Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/S2iOEI-aU9f2dfcfFDrHrDaux2I.roa
File: S2iOEI-aU9f2dfcfFDrHrDaux2I.roa (raw, json)
Hash identifier: lKNrnGvKIxJI1UyYRR3D+6ApWA14nGIqu8QygObRuyM=
Subject key identifier: 4B:68:8E:10:8F:9A:53:D7:F6:75:F7:1F:14:3A:C7:AC:36:AE:C7:62
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A1A58039B55312948EAF53351984390A34
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/S2iOEI-aU9f2dfcfFDrHrDaux2I.roa
Signing time: Wed 04 Nov 2026 07:40:06 +0000
ROA not before: Wed 04 Nov 2026 07:40:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 72.56.16.0/20 maxlen: 32
72.56.64.0/19 maxlen: 32
72.56.96.0/19 maxlen: 32
201.34.144.0/22 maxlen: 32
201.34.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:80:39:b5:53:12:94:8e:af:53:35:19:84:39:0a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Nov 4 07:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b688e108f9a53d7f675f71f143ac7ac36aec762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:29:98:ed:f0:75:02:5b:d1:a4:63:da:fc:
ef:65:2e:4f:aa:7c:a7:d0:71:b2:6b:31:d7:08:de:
08:07:6f:2d:d4:43:77:4b:8c:dd:5a:90:6e:2a:a9:
4b:f3:7f:71:f0:89:fa:b0:23:4e:c6:0f:f5:56:8b:
3f:64:e0:03:58:53:a6:64:19:6d:f4:b9:0e:53:de:
e5:37:47:88:cf:cc:d7:2e:d9:01:29:a2:32:83:76:
4c:cb:7f:b8:87:c7:48:9a:cc:0e:df:fc:ae:fb:6b:
95:d4:df:7c:b6:64:0e:4b:42:95:d9:04:aa:da:a8:
a9:7e:b8:db:64:79:d6:a4:85:df:6e:c1:71:da:c5:
98:be:f3:23:ee:3f:cf:8c:7e:91:85:13:8a:85:b1:
4f:67:42:8e:50:d9:98:20:fa:52:f7:3e:00:ad:d5:
33:be:3b:94:10:9f:5f:00:22:22:64:b9:66:20:55:
c6:10:f9:5e:0b:48:6b:4d:bd:18:43:7e:8e:04:3d:
20:92:b0:7b:5b:19:48:66:90:1e:ba:5f:d6:24:2b:
45:43:8b:b2:28:19:54:ad:02:a6:a4:a6:1e:17:f5:
39:c7:f2:09:4f:91:c1:61:a8:ce:13:3e:aa:22:24:
9b:13:bc:48:3b:92:03:f1:39:f4:8e:3e:ec:00:f8:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:8E:10:8F:9A:53:D7:F6:75:F7:1F:14:3A:C7:AC:36:AE:C7:62
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/S2iOEI-aU9f2dfcfFDrHrDaux2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.16.0/20
72.56.64.0/18
201.34.144.0/22
201.34.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:8c:18:14:ba:44:48:7d:72:c4:fa:7d:ab:15:0c:98:b2:6a:
0e:5f:06:19:e0:45:8e:bd:16:cf:c5:49:da:76:7d:a0:eb:7e:
01:f2:db:94:8f:7a:8d:61:3c:dd:b0:6e:12:8b:e5:12:1c:40:
45:0a:12:87:d8:7a:cb:4d:98:01:4f:29:96:cc:5d:a4:82:2e:
00:f1:13:74:58:10:96:c4:5f:f7:2a:4c:3c:50:78:c3:e1:c2:
1d:10:2e:80:cd:c8:0e:86:60:cf:1a:10:37:1c:a6:3e:50:c9:
4e:0d:d3:e4:db:bc:05:97:e5:10:66:b0:75:d9:44:1b:57:a3:
7d:be:f1:c8:c6:88:db:29:62:b6:0b:19:22:1e:39:5d:f4:0d:
b6:9e:5a:72:8a:b5:59:12:00:71:19:94:62:fd:54:79:f1:5c:
0e:e1:4f:06:da:61:58:28:69:10:84:da:c2:02:72:48:11:5b:
c8:02:1d:2f:df:82:62:f0:17:70:33:4b:db:e3:06:c4:90:1d:
28:67:c0:5c:cc:be:54:6a:fa:16:86:80:83:0b:6f:d2:da:74:
96:0d:e8:6d:68:14:f4:54:48:5c:03:78:48:a8:b0:06:fb:90:
7e:2d:8b:b2:d6:a6:03:74:21:f4:4f:a3:3e:5c:c2:89:7c:f2:
94:e4:f3:65
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaGlgDm1UxKUjq9TNRmEOQo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYxMTA0MDc0MDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjY4OGUxMDhmOWE1M2Q3ZjY3NWY3MWYxNDNhYzdhYzM2YWVjNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06IpmO3wdQJb0aRj2vzvZS5Pqnyn
0HGyazHXCN4IB28t1EN3S4zdWpBuKqlL839x8In6sCNOxg/1Vos/ZOADWFOmZBlt
9LkOU97lN0eIz8zXLtkBKaIyg3ZMy3+4h8dImswO3/yu+2uV1N98tmQOS0KV2QSq
2qipfrjbZHnWpIXfbsFx2sWYvvMj7j/PjH6RhROKhbFPZ0KOUNmYIPpS9z4ArdUz
vjuUEJ9fACIiZLlmIFXGEPleC0hrTb0YQ36OBD0gkrB7WxlIZpAeul/WJCtFQ4uy
KBlUrQKmpKYeF/U5x/IJT5HBYajOEz6qIiSbE7xIO5ID8Tn0jj7sAPhn+wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEtojhCPmlPX9nX3HxQ6x6w2rsdiMB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvUzJpT0VJLWFVOWYyZGZjZkZEckhyRGF1eDJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQESDgQAwQG
SDhAAwQCySKQAwQCySKYMA0GCSqGSIb3DQEBCwUAA4IBAQA/jBgUukRIfXLE+n2r
FQyYsmoOXwYZ4EWOvRbPxUnadn2g634B8tuUj3qNYTzdsG4Si+USHEBFChKH2HrL
TZgBTymWzF2kgi4A8RN0WBCWxF/3Kkw8UHjD4cIdEC6AzcgOhmDPGhA3HKY+UMlO
DdPk27wFl+UQZrB12UQbV6N9vvHIxojbKWK2CxkiHjld9A22nlpyirVZEgBxGZRi
/VR58VwO4U8G2mFYKGkQhNrCAnJIEVvIAh0v34Ji8BdwM0vb4wbEkB0oZ8BczL5U
avoWhoCDC2/S2nSWDehtaBT0VEhcA3hIqLAG+5B+LYuy1qYDdCH0T6M+XMKJfPKU
5PNl
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:29:06 2026 by rpki-client