9:ea:7c:ad:30:0f:05:9e:51:7b:6c:cf:d3:68:
1c:01:d2:1a:a0:30:01:49:08:d6:5c:16:3b:4a:e1:87:33:78:
c6:43:c5:7a:29:47:56:ae:17:8b:a1:c8:59:49:bf:b4:5f:3d:
7e:3e:09:bc:e6:85:51:23:ad:b0:f5:08:32:62:a6:a5:26:8c:
4e:56:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:18 2026 by rpki-client