Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/SbOtjeptLEex5D1CvSwE5L_Z-t4.roa
File: SbOtjeptLEex5D1CvSwE5L_Z-t4.roa (raw, json)
Hash identifier: VDleLqGnINoOvKQfnv32zeIvviZEKeUjS7CJbVIvH1g=
Subject key identifier: 49:B3:AD:8D:EA:6D:2C:47:B1:E4:3D:42:BD:2C:04:E4:BF:D9:FA:DE
Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial: 019FC6403BA9AC0EC33279235096B2F1A840
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/SbOtjeptLEex5D1CvSwE5L_Z-t4.roa
Signing time: Mon 03 Aug 2026 06:12:06 +0000
ROA not before: Mon 03 Aug 2026 06:12:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50482
IP address blocks: 92.46.0.0/15 maxlen: 24
212.13.128.0/18 maxlen: 24
212.19.128.0/19 maxlen: 24
212.19.128.0/20 maxlen: 20
212.19.134.0/24 maxlen: 24
212.19.144.0/22 maxlen: 24
212.19.149.0/24 maxlen: 24
212.19.150.0/24 maxlen: 24
212.19.159.0/24 maxlen: 24
212.154.128.0/17 maxlen: 24
212.154.128.0/19 maxlen: 19
212.154.129.0/24 maxlen: 24
212.154.137.0/24 maxlen: 24
212.154.148.0/24 maxlen: 24
212.154.160.0/20 maxlen: 20
212.154.161.0/24 maxlen: 24
212.154.164.0/24 maxlen: 24
212.154.166.0/24 maxlen: 24
212.154.167.0/24 maxlen: 24
212.154.174.0/24 maxlen: 24
212.154.176.0/23 maxlen: 23
212.154.178.0/24 maxlen: 24
212.154.188.0/22 maxlen: 22
212.154.192.0/24 maxlen: 24
212.154.193.0/24 maxlen: 24
212.154.196.0/22 maxlen: 22
212.154.200.0/22 maxlen: 22
212.154.203.0/24 maxlen: 24
212.154.204.0/23 maxlen: 23
212.154.206.0/23 maxlen: 23
212.154.208.0/21 maxlen: 24
212.154.209.0/24 maxlen: 24
212.154.211.0/24 maxlen: 24
212.154.212.0/24 maxlen: 24
212.154.216.0/24 maxlen: 24
212.154.218.0/23 maxlen: 23
212.154.221.0/24 maxlen: 24
212.154.225.0/24 maxlen: 24
212.154.228.0/23 maxlen: 23
212.154.232.0/24 maxlen: 24
212.154.233.0/24 maxlen: 24
212.154.234.0/23 maxlen: 23
212.154.236.0/22 maxlen: 22
212.154.240.0/23 maxlen: 23
212.154.243.0/24 maxlen: 24
212.154.247.0/24 maxlen: 24
212.154.248.0/22 maxlen: 22
212.154.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:40:3b:a9:ac:0e:c3:32:79:23:50:96:b2:f1:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Validity
Not Before: Aug 3 06:12:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49b3ad8dea6d2c47b1e43d42bd2c04e4bfd9fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:c2:0a:66:42:0b:5b:dc:8c:80:9c:3c:bd:
d1:83:8a:3d:d6:8c:80:46:d5:e5:a3:ac:f4:76:8b:
b6:1c:1e:b8:82:70:d3:7f:22:1e:e4:5a:9a:4d:a8:
99:61:42:32:67:07:ea:36:c0:90:25:bd:26:53:e0:
14:ab:ee:c8:df:a6:78:f0:16:59:09:ab:28:a7:e6:
bb:17:b9:f5:ac:69:ad:2d:fa:5a:62:f8:41:1f:02:
2b:f0:89:96:49:2f:00:bb:73:8a:98:c7:ff:39:10:
be:28:93:6a:4d:43:31:30:6e:ed:c3:77:b4:05:10:
fd:c1:c0:4e:3c:ab:c3:10:06:0d:8c:8c:23:6c:99:
c0:54:bf:a3:da:57:0b:3e:2b:62:c5:4f:d6:e3:0e:
03:21:37:87:f8:c6:a5:33:a6:a3:5c:c6:13:cb:f8:
05:03:ec:d2:3d:54:2a:22:f1:69:8d:b6:f7:05:9e:
13:a7:25:aa:a1:58:dd:4e:ca:75:9b:7e:ff:ec:73:
