Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/soD7oiq9Js0kRuxEGUTf1AdmB7Y.roa
File: soD7oiq9Js0kRuxEGUTf1AdmB7Y.roa (raw, json)
Hash identifier: l5HeCAdoXvLzH7V1QLQqi9TBH1H5j9nGYhhyPq11KHA=
Subject key identifier: B2:80:FB:A2:2A:BD:26:CD:24:46:EC:44:19:44:DF:D4:07:66:07:B6
Certificate issuer: /CN=16d65793eb4b69e5eaad38b0ccc9164250cadc08
Certificate serial: 019F23683E20D4E015AF5E6213BDD18AE34B
Authority key identifier: 16:D6:57:93:EB:4B:69:E5:EA:AD:38:B0:CC:C9:16:42:50:CA:DC:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/soD7oiq9Js0kRuxEGUTf1AdmB7Y.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215961
IP address blocks: 2.57.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3e:20:d4:e0:15:af:5e:62:13:bd:d1:8a:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d65793eb4b69e5eaad38b0ccc9164250cadc08
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b280fba22abd26cd2446ec441944dfd4076607b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:43:bb:d2:22:b4:b9:fe:e4:49:c4:17:c3:
eb:07:9a:47:2a:4d:b4:6f:b2:8b:00:1f:de:29:10:
0c:60:0a:9c:1d:da:bd:dd:81:a1:b7:fc:51:88:39:
4b:29:c7:4a:56:2a:34:f6:ee:e5:6e:c6:1e:4c:cd:
54:51:06:b3:70:31:3b:3e:37:06:19:b4:2c:70:38:
fb:07:c3:bb:ac:51:15:85:55:a7:e2:fe:18:f0:53:
fc:51:3e:ce:54:b1:03:56:e2:41:ea:bb:ef:a3:e6:
9f:29:2e:39:7c:a4:f9:3e:dc:39:5e:ba:c8:e5:b6:
67:25:e9:4c:3d:7a:0b:f9:ca:3f:22:29:cc:2f:c0:
fe:15:c4:9c:17:ab:71:f4:4c:82:7c:cd:4f:41:40:
67:41:05:0e:9d:e8:c5:ce:30:60:cf:43:f6:d5:ef:
ee:28:73:99:c5:33:79:c5:06:8c:2b:31:68:e4:96:
2f:5e:97:ee:f1:4d:3f:bf:a6:6f:96:40:6a:33:7c:
f0:f4:5a:41:e7:17:69:44:dd:68:82:f8:fe:0f:98:
b8:f9:84:8d:0c:d4:9c:c5:fa:b0:74:a6:db:db:50:
b3:77:cb:48:74:32:09:3e:91:64:6e:f9:b3:b1:39:
58:8c:37:b4:01:64:4b:bc:1a:0d:20:27:78:4d:66:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:80:FB:A2:2A:BD:26:CD:24:46:EC:44:19:44:DF:D4:07:66:07:B6
X509v3 Authority Key Identifier:
keyid:16:D6:57:93:EB:4B:69:E5:EA:AD:38:B0:CC:C9:16:42:50:CA:DC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/soD7oiq9Js0kRuxEGUTf1AdmB7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.238.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:61:d8:36:ea:c2:ac:7f:a8:70:82:b1:c6:13:12:57:74:0f:
25:8b:15:23:5f:2a:ae:da:6a:c3:4f:ac:12:40:92:17:54:f2:
ec:bb:76:94:84:50:7b:89:a3:58:41:6a:ff:f7:16:7c:13:99:
c6:cc:f4:62:09:eb:8c:37:67:b3:49:6b:d2:99:ab:7f:c4:f0:
f9:c5:5d:7b:0f:52:94:30:0e:49:1d:f1:46:b5:09:e9:1f:79:
5f:c6:ce:91:4f:e4:77:d1:ac:23:07:33:6d:4b:f1:fb:e9:f5:
c3:26:de:bb:54:6e:48:90:e3:31:e8:29:cf:0a:aa:f8:e9:9e:
fd:06:76:41:e4:d5:85:de:56:a7:a8:7e:ef:16:6c:47:3a:8b:
3e:c2:f8:25:b4:d8:f3:02:1d:6d:51:25:cb:77:5a:2f:45:9e:
19:d1:2c:e4:ed:57:c7:78:d8:36:4f:6b:53:06:00:88:ed:ff:
90:35:01:01:f2:8c:32:85:f0:3e:fc:1f:f0:d2:e7:cb:b3:a8:
a4:d1:90:c0:30:41:05:e6:53:12:ba:1a:ac:2b:03:98:9e:ae:
b2:72:47:b4:bf:ae:2b:e2:f3:f1:fd:64:45:ea:d7:4a:4b:6a:
ff:f7:0b:1f:a2:a9:39:27:a2:da:c0:68:fd:dd:98:90:2d:f3:
c1:3e:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:30:05 2026 by rpki-client