Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/VRMLvAGFwfQlip_VHeRzX7SdBqY.roa
File: VRMLvAGFwfQlip_VHeRzX7SdBqY.roa (raw, json)
Hash identifier: 9ZJkHX0Butc4+tBJ7Udk3Imo3jwaTPwzrIUXgjLyVRY=
Subject key identifier: 55:13:0B:BC:01:85:C1:F4:25:8A:9F:D5:1D:E4:73:5F:B4:9D:06:A6
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019C7AD8FE023282F64D582AC88E822C3D1A
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/VRMLvAGFwfQlip_VHeRzX7SdBqY.roa
Signing time: Fri 20 Feb 2026 11:39:27 +0000
ROA not before: Fri 20 Feb 2026 11:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 94.228.168.0/24 maxlen: 24
178.236.244.0/23 maxlen: 24
178.236.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:d8:fe:02:32:82:f6:4d:58:2a:c8:8e:82:2c:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Feb 20 11:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55130bbc0185c1f4258a9fd51de4735fb49d06a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:89:d6:14:4a:5a:ba:77:1d:5c:43:99:27:
89:a0:73:93:de:14:a6:ac:b0:28:66:70:e6:86:92:
54:c3:e2:22:9b:e6:15:77:2e:ce:b2:4a:72:79:91:
31:9d:a3:c0:03:5a:38:1b:cf:2e:a3:48:c7:fb:90:
67:9d:a4:14:df:5f:d0:17:20:d2:83:b1:fd:49:8f:
9d:8b:8a:b1:4a:10:d5:9a:05:b5:d1:d5:b1:f3:11:
c7:35:ac:7b:64:c0:9f:cd:81:13:dd:f4:31:75:1f:
b2:d1:01:e6:51:21:d6:9a:c0:cd:2a:ce:4c:8f:85:
66:b1:27:d1:73:5f:e5:5b:0c:21:08:48:d3:89:82:
b6:fc:ce:b5:45:da:a3:5f:b7:b3:13:62:da:d4:73:
ad:0f:11:e4:e4:a8:cb:d2:a4:20:44:b4:6f:56:c4:
85:80:ef:d1:54:7f:c1:8b:b0:68:ea:25:e2:ee:3b:
e4:11:47:9c:17:12:21:0a:8e:f6:7c:5b:82:e2:0a:
b2:2b:86:69:e9:99:eb:bc:51:65:ca:ad:55:51:d0:
3e:41:11:06:31:c7:b1:b8:6c:c4:e4:94:aa:79:be:
52:7d:b7:9a:0e:2a:84:71:3e:30:a3:ca:09:68:7d:
76:98:6c:bf:0b:58:08:e0:c9:49:1d:ab:63:ca:fa:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:13:0B:BC:01:85:C1:F4:25:8A:9F:D5:1D:E4:73:5F:B4:9D:06:A6
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/VRMLvAGFwfQlip_VHeRzX7SdBqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0/24
178.236.244.0/22
Signature Algorithm: sha256WithRSAEncryption
02:cf:ee:1a:97:ec:ed:2b:f8:8f:ce:49:7e:5f:3d:c9:44:b2:
fd:e6:54:4c:bc:64:9c:6f:5b:e4:e0:76:90:b0:71:1e:51:37:
da:78:61:1f:4d:4a:d4:f7:5d:0d:56:3c:6d:8c:c3:40:e4:59:
9b:4c:a3:40:93:86:66:27:9b:51:ff:bb:d4:15:b2:54:21:62:
cc:04:34:04:2a:6a:41:f6:91:ed:7f:ec:db:12:fd:f4:42:fb:
a8:38:fe:1c:63:23:75:4e:5e:0c:b1:7a:40:50:17:56:0d:06:
a3:a6:a1:a1:cb:5c:38:ba:e5:6b:b8:63:cd:a9:53:9a:89:a9:
41:ca:fa:c6:fa:fc:e0:a6:36:41:23:78:bf:be:13:a9:ce:48:
32:0d:98:de:70:70:f5:5f:a2:6c:c6:85:ee:dc:c0:77:70:01:
bf:0a:5a:e4:c4:ea:9b:e3:fb:54:0f:90:62:80:95:5e:b2:fa:
de:40:d4:44:e3:8f:a9:6a:16:5e:9d:27:d7:1e:8f:d0:1a:16:
39:45:4f:b8:8e:c8:ae:e0:5b:2a:32:8e:49:88:92:65:b8:4f:
a0:bd:da:9a:fd:d5:93:56:54:cc:9f:2a:fb:80:ab:74:a5:c7:
91:a7:cf:5f:fc:f8:da:55:c4:ad:61:07:6a:9d:4c:22:36:b8:
37:b8:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:31 2026 by rpki-client