Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/smu-qlmjpiNuCgMs672oYEmdhAQ.roa
File: smu-qlmjpiNuCgMs672oYEmdhAQ.roa (raw, json)
Hash identifier: LF0IB7deJDYZygYf//VjP2BeOaqH3xeQGlvnygDjBiU=
Subject key identifier: B2:6B:BE:AA:59:A3:A6:23:6E:0A:03:2C:EB:BD:A8:60:49:9D:84:04
Certificate issuer: /CN=e8eb6228bb87492912ee32039e40e1d9214ad07f
Certificate serial: 01A1440AB3F1FF3C69071AD684AC407A67A8
Authority key identifier: E8:EB:62:28:BB:87:49:29:12:EE:32:03:9E:40:E1:D9:21:4A:D0:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/smu-qlmjpiNuCgMs672oYEmdhAQ.roa
Signing time: Fri 16 Oct 2026 09:28:34 +0000
ROA not before: Fri 16 Oct 2026 09:28:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202384
IP address blocks: 45.137.32.0/24 maxlen: 24
45.137.33.0/24 maxlen: 24
45.137.34.0/24 maxlen: 24
45.137.35.0/24 maxlen: 24
185.252.56.0/24 maxlen: 24
185.252.57.0/24 maxlen: 24
185.252.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:0a:b3:f1:ff:3c:69:07:1a:d6:84:ac:40:7a:67:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8eb6228bb87492912ee32039e40e1d9214ad07f
Validity
Not Before: Oct 16 09:28:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b26bbeaa59a3a6236e0a032cebbda860499d8404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:50:d3:75:e8:77:6f:2c:3c:16:80:cf:69:
ae:39:87:a8:5b:05:0a:15:eb:54:fc:98:6c:74:2f:
9e:fe:0c:80:f8:85:c3:3e:29:47:61:14:d0:2a:93:
8a:16:a9:15:e6:6b:44:cc:bb:10:88:dd:b5:f1:1e:
5f:d8:1c:b3:ff:e8:ce:87:7e:14:ca:07:8c:fa:b0:
e2:b4:4f:68:27:92:3b:b1:2e:0a:1a:dc:2d:51:67:
9f:1e:81:42:22:cb:59:37:6c:11:ae:9f:97:03:1b:
d2:ed:4a:8a:1c:23:a9:e0:51:19:60:f8:05:8f:c9:
8c:6e:7e:98:fa:10:86:4c:8b:90:4d:a4:97:c4:87:
44:cb:d9:4d:1d:2f:b9:32:6f:ec:90:4a:2f:ab:06:
f0:6b:6e:86:f0:f0:d5:20:f9:74:66:9c:67:4e:9c:
c2:f4:3b:38:c4:7a:7e:49:2b:59:78:b9:b8:7b:9f:
cf:e0:c3:d8:2b:2e:42:7e:78:ed:fa:6b:04:4a:f7:
81:4a:c5:85:a0:90:29:db:d8:f3:d4:98:ed:d1:24:
d6:c8:5e:eb:d4:c1:02:bc:63:7e:58:13:fb:c8:d3:
61:50:74:8d:c0:c5:20:3e:dc:f5:78:f6:c2:15:c9:
88:a6:2c:1d:c8:48:af:63:d4:60:24:03:18:0c:b1:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:BE:AA:59:A3:A6:23:6E:0A:03:2C:EB:BD:A8:60:49:9D:84:04
X509v3 Authority Key Identifier:
keyid:E8:EB:62:28:BB:87:49:29:12:EE:32:03:9E:40:E1:D9:21:4A:D0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/smu-qlmjpiNuCgMs672oYEmdhAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.32.0/22
185.252.56.0-185.252.58.255
Signature Algorithm: sha256WithRSAEncryption
45:e2:cd:54:c9:ac:eb:e8:07:f9:04:b3:16:ab:d0:1f:af:41:
e8:27:99:34:14:d3:99:c3:90:09:25:9d:4c:2a:a1:73:1f:40:
36:6b:99:37:e7:81:4a:d3:0a:ec:fd:31:bb:5e:77:a1:12:39:
e6:3e:bb:5f:bb:85:d3:47:54:e2:c1:6a:fe:ea:44:15:38:37:
cc:74:7d:1e:b5:95:4d:11:fa:58:e4:eb:f8:6c:16:d2:31:e1:
43:1e:47:d1:29:d4:de:22:f0:41:76:55:27:48:c7:28:73:fe:
e4:19:e3:43:84:20:fc:4d:f2:3e:81:44:6c:3b:2d:68:eb:5b:
8a:63:d8:9c:5b:0e:9f:86:09:c9:1c:d5:d2:b5:06:1c:6a:3a:
47:68:f3:3e:99:23:2e:c4:3f:9f:7e:e0:04:a5:88:d2:99:62:
fe:88:87:35:25:58:f7:a5:b1:4d:1c:38:36:99:da:ec:3d:9c:
e3:49:0d:fb:1b:87:f7:f3:21:00:40:b5:bb:1c:85:0a:10:51:
d5:14:d9:b0:96:f9:0b:05:70:fa:e5:84:75:67:6c:e7:c4:f2:
64:c5:19:49:19:fe:18:ea:35:81:07:8d:02:18:12:4f:c5:45:
dd:96:13:c1:41:aa:98:3c:d3:c0:e4:aa:55:d7:d2:84:5a:cb:
e3:64:69:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:26 2026 by rpki-client