Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sb4sKhXgQVKhaO6Yu8FbDWZmDn0.roa
File: Sb4sKhXgQVKhaO6Yu8FbDWZmDn0.roa (raw, json)
Hash identifier: f56KWcWlC/Ihcr7u14kFsAsbM/ijfyefadd6Sq6Usjo=
Subject key identifier: 49:BE:2C:2A:15:E0:41:52:A1:68:EE:98:BB:C1:5B:0D:66:66:0E:7D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FFE933865E7D29C04AB7ED1DF1A153037
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sb4sKhXgQVKhaO6Yu8FbDWZmDn0.roa
Signing time: Fri 14 Aug 2026 04:41:28 +0000
ROA not before: Fri 14 Aug 2026 04:41:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 87.121.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:93:38:65:e7:d2:9c:04:ab:7e:d1:df:1a:15:30:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 14 04:41:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49be2c2a15e04152a168ee98bbc15b0d66660e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3b:88:06:4e:1c:0a:ea:43:80:e2:d5:6e:6e:
b6:18:e5:20:0f:10:33:c9:d5:6d:e3:2c:33:fd:b0:
34:95:3d:72:84:95:6d:b1:a3:6e:f5:4d:05:79:ce:
1d:b3:9c:45:bf:08:12:ec:3e:67:f7:5f:da:90:2c:
ec:34:f3:15:85:c3:2f:c0:0e:2c:a3:79:8c:53:e6:
9d:40:6e:a8:0a:2e:65:48:f8:67:6f:cf:11:59:01:
95:83:01:42:5e:c2:9b:75:a6:24:ba:2a:d6:e3:1d:
5a:56:d2:bf:d0:29:66:d1:2b:2a:2e:2f:1f:f8:a1:
97:1e:d2:72:2a:8b:69:b5:bf:e0:69:a6:69:f1:56:
89:9b:c9:21:15:68:37:f3:74:07:e6:a5:dc:c4:df:
ee:b2:f1:6c:be:37:c6:9b:23:81:62:a5:b2:33:26:
91:da:13:52:15:1d:0f:8b:1f:70:fa:20:71:2f:b0:
97:25:2a:3c:59:fa:a0:26:d4:b9:00:82:d8:c3:64:
b5:f8:62:0b:71:2d:ee:5a:23:6d:66:02:a9:2f:54:
b3:0d:81:57:a7:9c:8e:85:a3:10:62:ab:54:d5:72:
40:be:4f:18:8f:95:60:63:dc:5d:23:7f:4e:79:e5:
87:c5:13:dd:f6:23:08:df:ce:f8:dc:20:00:06:19:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BE:2C:2A:15:E0:41:52:A1:68:EE:98:BB:C1:5B:0D:66:66:0E:7D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sb4sKhXgQVKhaO6Yu8FbDWZmDn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:af:b2:3f:a1:98:45:dc:0e:0a:e9:a7:a1:d9:a0:09:da:e1:
b3:7c:73:d3:78:58:ac:07:09:c4:9f:76:3c:a0:dc:88:82:0a:
d7:06:21:4b:15:e9:65:aa:93:62:9b:71:7c:53:5f:54:5c:43:
37:cb:ec:57:5b:fa:c4:cd:40:01:d5:81:f2:c9:0a:20:16:b4:
ab:22:8f:16:af:04:50:1b:d4:85:fe:9f:9c:00:21:2d:13:02:
9f:aa:8e:84:16:1c:d9:b3:f7:85:bd:bb:aa:5a:c6:2b:01:92:
e5:ba:0f:66:da:c1:45:fa:96:b3:6e:be:23:12:c3:43:aa:40:
e7:d1:39:88:be:6d:7a:21:88:bb:ec:50:9b:1a:a5:69:89:e9:
f5:e0:36:0e:be:b8:1c:94:30:78:e9:ae:d1:88:11:5e:93:64:
42:e3:1f:69:7a:88:f2:5e:4c:07:43:4c:63:52:be:9e:88:22:
3d:fd:d4:4e:64:56:84:e1:8a:4a:b8:d1:6b:34:a3:9c:5c:25:
07:2d:ab:e8:f5:f2:95:09:e3:86:13:0a:79:2c:fb:89:79:c7:
89:87:48:2f:1b:50:65:ce:9f:05:10:5f:5f:2e:5f:59:5a:1b:
55:89:cc:51:6d:35:a6:dd:2a:26:9e:e0:13:b4:11:87:26:8e:
ab:2e:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 08:11:57 2026 by rpki-client