Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SOc2DYp6Wf6IsDIQjvRyWZTWstA.roa
File: SOc2DYp6Wf6IsDIQjvRyWZTWstA.roa (raw, json)
Hash identifier: pBXKRTnx4XdP5j8IEI4LMDhNdmQGuNCejO/atxHP0ko=
Subject key identifier: 48:E7:36:0D:8A:7A:59:FE:88:B0:32:10:8E:F4:72:59:94:D6:B2:D0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A1DB52B781B3EC9687184B89B584766DB1
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SOc2DYp6Wf6IsDIQjvRyWZTWstA.roa
Signing time: Sat 14 Nov 2026 18:29:53 +0000
ROA not before: Sat 14 Nov 2026 18:29:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208626
IP address blocks: 194.32.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:52:b7:81:b3:ec:96:87:18:4b:89:b5:84:76:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Nov 14 18:29:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48e7360d8a7a59fe88b032108ef4725994d6b2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:fb:16:05:7a:e7:53:f5:64:ef:cf:fb:70:
27:99:a3:86:58:5a:0f:5e:7a:4f:23:1d:aa:67:c3:
20:d2:f5:9c:3c:3c:51:d8:eb:a0:b5:32:f9:3a:b1:
7a:f5:b9:3c:1e:10:71:c3:c6:c5:1e:66:50:6c:fb:
1d:d9:5c:20:48:42:b9:30:50:a9:8a:aa:e0:08:8d:
37:d6:b3:bc:2d:da:95:cb:34:e8:96:56:2e:46:88:
f5:ea:58:e5:2a:7b:47:40:c8:21:57:b6:b2:a2:bb:
f4:49:3e:c6:93:de:86:a0:ab:ce:34:90:26:c9:30:
ac:de:e1:9f:30:b5:90:ea:f5:e3:8d:17:c1:3e:5a:
45:cd:16:01:07:b0:33:8a:4f:40:92:df:5d:4a:0b:
10:ec:be:5b:27:1a:71:d3:fb:80:c6:f6:c9:0c:42:
6e:c7:ec:9f:19:c0:37:4e:5b:ba:67:10:00:4a:7e:
5f:9f:27:8f:e4:6c:7b:02:92:2a:bc:af:6f:68:6d:
bb:e9:35:e7:76:b7:13:5a:dd:de:5c:d7:71:4c:91:
3b:0c:2f:15:93:8b:47:9c:53:6c:97:47:ed:c8:a9:
ec:fd:ce:66:03:cd:14:45:31:2c:d0:a5:07:02:42:
5a:ee:1b:15:bc:f2:cd:be:bf:48:bb:9d:df:16:47:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:36:0D:8A:7A:59:FE:88:B0:32:10:8E:F4:72:59:94:D6:B2:D0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SOc2DYp6Wf6IsDIQjvRyWZTWstA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9a:43:c7:6b:f4:16:9f:2d:e1:e0:6a:e6:04:43:b4:06:f4:
f8:cb:65:7b:ec:09:9a:d2:5b:7d:64:77:96:e1:43:51:65:cd:
5b:f3:f5:ba:9e:89:f0:93:4b:27:cd:5d:86:c9:6b:f8:9b:d6:
87:4d:6e:d1:18:76:b9:87:5d:1a:24:a7:09:2e:1f:56:bb:1c:
97:94:26:91:50:15:04:c0:c8:50:65:fe:a8:32:9f:53:b5:84:
1c:c5:6d:f8:e9:b0:b8:72:14:34:22:61:89:8a:91:15:94:73:
05:6d:a4:4b:91:47:e6:77:68:35:70:41:1b:26:ad:b6:c4:b7:
a5:24:58:52:32:ce:82:2c:4c:d7:69:f8:24:98:2b:37:94:f1:
55:5f:7f:96:10:f8:05:2f:48:c4:1c:8e:f6:6e:1a:4d:75:29:
f2:38:b7:50:a6:28:ca:8d:f3:ce:cf:35:fd:bb:44:6d:9c:e2:
e3:7a:fb:5c:95:63:37:9a:2a:27:83:5b:43:22:a5:0c:ce:90:
a8:48:60:74:84:f8:40:b0:d6:20:ae:f4:8f:6b:df:f1:c4:aa:
1e:56:1b:5f:ac:65:4d:88:74:17:42:1f:ad:90:00:dd:1d:dd:
9c:2c:21:12:49:53:4d:4c:4c:5f:27:dd:87:55:5a:29:a9:04:
c0:3b:88:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHbUreBs+yWhxhLibWEdm2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYxMTE0MTgyOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGU3MzYwZDhhN2E1OWZlODhiMDMyMTA4ZWY0NzI1OTk0ZDZiMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGX7FgV651P1ZO/P+3AnmaOGWFoP
XnpPIx2qZ8Mg0vWcPDxR2OugtTL5OrF69bk8HhBxw8bFHmZQbPsd2VwgSEK5MFCp
iqrgCI031rO8LdqVyzTollYuRoj16ljlKntHQMghV7ayorv0ST7Gk96GoKvONJAm
yTCs3uGfMLWQ6vXjjRfBPlpFzRYBB7Azik9Akt9dSgsQ7L5bJxpx0/uAxvbJDEJu
x+yfGcA3Tlu6ZxAASn5fnyeP5Gx7ApIqvK9vaG276TXndrcTWt3eXNdxTJE7DC8V
k4tHnFNsl0ftyKns/c5mA80URTEs0KUHAkJa7hsVvPLNvr9Iu53fFkdW+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjnNg2Keln+iLAyEI70clmU1rLQMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvU09jMkRZcDZXZjZJc0RJUWp2UnlXWlRXc3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiDmMA0G
CSqGSIb3DQEBCwUAA4IBAQAWmkPHa/QWny3h4GrmBEO0BvT4y2V77Ama0lt9ZHeW
4UNRZc1b8/W6nonwk0snzV2GyWv4m9aHTW7RGHa5h10aJKcJLh9WuxyXlCaRUBUE
wMhQZf6oMp9TtYQcxW346bC4chQ0ImGJipEVlHMFbaRLkUfmd2g1cEEbJq22xLel
JFhSMs6CLEzXafgkmCs3lPFVX3+WEPgFL0jEHI72bhpNdSnyOLdQpijKjfPOzzX9
u0RtnOLjevtclWM3miong1tDIqUMzpCoSGB0hPhAsNYgrvSPa9/xxKoeVhtfrGVN
iHQXQh+tkADdHd2cLCESSVNNTExfJ92HVVopqQTAO4jv
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:18 2026 by rpki-client