b7:61:86:36:aa:86:1d:9f:f2:14:6e:12:df:ce:00:
0f:32:cb:6f:94:a3:22:36:d5:7c:7d:4e:12:3a:30:
ce:0c:0b:8d:1b:6c:65:7d:b9:4d:14:d4:7a:f9:b8:
8e:de:3d:db:3b:2f:f5:5a:d3:6a:e6:00:4e:e1:31:
38:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B3:AD:8D:EA:6D:2C:47:B1:E4:3D:42:BD:2C:04:E4:BF:D9:FA:DE
X509v3 Authority Key Identifier:
keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/SbOtjeptLEex5D1CvSwE5L_Z-t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.46.0.0/15
212.13.128.0/18
212.19.128.0/19
212.154.128.0/17
Signature Algorithm: sha256WithRSAEncryption
18:05:35:d7:46:19:8c:da:64:32:d1:53:e2:aa:5a:e9:47:3a:
79:72:58:4a:2c:51:e7:b8:05:08:80:74:8d:b5:41:f6:a8:4d:
f3:d0:c2:3d:85:dc:ad:51:0f:d9:5d:38:d5:fd:8a:66:d8:dd:
16:48:4c:cf:7a:61:46:57:0e:37:ed:97:aa:79:4a:fc:60:c9:
77:01:c2:97:da:68:53:bb:3e:61:94:84:ea:47:16:df:af:00:
41:72:24:7a:6c:1a:be:91:fa:66:89:87:6c:5f:0d:79:a2:e3:
f1:c6:18:e1:3b:0b:ed:e5:80:b6:74:6d:44:ac:07:d6:c4:c9:
67:69:ff:6b:e4:96:ab:f4:6a:ce:17:22:75:05:01:1e:b5:58:
41:dc:64:ee:53:5c:fc:d3:ab:08:33:0f:95:21:2d:29:55:1e:
ee:f8:c5:c3:3b:2d:1f:d6:66:99:5f:d7:ec:7c:73:58:8d:4d:
ab:f9:42:57:4f:77:13:02:40:26:97:bb:9c:f5:66:fe:e3:8d:
2e:7d:cc:9b:fd:93:07:0c:20:07:b6:1b:6f:44:17:ba:f4:31:
63:fe:7a:69:b5:50:41:33:93:ff:f3:39:cc:59:20:8d:45:f5:
70:93:66:54:0b:0c:12:cc:94:69:90:11:e7:3d:3c:54:e4:7b:
0f:34:27:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ/GQDuprA7DMnkjUJay8ahAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZTQyYzU2MGZjMjI4YjViYjRmNGNmMDBlZGUyZGZlMjZj
NjYzMGIwHhcNMjYwODAzMDYxMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWIzYWQ4ZGVhNmQyYzQ3YjFlNDNkNDJiZDJjMDRlNGJmZDlmYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAHCCmZCC1vcjICcPL3Rg4o91oyA
RtXlo6z0dou2HB64gnDTfyIe5FqaTaiZYUIyZwfqNsCQJb0mU+AUq+7I36Z48BZZ
Casop+a7F7n1rGmtLfpaYvhBHwIr8ImWSS8Au3OKmMf/ORC+KJNqTUMxMG7tw3e0
BRD9wcBOPKvDEAYNjIwjbJnAVL+j2lcLPitixU/W4w4DITeH+MalM6ajXMYTy/gF
A+zSPVQqIvFpjbb3BZ4TpyWqoVjdTsp1m37/7HO3YYY2qoYdn/IUbhLfzgAPMstv
lKMiNtV8fU4SOjDODAuNG2xlfblNFNR6+biO3j3bOy/1WtNq5gBO4TE4YQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEmzrY3qbSxHseQ9Qr0sBOS/2freMB8GA1UdIwQY
MBaAFI3kLFYPwii1u09M8A7eLf4mxmMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMt
M2JmODNiN2UxN2JjLzEvU2JPdGplcHRMRWV4NUQxQ3ZTd0U1TF9aLXQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMtM2JmODNiN2UxN2Jj
LzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMBXC4DBAbU
DYADBAXUE4ADBAfUmoAwDQYJKoZIhvcNAQELBQADggEBABgFNddGGYzaZDLRU+Kq
WulHOnlyWEosUee4BQiAdI21QfaoTfPQwj2F3K1RD9ldONX9imbY3RZITM96YUZX
Djftl6p5SvxgyXcBwpfaaFO7PmGUhOpHFt+vAEFyJHpsGr6R+maJh2xfDXmi4/HG
GOE7C+3lgLZ0bUSsB9bEyWdp/2vklqv0as4XInUFAR61WEHcZO5TXPzTqwgzD5Uh
LSlVHu74xcM7LR/WZplf1+x8c1iNTav5QldPdxMCQCaXu5z1Zv7jjS59zJv9kwcM
IAe2G29EF7r0MWP+emm1UEEzk//zOcxZII1F9XCTZlQLDBLMlGmQEec9PFTkew80
J7w=
-----END CERTIFICATE-----
Generated at Wed Aug 26 06:12:03 2026 by rpki-client