Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/So8t4llWcdanSyGl6iBrJcYf23w.roa
File: So8t4llWcdanSyGl6iBrJcYf23w.roa (raw, json)
Hash identifier: iisqdNFKRS6rwD4OQ/f4FNvwhNSYAkPrqUedjcHEQWQ=
Subject key identifier: 4A:8F:2D:E2:59:56:71:D6:A7:4B:21:A5:EA:20:6B:25:C6:1F:DB:7C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019C04CE3BEB4F8A761D0CA2BB34E2F84708
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/So8t4llWcdanSyGl6iBrJcYf23w.roa
Signing time: Wed 28 Jan 2026 13:32:30 +0000
ROA not before: Wed 28 Jan 2026 13:32:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204199
IP address blocks: 46.8.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:ce:3b:eb:4f:8a:76:1d:0c:a2:bb:34:e2:f8:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 28 13:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8f2de2595671d6a74b21a5ea206b25c61fdb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:82:26:b8:4e:90:a4:7f:d3:c5:11:35:22:
cb:e8:1e:46:66:10:38:ba:ea:bc:76:c7:6d:be:cb:
39:12:29:e0:c0:59:b1:6c:91:55:11:c8:9e:33:10:
6c:19:14:ff:54:5f:9b:25:74:95:4c:96:da:f3:a3:
f9:15:5f:e7:f6:d4:66:68:4b:ba:96:a7:15:97:45:
34:40:ca:9b:37:57:c0:7e:93:22:89:0a:d4:9b:71:
53:15:45:7e:ad:7e:54:83:6c:37:b5:85:bb:fe:6e:
cf:83:a6:40:bb:a3:d9:e9:7f:67:34:50:01:8a:21:
93:eb:70:f0:22:a8:52:df:84:1e:e1:64:12:d7:55:
a2:74:d0:b0:60:59:a1:55:6b:90:6e:19:ca:92:fd:
89:aa:85:ed:4b:dd:8b:61:d2:06:18:73:e1:85:6e:
ca:76:96:85:f4:c1:82:7a:0c:74:c9:65:8f:2f:39:
dd:61:70:23:f5:89:87:1b:27:db:ca:7c:dd:7c:5a:
ba:b6:23:57:79:bc:db:4f:90:7f:55:55:ba:b5:ba:
e6:0e:55:1d:44:e4:48:33:fa:84:46:26:de:04:be:
44:ee:4d:34:61:d4:14:b3:87:09:c2:3c:5f:fe:e7:
2e:c5:f5:f0:70:1a:37:1d:73:f1:e8:82:47:15:cb:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:2D:E2:59:56:71:D6:A7:4B:21:A5:EA:20:6B:25:C6:1F:DB:7C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/So8t4llWcdanSyGl6iBrJcYf23w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.250.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fd:c9:a3:b4:09:64:cf:fc:3c:e8:97:94:c0:7e:f1:42:1b:
a5:c6:f8:7c:be:06:31:f8:0a:a3:ee:47:ec:20:09:91:67:e7:
78:16:d1:f0:c2:07:64:b1:bd:6f:9f:4b:36:66:5d:d4:c3:83:
84:5c:b9:84:3e:08:03:27:6c:a3:82:25:01:3f:6b:af:33:c8:
d8:4b:19:ba:eb:d0:ff:3e:c0:a0:39:e9:61:2b:10:73:4b:9e:
49:22:30:6c:e1:56:5f:c1:ea:60:a1:a9:6c:e5:03:39:4e:a6:
c4:b5:b8:d0:86:a5:65:f2:e2:03:0b:af:99:b4:a1:f4:9f:a2:
6e:76:21:7e:cf:bb:9a:66:c6:b0:2d:87:05:21:3a:99:3f:2c:
06:08:17:bc:51:ec:90:73:84:45:bb:99:7c:9f:0b:08:8c:4c:
f7:36:83:ca:c5:e5:c2:ff:2f:28:88:65:8e:19:a4:a3:6a:c4:
81:fd:f1:06:2a:fe:7b:02:ac:89:96:32:3a:cd:e5:15:7b:1d:
17:46:ad:bb:89:65:8c:0c:ef:51:ff:d5:f3:12:ed:a5:40:40:
1d:c3:2e:f0:d4:52:72:6f:1b:a2:85:e2:4d:ec:73:f2:93:db:
60:d7:f7:52:5d:cb:79:0f:f9:aa:bc:78:58:26:82:89:65:2d:
f0:c1:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:22 2026 by rpki-client