Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/So-K2mvNIa9xvvO1qWlQb1pfMoA.roa
File: So-K2mvNIa9xvvO1qWlQb1pfMoA.roa (raw, json)
Hash identifier: IMCqXQcRzQKc1Cy9gGciyrggq8ON3Hw0d9npGOUe7Ew=
Subject key identifier: 4A:8F:8A:DA:6B:CD:21:AF:71:BE:F3:B5:A9:69:50:6F:5A:5F:32:80
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01989E491350BF88E3A2C49105F17B202860
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/So-K2mvNIa9xvvO1qWlQb1pfMoA.roa
Signing time: Tue 12 Aug 2025 12:37:25 +0000
ROA not before: Tue 12 Aug 2025 12:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 79.99.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:49:13:50:bf:88:e3:a2:c4:91:05:f1:7b:20:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 12 12:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a8f8ada6bcd21af71bef3b5a969506f5a5f3280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:c9:ca:26:fa:84:2e:91:cf:63:9f:16:c7:
8f:2e:99:f5:81:e9:df:7c:9a:1b:8f:4e:78:45:48:
88:8c:48:02:65:7e:bd:c4:ed:c5:76:57:f9:3f:89:
dc:a0:09:c6:8d:17:27:14:c9:1d:93:2b:b4:d6:bd:
d1:67:a4:7e:07:5e:19:15:2f:34:e3:e7:db:ab:d2:
d5:98:c7:8d:17:71:15:32:a5:83:90:45:fd:d1:44:
89:b2:42:dc:f8:a0:88:5c:44:db:f2:08:dc:5c:93:
64:93:37:36:be:88:70:55:8f:f7:7a:e0:bf:0a:b6:
37:8b:56:bc:a2:41:ee:d5:2b:d6:28:f0:3c:ae:a2:
17:59:ce:c7:89:a5:2b:57:7a:3a:dc:07:b9:ae:0c:
34:37:42:79:7a:28:1d:14:38:2d:1d:05:de:5f:39:
d8:3f:09:f7:62:36:80:08:7f:f8:28:9f:15:eb:f4:
e9:99:44:a1:84:19:3d:55:8c:db:95:27:5d:56:24:
ba:4d:b7:c1:33:77:21:e8:f0:6b:6a:5b:3a:1c:c4:
9f:dc:b0:d0:c8:66:74:f3:fe:70:eb:2d:6b:75:b5:
93:4e:46:11:cb:bb:50:d4:18:16:8f:9f:eb:f4:dd:
67:1c:c8:d2:0b:fb:30:df:8e:e2:15:2b:9e:58:74:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:8A:DA:6B:CD:21:AF:71:BE:F3:B5:A9:69:50:6F:5A:5F:32:80
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/So-K2mvNIa9xvvO1qWlQb1pfMoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e0:f7:49:14:9e:74:25:09:0e:7f:4f:40:bb:27:c7:61:26:
49:b5:b7:f7:97:44:d4:59:0d:35:bf:45:cc:cd:ef:99:e6:9c:
51:bf:26:40:9a:7e:3b:ed:9d:94:d8:7f:88:95:69:f0:59:f1:
35:e3:41:5a:32:45:3b:f6:6c:7f:7a:20:08:d7:d1:96:37:6c:
04:ea:3e:1e:dd:a7:81:9c:86:bf:e8:dd:d4:7c:7a:50:84:4f:
2e:61:43:03:22:10:18:c6:f0:cf:2f:96:dd:4f:56:d4:f0:a1:
28:bf:8b:c1:8d:54:2c:1e:9a:f4:76:7d:84:ed:70:ae:01:d3:
ec:42:7b:5c:7f:41:1f:23:19:2e:f9:b1:6b:ca:c3:c5:e6:b4:
43:bc:70:3d:74:27:a7:4f:1d:a2:80:ab:d6:33:da:51:04:f7:
c8:e8:3d:12:41:a2:9f:5f:20:37:4c:6e:38:f5:89:fd:7b:38:
eb:ce:ce:64:b1:55:4b:b3:6c:d5:ee:07:5d:62:66:da:cc:ab:
da:51:fc:c4:e7:5b:f3:f3:82:fa:7c:76:8f:25:3e:54:02:d4:
8b:90:f2:26:cb:58:e6:73:c3:59:30:f2:03:7c:9e:33:29:c8:
87:28:9d:85:52:ba:45:a9:c2:44:c2:29:41:46:0d:9c:80:d5:
ef:17:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:53 2025 by rpki-client