Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/soFovE6e4aHQDFaeDOCiDQezXyI.roa
File: soFovE6e4aHQDFaeDOCiDQezXyI.roa (raw, json)
Hash identifier: V7niFxATF0Wnr7HWHpMzPyV3z9Vqb08HPGrmPaDcLlo=
Subject key identifier: B2:81:68:BC:4E:9E:E1:A1:D0:0C:56:9E:0C:E0:A2:0D:07:B3:5F:22
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D871758DA5BD5CB9C81EAB4655D27DC46
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/soFovE6e4aHQDFaeDOCiDQezXyI.roa
Signing time: Mon 13 Apr 2026 13:45:47 +0000
ROA not before: Mon 13 Apr 2026 13:45:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 77.107.99.0/24 maxlen: 24
89.213.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:17:58:da:5b:d5:cb:9c:81:ea:b4:65:5d:27:dc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 13 13:45:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b28168bc4e9ee1a1d00c569e0ce0a20d07b35f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:c4:bc:d8:a2:71:d2:48:d3:c0:c6:c7:f8:
af:cf:e7:85:97:f7:00:a8:72:98:c2:27:0d:61:59:
d6:f7:e5:90:11:0b:9f:3c:95:b4:2b:7d:fa:fe:0a:
a1:46:8e:81:d9:ab:38:90:a2:8c:27:2d:82:dd:8a:
08:58:fb:0e:86:f7:ef:6f:57:38:63:5c:c7:80:f7:
81:76:59:e8:bd:70:38:d2:be:c5:9c:a5:ca:36:9c:
ca:d8:ce:8f:46:a6:a2:c4:ad:18:8a:17:0d:e7:d9:
6d:bf:19:51:37:7d:09:c9:9b:c3:34:9e:b7:97:54:
9c:98:52:5c:1f:a1:b3:90:a9:5f:f5:f1:d7:90:31:
cf:e9:eb:e5:a4:96:b3:31:c7:3e:d0:ed:91:2f:fb:
0f:e0:e7:3d:50:4e:63:c3:0e:0e:bd:b3:d3:db:6f:
ae:77:28:f5:d7:36:2d:52:73:6e:64:77:30:82:93:
fe:06:92:b1:c4:77:89:8a:1d:e9:1e:67:53:13:13:
12:fd:65:b6:6b:92:1d:97:f1:86:8e:75:4a:4a:eb:
64:12:6c:02:bf:25:2c:82:43:9f:51:de:8c:5a:ee:
5f:01:0c:f7:1e:14:80:65:fc:51:b1:29:06:b6:20:
6a:f7:86:b5:71:b3:c7:84:d8:a8:60:63:cd:42:f6:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:68:BC:4E:9E:E1:A1:D0:0C:56:9E:0C:E0:A2:0D:07:B3:5F:22
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/soFovE6e4aHQDFaeDOCiDQezXyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.99.0/24
89.213.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9f:98:c6:6d:47:0f:1d:81:0f:cc:6d:f3:87:bd:52:5b:58:
da:2b:0b:b6:be:e3:85:3a:7c:72:0a:11:39:d1:b2:0f:8b:12:
80:36:64:cb:19:0d:e7:ea:be:ad:b3:c9:ba:3d:3c:44:63:06:
a9:a6:2d:42:2e:70:08:d9:3e:ce:bc:df:57:f6:ab:a6:fb:5a:
45:fc:79:a4:ef:2a:6e:1b:e0:70:90:0c:4d:a3:9b:68:8b:1a:
e4:66:ed:b8:30:5d:cf:8e:5f:9f:40:cd:74:a3:9a:17:d3:bf:
b4:2d:c7:35:bc:11:a7:0a:d6:18:a8:6a:70:1b:05:06:26:7d:
72:39:f2:f7:e3:30:15:bb:cf:61:45:40:c4:d5:7b:2f:ca:fc:
81:f9:e5:ac:3c:e7:71:7d:01:53:b9:e9:05:57:02:ee:ed:bd:
d6:2c:33:15:ab:ae:b8:51:4d:68:37:92:37:cd:4f:83:52:8b:
a5:9c:0a:9b:63:ab:69:e4:be:63:9c:66:29:c4:28:86:ee:fe:
60:be:e6:66:7f:70:11:3c:81:ee:12:e3:d6:df:f2:72:63:3a:
ba:ed:3e:fe:f5:57:1d:09:d5:e1:b0:c4:43:98:66:57:37:b8:
3b:5e:c8:4e:8b:46:66:25:00:35:a7:bf:a7:c4:51:3a:3b:3f:
52:85:43:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2HF1jaW9XLnIHqtGVdJ9xGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNDEzMTM0NTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjgxNjhiYzRlOWVlMWExZDAwYzU2OWUwY2UwYTIwZDA3YjM1ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDbEvNiicdJI08DGx/ivz+eFl/cA
qHKYwicNYVnW9+WQEQufPJW0K336/gqhRo6B2as4kKKMJy2C3YoIWPsOhvfvb1c4
Y1zHgPeBdlnovXA40r7FnKXKNpzK2M6PRqaixK0YihcN59ltvxlRN30JyZvDNJ63
l1ScmFJcH6GzkKlf9fHXkDHP6evlpJazMcc+0O2RL/sP4Oc9UE5jww4OvbPT22+u
dyj11zYtUnNuZHcwgpP+BpKxxHeJih3pHmdTExMS/WW2a5Idl/GGjnVKSutkEmwC
vyUsgkOfUd6MWu5fAQz3HhSAZfxRsSkGtiBq94a1cbPHhNioYGPNQvbcCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLKBaLxOnuGh0AxWngzgog0Hs18iMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvc29Gb3ZFNmU0YUhRREZhZURPQ2lEUWV6WHlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATWtjAwQA
WdVnMA0GCSqGSIb3DQEBCwUAA4IBAQAvn5jGbUcPHYEPzG3zh71SW1jaKwu2vuOF
OnxyChE50bIPixKANmTLGQ3n6r6ts8m6PTxEYwappi1CLnAI2T7OvN9X9qum+1pF
/Hmk7ypuG+BwkAxNo5toixrkZu24MF3Pjl+fQM10o5oX07+0Lcc1vBGnCtYYqGpw
GwUGJn1yOfL34zAVu89hRUDE1XsvyvyB+eWsPOdxfQFTuekFVwLu7b3WLDMVq664
UU1oN5I3zU+DUoulnAqbY6tp5L5jnGYpxCiG7v5gvuZmf3ARPIHuEuPW3/JyYzq6
7T7+9VcdCdXhsMRDmGZXN7g7XshOi0ZmJQA1p7+nxFE6Oz9ShUON
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:56 2026 by rpki-client