Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/sOFTeRO-hEvEz03XddSu9rS_z4k.roa
File: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (raw, json)
Hash identifier: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=
Subject key identifier: B0:E1:53:79:13:BE:84:4B:C4:CF:4D:D7:75:D4:AE:F6:B4:BF:CF:89
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019CF1D675A0D1CFFD0BFD535B3FE08E3E0A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/sOFTeRO-hEvEz03XddSu9rS_z4k.roa
Signing time: Sun 15 Mar 2026 14:11:29 +0000
ROA not before: Sun 15 Mar 2026 14:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 194.152.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:d6:75:a0:d1:cf:fd:0b:fd:53:5b:3f:e0:8e:3e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Mar 15 14:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0e1537913be844bc4cf4dd775d4aef6b4bfcf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:1b:49:d5:72:a4:be:bc:37:d8:b8:79:0a:
ef:a5:dc:70:d2:3a:95:2b:23:0f:cf:9c:b0:25:36:
d7:59:fc:8f:45:90:ab:9c:cd:76:3b:c9:62:88:b7:
e6:8c:e4:0d:c2:99:10:54:4f:ea:ce:14:34:d0:63:
04:1b:c1:05:93:6f:63:3d:51:c0:05:4d:05:d8:8f:
81:e5:8e:72:5f:15:63:86:e1:ec:3f:ba:cc:a5:cb:
dc:35:0d:5a:4a:f1:f4:f6:3a:c6:af:30:0a:f6:e1:
45:75:6b:c2:03:bf:32:a1:3a:40:4b:d6:cd:29:70:
df:d6:30:f8:b6:97:d3:be:5a:46:7d:10:fd:d9:8e:
2f:68:14:60:97:03:aa:f0:5d:bb:a0:5b:cc:87:92:
33:7e:e2:db:c0:83:4f:9e:4e:b8:d4:28:58:54:f6:
20:a4:44:c4:0c:2d:42:24:46:27:1f:d3:45:43:e7:
70:e2:68:92:ce:4b:2a:1f:68:c5:9c:8e:b9:a9:05:
a5:dd:2e:6b:5a:19:5c:3a:50:75:7f:40:94:08:92:
07:2b:db:a9:ec:bb:f4:03:73:46:fc:13:fc:4b:62:
0a:24:f5:b9:a0:1c:3c:18:ed:70:9b:07:50:ce:82:
ae:fc:c8:62:8e:4f:78:1e:6b:33:7a:1f:17:b4:0c:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:53:79:13:BE:84:4B:C4:CF:4D:D7:75:D4:AE:F6:B4:BF:CF:89
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/sOFTeRO-hEvEz03XddSu9rS_z4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.133.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:1e:56:e5:b0:8a:de:48:71:65:e4:b6:89:ff:d7:cb:7e:f7:
17:3d:f5:95:af:1b:61:00:ff:79:f6:cd:1e:f0:e1:ed:0a:b5:
fb:85:23:4d:ea:50:b2:3b:b4:a1:00:bb:c8:99:2c:9c:2b:52:
65:e8:5b:e8:ed:f6:42:35:ea:50:ad:01:4a:06:f9:11:a6:43:
6c:16:61:c7:06:70:eb:13:4f:64:6e:b7:3f:cb:e0:fb:f0:7d:
a0:75:79:4e:d8:59:89:96:9e:d6:91:97:5e:0c:a4:ad:b0:36:
ad:fa:06:6c:ea:5b:65:40:c2:0f:fa:dd:e5:96:21:83:74:49:
30:22:50:4b:82:f0:74:f6:cb:b1:2b:ad:34:58:78:a9:a5:db:
a1:ab:e7:7c:2d:44:90:6a:bd:b2:88:25:4a:15:d1:e7:0c:6d:
b5:a6:53:ba:c2:3e:97:fb:8a:2c:4c:e0:97:58:5a:7e:4c:4f:
24:b4:f0:51:61:bb:c3:0b:6e:55:8b:c8:cd:42:12:a3:b6:9f:
80:62:42:06:58:10:8f:23:71:5d:d5:b2:e9:be:8f:fc:49:09:
a9:d6:4e:81:61:7e:9c:a8:ee:32:3d:cb:07:86:e3:df:a6:10:
3e:dc:fb:24:f9:a3:f3:d2:70:3b:f9:4d:a1:4a:53:e6:4e:8b:
81:e7:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:08 2026 by rpki-client