Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/So6r1AZmGnF-PbEn6g9WhpCbE3I.roa
File: So6r1AZmGnF-PbEn6g9WhpCbE3I.roa (raw, json)
Hash identifier: X4O3dezkX17DXK1U+hbySv2y7Wz90jhnKou37vZW1lE=
Subject key identifier: 4A:8E:AB:D4:06:66:1A:71:7E:3D:B1:27:EA:0F:56:86:90:9B:13:72
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0C85D870F14D5AED975B7151D53A44F8C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/So6r1AZmGnF-PbEn6g9WhpCbE3I.roa
Signing time: Tue 22 Sep 2026 09:06:07 +0000
ROA not before: Tue 22 Sep 2026 09:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:5d:87:0f:14:d5:ae:d9:75:b7:15:1d:53:a4:4f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 22 09:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8eabd406661a717e3db127ea0f5686909b1372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:0c:35:c8:eb:dc:09:95:8f:2f:9f:f1:23:
44:78:a7:3a:8c:41:9e:97:ee:3b:b9:2a:ad:26:8e:
a5:81:c8:ff:1a:64:5b:7c:cf:ff:d4:0c:15:d8:1c:
60:aa:f3:62:e4:d4:11:76:56:a0:a3:83:54:80:da:
d4:e9:db:1a:77:ba:ca:cd:f4:01:69:98:25:ce:e7:
28:cd:fc:1b:75:7d:8b:d6:6b:e5:be:56:93:81:33:
95:99:9f:5b:d9:0e:d1:c9:f3:56:fd:c9:21:ad:1f:
09:bf:0d:fe:86:1b:96:4f:1b:2c:3c:ec:b2:e5:14:
7c:5c:d2:46:44:7f:06:15:a5:69:bc:44:7f:24:dd:
8a:d5:8c:3e:bb:cf:ec:db:fd:73:a6:95:20:77:e7:
df:d4:86:0c:04:e7:70:0b:e7:d5:0f:ff:51:62:50:
4f:40:a5:98:aa:ea:42:be:03:70:e7:ad:13:6a:d6:
42:fb:f1:70:87:b6:90:2c:91:b8:13:bf:c1:ea:e9:
d0:4b:11:56:f9:9b:17:26:06:55:de:ed:d3:ca:bd:
d5:60:3d:11:97:4b:15:e3:72:6c:b8:e5:05:e2:f4:
00:3c:b2:7c:4c:b2:fa:1e:2f:4f:c1:8a:27:d6:4f:
1a:47:9a:5b:a1:b4:26:26:0a:3f:6a:fd:c6:45:4e:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:AB:D4:06:66:1A:71:7E:3D:B1:27:EA:0F:56:86:90:9B:13:72
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/So6r1AZmGnF-PbEn6g9WhpCbE3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:96:85:11:3f:b3:31:98:91:f1:c7:b5:3d:a0:f9:3c:c4:c1:
82:35:86:19:76:72:b2:83:d9:57:33:0a:3d:09:86:90:89:28:
1f:be:3d:b0:0d:1e:c2:54:0e:09:5a:7e:2b:c7:1a:d9:16:24:
74:06:fd:70:98:d6:39:10:71:03:dc:87:91:ab:44:83:0e:ac:
fb:d4:f6:e2:d7:2d:dc:cf:db:5c:31:d5:53:87:f1:ba:b8:77:
13:75:19:a5:5c:ec:40:7e:1c:1a:2c:ab:c9:16:86:10:0b:c5:
dc:3f:e8:1a:42:34:0f:e4:ef:e0:15:23:33:ce:bb:4d:7b:b2:
34:d3:58:9c:02:3d:b3:20:cc:17:f6:73:81:80:a2:74:d4:ca:
79:2a:fd:93:d2:03:0d:35:b4:f6:a9:8d:64:01:6b:0c:a6:e8:
ea:eb:b1:5a:8d:36:37:1f:46:46:e5:6d:60:f3:98:26:5d:d4:
9a:80:b0:5a:94:c8:5f:27:98:74:ae:47:e5:77:c1:24:6d:b7:
da:73:8f:10:17:ea:2b:3c:15:9b:87:49:d6:0d:40:87:be:6a:
90:d8:8e:1f:12:3c:8b:ef:1a:f3:73:48:3d:bc:73:d7:6b:da:
e4:bc:9c:42:fb:26:ef:d0:70:63:2a:70:0d:ca:de:60:0f:ee:
b7:9f:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:55:16 2026 by rpki-client