Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/somfiJ2imAgUIPFKEceqOz351PE.roa
File: somfiJ2imAgUIPFKEceqOz351PE.roa (raw, json)
Hash identifier: Xyi4uD7LPy6XNWQPjK5KAiBxJgZx+gzHc61t4D4w+zo=
Subject key identifier: B2:89:9F:88:9D:A2:98:08:14:20:F1:4A:11:C7:AA:3B:3D:F9:D4:F1
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A11BD994E1C504095FC41CB9F31B4839E2
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/somfiJ2imAgUIPFKEceqOz351PE.roa
Signing time: Thu 08 Oct 2026 14:10:06 +0000
ROA not before: Thu 08 Oct 2026 14:10:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 110.172.189.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d9:94:e1:c5:04:09:5f:c4:1c:b9:f3:1b:48:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 8 14:10:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2899f889da298081420f14a11c7aa3b3df9d4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:8b:96:ee:c8:af:3e:a1:ba:a1:26:46:2a:
8c:97:27:87:c4:2e:7a:fc:95:34:b0:ab:79:1c:68:
6f:95:2e:84:17:ef:21:22:d5:87:3b:0d:f8:14:1a:
4a:10:0d:36:1e:d5:9c:fd:fb:ae:03:0e:96:de:c5:
63:9c:77:14:28:00:b0:a3:1d:a1:ff:5b:71:f1:39:
5f:88:7c:21:6f:bc:2a:b8:ad:b2:bd:ab:81:aa:71:
4b:dd:13:66:cc:75:13:d3:b4:c4:c0:42:76:d0:f8:
6d:d4:cb:c5:da:38:19:19:1f:57:ee:ee:d7:ab:31:
8c:fb:b6:4c:0f:19:80:51:78:ee:f8:31:14:55:8a:
4f:c6:3a:87:ad:41:bf:68:9d:66:9a:57:45:99:b9:
da:0b:04:31:80:d1:ea:9f:a4:fb:92:8a:32:72:53:
a5:f3:33:95:cd:63:06:92:2e:ba:26:cd:30:f0:0e:
87:3b:89:35:0b:84:a8:73:5d:47:09:a8:2b:e3:cd:
32:a2:af:09:0e:6d:1e:eb:4b:98:cf:df:cb:20:dd:
ea:56:2a:72:73:25:f3:1b:a5:74:da:84:ab:65:11:
78:40:c6:e4:40:8b:de:e7:a9:96:e7:97:e4:f7:0e:
0e:59:bf:01:3b:67:0d:e5:0f:6d:43:59:e7:9c:1e:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:9F:88:9D:A2:98:08:14:20:F1:4A:11:C7:AA:3B:3D:F9:D4:F1
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/somfiJ2imAgUIPFKEceqOz351PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.189.0/24
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2d:40:c6:72:c8:b9:fb:5e:7c:10:b1:66:38:b9:01:d4:b3:
04:12:5d:c0:78:bb:c5:ec:0e:49:bf:f4:d9:b9:d3:dc:b8:67:
53:d3:69:e2:89:6e:1d:6e:6f:81:b8:31:b2:f2:0e:c3:3d:41:
d1:b1:27:84:51:b9:e0:1d:0f:55:5d:2b:bd:9e:bf:5d:d2:7a:
41:ae:a7:b2:6c:6f:9d:9e:c6:71:e6:e8:09:1c:a1:3b:40:2d:
39:06:4d:f2:4b:55:87:b6:4e:0f:4e:e2:a3:46:f4:4c:6e:58:
65:78:88:2c:e5:5b:4f:2c:01:9d:23:4e:97:04:7e:5c:0d:74:
d9:53:1d:b2:bb:81:64:cd:07:c0:ca:8b:2c:07:da:d3:c5:57:
32:bd:90:c2:1d:82:5b:15:39:3d:02:bc:27:5e:f7:44:ec:98:
0f:fa:c7:2a:98:ec:5b:6b:23:93:36:17:30:f9:9d:94:3c:8c:
51:65:f6:57:f2:94:bc:c6:1f:97:29:83:d8:88:5c:bd:32:64:
f1:c4:77:87:a7:6c:0b:ef:bb:40:20:01:be:ec:c1:bd:32:b1:
b7:e6:67:06:6f:ab:83:53:14:f3:d4:52:60:8f:08:f8:31:1b:
10:d3:23:aa:15:a3:47:64:f1:9e:cd:ac:ba:69:37:6b:37:c8:
20:ee:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:41 2026 by rpki-client