Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/soD_TVroUhn4kOalbV5_zUUFF5o.roa
File: soD_TVroUhn4kOalbV5_zUUFF5o.roa (raw, json)
Hash identifier: 6MD8ohn7IGtOGpcI8Sh4nU/dqGzhAaKyVoNKEGen+rQ=
Subject key identifier: B2:80:FF:4D:5A:E8:52:19:F8:90:E6:A5:6D:5E:7F:CD:45:05:17:9A
Certificate issuer: /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Certificate serial: 019B7758C52F056E7E95F26B4D6D236BD46B
Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/soD_TVroUhn4kOalbV5_zUUFF5o.roa
Signing time: Thu 01 Jan 2026 02:17:44 +0000
ROA not before: Thu 01 Jan 2026 02:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214217
IP address blocks: 193.247.112.0/21 maxlen: 24
193.247.112.0/24 maxlen: 24
193.247.117.0/24 maxlen: 24
193.247.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:c5:2f:05:6e:7e:95:f2:6b:4d:6d:23:6b:d4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Validity
Not Before: Jan 1 02:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b280ff4d5ae85219f890e6a56d5e7fcd4505179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:43:bc:13:74:30:a5:d6:e6:3a:6b:9c:3e:
15:29:10:be:84:16:3c:60:c1:1d:36:60:b6:10:1f:
67:6e:d4:91:2e:8d:ca:cb:7f:33:20:ff:e1:28:29:
2d:c3:8a:44:65:39:37:a2:43:22:dd:f6:05:60:4f:
bb:45:52:85:0e:b1:a0:f1:d5:34:a4:87:e9:6b:88:
3a:4d:4f:af:98:d1:3d:36:f1:21:71:d6:bc:b2:36:
ca:2e:40:ba:90:c0:1d:4f:a4:83:47:05:3f:24:7b:
69:7e:da:0d:8b:03:2d:9b:5a:fb:a6:5b:ab:15:1d:
ed:6e:4f:c5:af:c8:dc:a1:9a:f8:fe:31:a9:af:32:
54:c0:7b:b7:44:28:d8:e3:a6:e0:08:7f:f9:4d:2c:
c4:1f:c7:23:7f:f0:f0:77:51:a0:35:5a:63:f2:82:
25:04:13:ca:e8:27:aa:0a:9a:81:ad:f6:07:62:51:
d8:53:19:5b:79:4f:63:64:dc:89:93:37:05:2d:fc:
b4:1b:c3:aa:50:73:36:08:b1:8b:6d:76:a4:7f:cd:
00:69:cb:ae:06:40:29:6e:02:ed:08:30:08:0a:67:
71:5b:48:27:ba:dd:fe:41:06:73:36:ae:1e:cd:7e:
0d:ea:1c:c8:c5:66:60:2b:48:b4:af:a1:6b:a0:8a:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:80:FF:4D:5A:E8:52:19:F8:90:E6:A5:6D:5E:7F:CD:45:05:17:9A
X509v3 Authority Key Identifier:
keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/soD_TVroUhn4kOalbV5_zUUFF5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.112.0/21
Signature Algorithm: sha256WithRSAEncryption
64:87:a7:1a:5d:b5:7b:b0:e1:dd:86:a1:2d:44:2a:ae:03:db:
17:c7:72:3a:cb:f1:eb:c3:bf:74:f8:ff:56:4f:02:10:48:f2:
93:51:8b:2d:10:dc:b1:1c:1f:17:bc:b8:b8:7f:04:be:0a:32:
53:e6:25:cb:01:dc:2b:d8:5e:c8:e2:58:67:40:00:9c:eb:ea:
13:a1:cb:42:3a:6c:82:31:89:d4:27:57:cb:2b:e1:39:1e:67:
22:ed:9c:d8:3a:36:13:97:2e:24:ff:15:b6:6c:a8:b4:61:42:
63:cd:7a:c0:39:93:a4:74:33:89:e7:f9:6b:19:a2:4f:34:81:
c3:7a:e4:ea:1b:3e:c3:8c:1f:11:56:3d:48:e5:3e:a3:a2:72:
0a:ec:c2:ab:cf:b9:c2:f5:ee:ae:4e:54:af:b1:5b:75:bb:be:
eb:26:a6:b5:a2:64:c4:66:71:96:fe:6b:e7:73:b3:ae:b0:5e:
ca:b4:90:c8:c9:a1:15:79:a3:64:9b:af:3f:cb:4d:46:7e:fa:
05:9b:1f:9c:56:ca:e8:e4:f3:d9:54:81:bb:11:a0:42:d8:5f:
45:20:b7:9b:38:91:a1:dc:ae:9b:2f:53:0e:86:df:ac:8a:8f:
62:d9:4a:ee:a3:01:3d:d2:54:12:4a:57:8b:05:87:a7:ba:f1:
c1:2a:d0:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WMUvBW5+lfJrTW0ja9RrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZmY1YjNjZGFmMmVhZDFiYzMzMDk0MTFiZjk0OTJjZDk4
N2FmYmEwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjgwZmY0ZDVhZTg1MjE5Zjg5MGU2YTU2ZDVlN2ZjZDQ1MDUxNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HhDvBN0MKXW5jprnD4VKRC+hBY8
YMEdNmC2EB9nbtSRLo3Ky38zIP/hKCktw4pEZTk3okMi3fYFYE+7RVKFDrGg8dU0
pIfpa4g6TU+vmNE9NvEhcda8sjbKLkC6kMAdT6SDRwU/JHtpftoNiwMtm1r7plur
FR3tbk/Fr8jcoZr4/jGprzJUwHu3RCjY46bgCH/5TSzEH8cjf/Dwd1GgNVpj8oIl
BBPK6CeqCpqBrfYHYlHYUxlbeU9jZNyJkzcFLfy0G8OqUHM2CLGLbXakf80Aacuu
BkApbgLtCDAICmdxW0gnut3+QQZzNq4ezX4N6hzIxWZgK0i0r6FroIq1WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKA/01a6FIZ+JDmpW1ef81FBReaMB8GA1UdIwQY
MBaAFM3/Wzza8urRvDMJQRv5SSzZh6+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEt
YTg3ODFhZGQyNDIzLzEvc29EX1RWcm9VaG40a09hbGJWNV96VVVGRjVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEtYTg3ODFhZGQyNDIz
LzEvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwfdwMA0G
CSqGSIb3DQEBCwUAA4IBAQBkh6caXbV7sOHdhqEtRCquA9sXx3I6y/Hrw790+P9W
TwIQSPKTUYstENyxHB8XvLi4fwS+CjJT5iXLAdwr2F7I4lhnQACc6+oToctCOmyC
MYnUJ1fLK+E5Hmci7ZzYOjYTly4k/xW2bKi0YUJjzXrAOZOkdDOJ5/lrGaJPNIHD
euTqGz7DjB8RVj1I5T6jonIK7MKrz7nC9e6uTlSvsVt1u77rJqa1omTEZnGW/mvn
c7OusF7KtJDIyaEVeaNkm68/y01GfvoFmx+cVsro5PPZVIG7EaBC2F9FILebOJGh
3K6bL1MOht+sio9i2UruowE90lQSSleLBYenuvHBKtAk
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:55 2026 by rpki-client