Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa
File: wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa (raw, json)
Hash identifier: msFAqkGBHCct32VvHQhjNj/X2yHNxatrSYDVfKZEtiA=
Subject key identifier: C1:13:B2:43:B7:82:93:8B:CA:CA:DF:EA:A2:C6:D2:65:06:C2:83:A4
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019C7AD8FD74005F2293F002A58F14A09F2F
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa
Signing time: Fri 20 Feb 2026 11:39:26 +0000
ROA not before: Fri 20 Feb 2026 11:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 94.228.168.0/24 maxlen: 24
178.236.244.0/23 maxlen: 24
178.236.246.0/23 maxlen: 24
178.236.253.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:d8:fd:74:00:5f:22:93:f0:02:a5:8f:14:a0:9f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Feb 20 11:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c113b243b782938bcacadfeaa2c6d26506c283a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:ac:60:e9:8f:3f:88:3f:68:d8:82:03:c5:
3b:a1:3c:9f:90:5a:52:f0:01:cc:bd:c6:6c:d0:87:
7c:10:77:3d:19:eb:d9:d7:30:9b:02:e5:48:f9:6e:
70:e6:6a:9c:d4:87:22:d8:ff:f7:f2:a9:f8:63:cd:
06:c9:22:b0:4e:75:4f:72:31:21:31:5a:ae:03:cd:
41:c8:ab:da:22:07:04:a2:da:fa:61:15:b3:34:60:
3d:0a:43:89:34:1e:e7:96:fe:ab:3d:87:11:15:10:
8a:82:cb:d2:aa:0b:25:bc:a4:92:06:ca:14:f8:b9:
6c:e6:de:e7:20:15:a8:af:ba:c4:44:b3:09:74:23:
24:bc:bc:7e:0e:db:cb:eb:c5:1f:6a:c5:16:52:f6:
2f:10:f8:b1:d3:57:2c:2b:3e:bd:b2:66:6e:4e:fa:
a1:f2:7d:43:ac:15:fd:01:86:41:18:ff:dc:51:78:
89:c9:c5:72:11:be:a7:0c:2c:11:a8:fd:e5:83:a6:
cd:52:46:76:8f:af:a2:fc:f2:f2:a2:64:aa:37:06:
d0:35:91:c6:34:cb:01:7b:09:22:a7:c4:28:e2:ab:
da:e5:cf:3f:55:7f:23:fe:5f:20:55:27:82:33:0e:
cd:14:c5:40:43:2a:09:86:56:a5:26:7f:6f:b2:59:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:B2:43:B7:82:93:8B:CA:CA:DF:EA:A2:C6:D2:65:06:C2:83:A4
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0/24
178.236.244.0/22
178.236.253.0-178.236.254.255
Signature Algorithm: sha256WithRSAEncryption
66:7f:29:b9:9f:f8:2e:71:0c:dc:f8:91:5a:0b:86:3a:b7:0f:
06:1f:2c:7c:fa:6a:84:d2:40:59:47:9b:51:b6:9a:bc:bc:4b:
5d:64:b8:09:15:78:39:32:5d:6f:41:27:a9:70:13:78:48:30:
20:2b:aa:be:b1:2b:a8:34:1b:7a:a6:93:ff:70:42:33:89:ad:
86:21:54:83:27:d7:ad:f6:00:6a:09:90:67:25:35:9c:a7:7b:
08:65:2c:32:79:74:a7:66:14:dd:0f:f2:66:b1:29:a3:75:0c:
21:27:53:62:47:c3:98:3a:a8:3b:c4:78:7c:db:2b:5d:04:7f:
b8:5d:6d:d9:f5:b9:19:94:a9:e3:c4:09:33:4f:9a:8d:2f:28:
28:9c:68:30:89:d7:47:1b:15:ea:0b:b4:6f:62:e5:0e:42:c6:
5f:d1:24:ea:8c:70:d0:09:55:27:9e:b2:d5:43:28:bb:de:87:
d9:11:6f:14:86:54:5c:f9:d3:79:ce:36:7a:be:71:60:40:de:
f1:f1:1e:0f:cb:92:ce:c2:09:d8:42:5c:4e:43:45:10:42:c9:
47:24:94:24:ed:3f:6f:52:ff:95:c8:52:7f:3f:f6:be:15:0d:
33:f9:dd:1e:3a:72:78:c9:82:f8:7e:b9:be:7d:c7:20:97:6c:
e4:37:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:40 2026 by rpki-client