Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/SBs0pq7erKsMI_Cym3SoPgFo_UY.roa
File: SBs0pq7erKsMI_Cym3SoPgFo_UY.roa (raw, json)
Hash identifier: wBaEhcrjEJ9wZNqOCKLIUGAb+Lx+kRn9j7hdDdrNNrY=
Subject key identifier: 48:1B:34:A6:AE:DE:AC:AB:0C:23:F0:B2:9B:74:A8:3E:01:68:FD:46
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F7ED631BA68F062026CE3E00FD7E8B094
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/SBs0pq7erKsMI_Cym3SoPgFo_UY.roa
Signing time: Mon 20 Jul 2026 09:23:14 +0000
ROA not before: Mon 20 Jul 2026 09:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 2a0d:d940:67::/48 maxlen: 48
2a0d:d940:2003::/48 maxlen: 48
2a0d:d940:2013::/48 maxlen: 48
2a0d:d940:3e00::/40 maxlen: 48
2a0d:d940:9014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:d6:31:ba:68:f0:62:02:6c:e3:e0:0f:d7:e8:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 20 09:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=481b34a6aedeacab0c23f0b29b74a83e0168fd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:68:51:b8:b6:33:81:bc:83:db:1c:ec:6d:
ad:40:f0:20:92:f3:4e:80:12:06:a5:66:74:a1:95:
6c:c0:56:41:ae:4e:ed:3d:cf:77:fe:e4:d5:a6:0d:
82:cf:3a:24:fe:08:5f:76:c5:0e:d3:0a:c6:10:57:
0b:79:20:bd:a0:06:c7:0e:a3:74:67:f3:9d:35:e5:
57:28:ce:ac:95:e1:ce:57:1c:0e:41:12:f7:43:25:
05:ce:c4:c9:28:26:49:4d:e9:27:1e:4a:69:71:c1:
fc:69:74:51:49:89:ff:f1:0b:e8:d9:cb:fe:51:06:
e6:65:19:72:75:51:0c:3f:59:2a:1f:00:ae:60:59:
13:f3:62:f3:9e:49:01:ad:be:43:a0:8b:cf:70:ef:
a7:a9:5f:7d:78:9f:07:1c:02:ab:15:9f:d4:68:30:
87:46:3d:c1:ba:7d:f2:7a:70:ae:17:ee:e3:c5:d5:
71:a5:0c:b3:c6:1a:ca:c8:9e:39:64:f6:b6:49:f4:
76:d7:5e:21:47:2f:85:ec:70:b1:9e:e1:9c:b6:6d:
81:54:64:dc:fc:1c:87:f3:60:9f:cb:98:c6:a1:22:
ed:9c:a7:53:f0:e0:b9:66:83:15:5a:00:08:d1:59:
35:16:5b:e8:24:54:44:d1:7b:47:92:a3:67:85:58:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1B:34:A6:AE:DE:AC:AB:0C:23:F0:B2:9B:74:A8:3E:01:68:FD:46
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/SBs0pq7erKsMI_Cym3SoPgFo_UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:67::/48
2a0d:d940:2003::/48
2a0d:d940:2013::/48
2a0d:d940:3e00::/40
2a0d:d940:9014::/48
Signature Algorithm: sha256WithRSAEncryption
d5:6a:00:74:58:3b:de:b2:24:8d:3a:a6:10:ad:71:71:af:80:
cd:df:5c:45:20:f3:d3:43:52:d6:34:41:fb:0e:b7:ed:e1:55:
ca:d0:10:ca:da:3a:8b:c0:a0:82:b4:51:1b:b4:27:22:ed:0c:
00:c5:9c:53:f0:03:d4:6a:42:1b:e9:63:94:e0:f7:88:79:39:
64:95:d5:61:38:42:9a:b4:e9:52:c1:96:a1:a3:91:8d:48:a1:
09:1e:f4:e3:f7:ab:6e:7e:d8:bb:cc:b1:97:db:95:9b:a9:6c:
38:78:66:d0:87:9b:34:b0:4b:fe:97:68:7a:a0:96:9c:30:4e:
55:80:61:8c:c8:e7:9e:1b:b9:c6:37:17:12:08:85:57:98:7b:
8b:7c:91:9e:72:7a:c1:38:fa:5d:7f:47:22:e5:2c:41:0f:58:
72:aa:62:3b:1b:dc:51:e7:fd:40:c9:d9:dd:09:a3:93:9a:6c:
99:1d:63:36:14:f8:ef:3c:5a:d5:61:ed:6b:fc:0c:1c:98:48:
01:19:c4:d6:b3:06:e8:2e:af:6a:8b:67:a5:08:4a:af:f4:7f:
32:98:dd:ef:70:9f:60:8b:14:6c:a2:25:b6:7d:e5:21:ab:ee:
ba:c8:16:0d:ad:b3:7e:b1:ee:68:8b:2a:b9:0c:05:70:6e:98:
ef:08:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:07 2026 by rpki-client