Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SoAQuS5JowSg-Xqd5VshgLzAyh8.roa
File: SoAQuS5JowSg-Xqd5VshgLzAyh8.roa (raw, json)
Hash identifier: dnJRYYtWMblvVb6Q3Lx0OC4l73F34CIRhK7TSvLECKE=
Subject key identifier: 4A:80:10:B9:2E:49:A3:04:A0:F9:7A:9D:E5:5B:21:80:BC:C0:CA:1F
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 019D48C99E83E6A82C561402FA9CAD1E91A7
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SoAQuS5JowSg-Xqd5VshgLzAyh8.roa
Signing time: Wed 01 Apr 2026 11:24:25 +0000
ROA not before: Wed 01 Apr 2026 11:24:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 45.94.5.0/24 maxlen: 24
45.94.7.0/24 maxlen: 24
45.156.30.0/24 maxlen: 24
45.156.31.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
131.222.230.0/24 maxlen: 24
131.222.231.0/24 maxlen: 24
131.222.232.0/24 maxlen: 24
131.222.233.0/24 maxlen: 24
185.248.12.0/22 maxlen: 22
185.248.12.0/24 maxlen: 24
185.248.13.0/24 maxlen: 24
185.248.14.0/24 maxlen: 24
185.248.15.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
194.4.153.0/24 maxlen: 24
2a0a:a580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:c9:9e:83:e6:a8:2c:56:14:02:fa:9c:ad:1e:91:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Apr 1 11:24:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8010b92e49a304a0f97a9de55b2180bcc0ca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:6d:19:e6:65:0e:c5:04:b4:d6:4e:40:89:
e3:80:c7:a9:4d:e8:eb:32:b1:9a:e2:16:41:13:41:
98:7f:12:22:ee:b9:aa:97:3a:c2:c9:b6:65:a6:70:
af:ad:0e:2f:f5:9d:89:97:69:0f:80:75:3e:d3:0e:
c4:c4:1c:c0:85:37:25:56:20:60:e4:aa:80:ff:3c:
3a:c7:1a:9c:40:ff:39:63:7b:1d:17:ec:f7:2a:6e:
8b:3d:a7:01:7f:75:50:78:3c:bd:a1:e0:51:33:d9:
d2:f5:b5:89:53:57:ef:25:2a:7c:18:e4:d8:74:db:
7c:67:19:7e:b4:a5:95:4c:cc:a2:e7:cd:cb:cf:5d:
cc:72:65:68:91:b4:61:aa:8c:64:24:36:bd:ef:93:
03:99:e4:af:6e:a2:cb:06:97:81:04:51:cb:ac:50:
10:32:fd:da:ea:ba:c5:dc:00:27:6d:c4:54:60:ad:
46:ef:87:bc:15:2d:56:ad:5b:e7:f5:13:f0:d5:15:
ff:00:66:1a:32:75:a0:f5:d7:e5:57:1c:4a:d8:6a:
22:47:15:d2:60:bd:3a:6f:9a:25:c1:52:3a:ed:6f:
22:30:9a:bc:e4:b2:aa:ab:e7:07:52:69:b8:5c:94:
80:a7:7e:cd:23:03:76:2d:9b:49:7e:2c:ef:2a:a2:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:10:B9:2E:49:A3:04:A0:F9:7A:9D:E5:5B:21:80:BC:C0:CA:1F
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SoAQuS5JowSg-Xqd5VshgLzAyh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.5.0/24
45.94.7.0/24
45.156.30.0/23
87.121.22.0/24
131.222.230.0-131.222.233.255
185.248.12.0/22
188.125.163.0/24
188.125.168.0/24
194.4.153.0/24
IPv6:
2a0a:a580::/29
Signature Algorithm: sha256WithRSAEncryption
28:92:42:80:19:f4:6a:39:24:be:8b:86:90:46:f8:4e:6f:4e:
3c:a3:46:d3:01:3b:ff:65:83:47:69:41:7e:d0:f1:c0:71:99:
76:59:72:d7:60:38:5c:9a:65:91:c3:05:88:a4:68:ac:1d:15:
29:c9:9b:21:08:86:b2:97:98:66:f4:7d:fd:2c:9f:ab:a8:6d:
7f:4e:b8:d5:f6:b6:4c:4f:c0:b4:d9:58:f1:5f:e9:33:57:68:
16:21:18:c9:44:42:fd:e0:ea:4d:37:f9:c5:a4:ba:36:8a:df:
a7:30:42:a1:4d:06:36:17:b3:0b:1a:71:d2:d8:32:97:9b:a2:
97:4b:84:87:21:1b:de:4a:4a:c0:37:55:89:0a:c8:98:3c:1f:
e0:8b:42:3d:fe:18:09:92:0d:57:b3:d2:86:d7:77:77:c8:e2:
23:8b:e1:e9:3f:26:55:83:66:c3:e0:cd:4a:7f:a5:41:4e:a1:
ae:0a:8b:bb:29:54:89:52:11:08:b0:94:7b:bd:12:68:8d:f8:
c4:a0:4c:b9:63:6d:44:93:25:7a:cf:1d:67:27:77:cd:0c:73:
4f:2a:d5:43:62:af:d6:71:3b:70:2f:32:df:83:ff:3c:1b:41:
96:34:f8:52:02:f1:36:6e:0b:93:f7:9f:7d:4e:86:63:19:df:
05:79:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:53 2026 by rpki-client