Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SoQQ4aODzdqPCvL3fP-aAZKzBKg.roa
File: SoQQ4aODzdqPCvL3fP-aAZKzBKg.roa (raw, json)
Hash identifier: E94p3eC4GjQUOY/ICUBJQBpVS+dtTt/IdPmkgryRmP0=
Subject key identifier: 4A:84:10:E1:A3:83:CD:DA:8F:0A:F2:F7:7C:FF:9A:01:92:B3:04:A8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D447B355E150AFEC62EE9157F1994314B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SoQQ4aODzdqPCvL3fP-aAZKzBKg.roa
Signing time: Tue 31 Mar 2026 15:20:18 +0000
ROA not before: Tue 31 Mar 2026 15:20:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200506
IP address blocks: 82.152.250.0/24 maxlen: 24
82.163.6.0/24 maxlen: 24
82.163.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:7b:35:5e:15:0a:fe:c6:2e:e9:15:7f:19:94:31:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 31 15:20:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8410e1a383cdda8f0af2f77cff9a0192b304a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:bd:b7:be:01:e6:97:a2:a2:54:fb:3c:5f:
71:4c:12:1f:74:18:78:1b:cd:e6:bf:1d:ec:42:52:
3b:35:40:3b:a2:5e:5f:d5:98:0b:a4:78:5a:66:7c:
e5:ec:82:3e:4c:8f:1b:a6:ee:c1:36:71:a1:ed:23:
29:88:f6:f2:05:cc:f0:60:b3:c2:2a:fd:68:25:dd:
9f:fb:0a:e9:67:14:db:17:e5:71:66:bd:98:2d:40:
a9:47:52:41:6b:96:96:2a:77:bd:ae:5f:29:bf:d4:
75:5c:4d:97:ca:53:b7:6a:4f:4c:a9:02:cd:a2:a8:
3a:11:b8:59:b7:42:df:83:61:d5:f7:aa:ca:3d:75:
89:70:53:1b:87:85:56:73:79:02:43:08:f9:d3:23:
50:36:4a:23:4e:af:b9:29:5f:73:94:c5:1c:41:8b:
f1:d7:48:e1:16:03:31:ae:cd:89:e9:ec:98:9f:81:
e2:c8:30:6e:f6:74:96:ae:6b:0b:6d:e2:e6:ef:47:
87:04:c1:f0:a1:b8:ce:d3:5c:59:61:7f:ad:eb:f1:
33:af:52:3f:25:8e:9a:62:59:1c:48:d1:0d:12:c3:
0d:dc:22:ba:23:b9:67:c2:e9:82:8c:f3:ce:03:12:
cd:e2:8a:28:8a:fa:3b:9b:bc:68:29:72:e1:49:47:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:10:E1:A3:83:CD:DA:8F:0A:F2:F7:7C:FF:9A:01:92:B3:04:A8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SoQQ4aODzdqPCvL3fP-aAZKzBKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.250.0/24
82.163.6.0/24
82.163.23.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6c:07:cb:b2:cd:18:09:48:2f:68:97:38:df:4a:11:13:b4:
f0:d1:5e:91:ac:cd:df:5b:99:17:94:c2:a7:5b:89:83:73:53:
58:71:3b:e4:5a:e9:d8:3b:c3:06:10:31:f9:d8:10:f4:5e:ff:
9f:c8:3e:d9:da:ee:bf:8a:8f:d0:ad:3e:e0:fb:b5:92:b9:b5:
41:42:c9:31:bf:a5:7b:2c:c3:15:6a:1c:c0:64:1a:2f:69:86:
d5:23:e1:f0:22:b0:5e:7f:9d:ed:e3:da:1d:14:38:f6:05:a8:
c2:78:38:d4:7e:f1:70:78:be:6d:17:2f:ad:6b:7a:92:17:fe:
e2:6f:5d:3a:79:29:ab:f7:21:59:aa:cf:f0:46:0e:3a:d0:2d:
5b:b0:a2:8d:bf:86:33:5b:2e:5b:3b:d4:05:b3:dc:fc:f8:e1:
62:b2:ad:1f:7a:06:9d:59:b3:07:07:04:ce:be:97:44:9a:03:
bf:f5:a9:fe:34:1c:89:de:d3:c7:71:59:39:82:c3:61:e7:48:
9e:9d:13:d1:c9:70:98:33:fd:b8:7b:a4:65:a1:61:2d:43:dc:
28:a3:91:22:09:cd:18:c0:9b:cf:0e:de:9f:08:44:3d:59:28:
19:3b:27:ae:c6:bf:3b:24:3f:ff:74:8a:5e:85:86:76:a4:cd:
5d:6e:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 13:04:53 2026 by rpki-client