Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/SO6QjR1hksAlM1LEwjsSfqyQA6I.roa
File: SO6QjR1hksAlM1LEwjsSfqyQA6I.roa (raw, json)
Hash identifier: ywShTaMxtKmWmIhHqGYn82a6dMwPRqUZ2JHI/iurJ+w=
Subject key identifier: 48:EE:90:8D:1D:61:92:C0:25:33:52:C4:C2:3B:12:7E:AC:90:03:A2
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019F8405D10C51090CE61870439723EC5B72
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/SO6QjR1hksAlM1LEwjsSfqyQA6I.roa
Signing time: Tue 21 Jul 2026 09:33:21 +0000
ROA not before: Tue 21 Jul 2026 09:33:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21334
IP address blocks: 80.244.96.0/20 maxlen: 20
2a02:ab80::/28 maxlen: 28
2a02:ab80::/29 maxlen: 29
2a02:ab86:a04::/47 maxlen: 47
2a02:ab86:a06::/47 maxlen: 47
2a02:ab88::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:05:d1:0c:51:09:0c:e6:18:70:43:97:23:ec:5b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jul 21 09:33:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48ee908d1d6192c0253352c4c23b127eac9003a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:70:b2:b2:0f:fd:8e:79:45:67:c6:98:7e:
11:cc:f9:fa:cd:a1:c5:99:12:6c:85:2a:11:5c:25:
9c:34:e9:2b:72:3b:e8:1a:ca:53:d8:34:24:2b:68:
c1:44:37:29:6c:97:21:66:c6:c2:af:45:a0:96:07:
09:73:20:67:67:42:47:22:1a:0a:bf:6f:e2:dc:25:
b2:78:ef:19:f7:ca:d6:f6:cd:6f:03:b3:bb:0e:22:
6b:79:20:6f:bb:58:99:55:c1:04:98:07:e8:88:43:
1e:bb:b7:db:5b:39:b1:56:4b:6a:16:53:cc:6f:f9:
39:9a:51:8d:a4:40:a7:93:02:60:d2:8b:a5:f8:a2:
13:07:5a:fa:0b:d9:3f:51:6a:82:b5:34:16:c9:9a:
6a:f1:c8:7c:41:c9:c5:88:9f:e7:1f:1d:a8:2a:fc:
73:81:53:7a:0b:6c:c9:5e:eb:de:0e:8f:d2:7c:cb:
65:9f:5f:93:a1:7e:8d:42:36:54:84:36:1c:91:c8:
0d:c1:86:fb:cf:31:72:be:50:17:6d:68:43:2f:44:
39:c9:5a:24:53:37:21:3c:b0:09:19:ce:5b:c2:28:
e6:ef:cf:b6:41:62:c8:41:74:93:d4:e4:9f:d2:09:
5e:09:42:ad:8f:4b:20:62:de:76:42:db:ac:f4:31:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EE:90:8D:1D:61:92:C0:25:33:52:C4:C2:3B:12:7E:AC:90:03:A2
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/SO6QjR1hksAlM1LEwjsSfqyQA6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.96.0/20
IPv6:
2a02:ab80::/28
Signature Algorithm: sha256WithRSAEncryption
16:9d:a4:35:d4:6f:64:1b:6d:38:34:41:d8:db:8b:7b:d0:3b:
ef:1e:57:59:60:0d:da:88:39:ec:54:62:f6:b8:a2:48:2c:9c:
9b:df:7c:2c:ea:6b:ba:b6:f8:30:a1:b7:ec:0b:86:91:50:dd:
9a:74:1e:9a:94:d1:1b:4e:a9:e2:32:fe:9c:d6:35:33:6a:1c:
0b:f5:ab:d0:5f:d9:70:da:08:34:2e:e0:e6:a7:11:97:a5:68:
89:81:ed:3c:8a:55:be:d7:3f:da:68:7d:ac:24:b1:4e:b5:fd:
9e:84:ba:83:95:78:8e:f3:09:3e:a1:66:cd:81:77:8d:7a:b1:
05:8d:ad:6b:fd:de:f5:84:af:74:5d:48:5b:53:af:da:bc:1c:
22:2f:58:cb:72:3c:da:87:ce:c2:cc:a1:48:78:ec:a5:7e:b3:
52:63:a6:94:60:38:86:cb:5b:fe:ac:11:49:55:fd:d2:e7:dc:
fc:25:44:fe:89:b5:14:33:42:7e:52:1b:b1:b9:0d:07:b3:bc:
cf:27:a3:fc:5f:a1:47:7c:d1:ae:cb:56:dd:b2:12:70:dc:20:
a4:be:73:f8:4d:8f:41:fa:99:45:87:1c:3a:ac:c0:a8:10:81:
9a:03:b7:59:b0:34:ff:d7:2d:64:02:ce:0a:14:d7:6d:1e:ec:
da:c9:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:56 2026 by rpki-client