Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/SLbomanQ3-fIQUZVXrXhD7YErbE.roa
File: SLbomanQ3-fIQUZVXrXhD7YErbE.roa (raw, json)
Hash identifier: QUG83pZHkv5z2TWCKaHbPmMugaiEFODeHY4PaYFDlLk=
Subject key identifier: 48:B6:E8:99:A9:D0:DF:E7:C8:41:46:55:5E:B5:E1:0F:B6:04:AD:B1
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A07B3FB6467B7230D5D2D993FCAB1D377C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/SLbomanQ3-fIQUZVXrXhD7YErbE.roa
Signing time: Mon 07 Sep 2026 09:42:48 +0000
ROA not before: Mon 07 Sep 2026 09:42:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 83.98.195.0/24 maxlen: 24
83.98.197.0/24 maxlen: 24
85.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:3f:b6:46:7b:72:30:d5:d2:d9:93:fc:ab:1d:37:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 7 09:42:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48b6e899a9d0dfe7c84146555eb5e10fb604adb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:5d:d5:b5:32:a6:ce:f0:67:7a:40:e0:a9:
dd:57:43:4f:59:1c:62:a3:60:bb:0a:9b:a1:9b:fb:
37:20:e6:d7:e3:17:ff:2a:18:e6:1f:8b:dd:45:7f:
95:e5:f0:98:33:b7:08:e1:89:4d:82:d1:a7:07:ad:
91:4e:01:4d:99:4e:26:b2:04:a8:4b:3f:7a:aa:8d:
6b:10:35:d6:ae:a9:24:7c:59:ed:4b:0c:6b:57:68:
39:71:03:1a:3a:fb:f2:eb:c7:63:05:82:83:d9:e1:
01:83:d1:8f:a1:a5:91:d2:fd:99:68:ae:55:ce:92:
2e:b0:ed:82:7f:ac:9d:b3:3b:eb:13:0c:66:e7:e9:
1e:b0:79:03:ab:82:24:77:ae:49:8d:83:c9:b6:2f:
08:49:0a:0d:83:33:6f:3c:07:e5:2e:c7:6a:a4:53:
28:64:c8:cc:16:22:5b:b7:29:c1:98:17:b3:b1:79:
2a:c8:b3:d1:20:8c:a8:fa:e6:e0:76:0d:d2:02:ca:
56:e5:43:cd:3a:8d:01:84:2f:d8:24:bb:0d:e4:80:
21:73:01:b6:f6:29:e8:c2:33:e7:24:27:13:5e:1c:
ca:ac:a6:cb:89:9e:a1:a3:3d:16:21:db:44:df:70:
82:98:51:09:52:8d:9b:c8:29:9e:e2:5d:6c:e5:a4:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B6:E8:99:A9:D0:DF:E7:C8:41:46:55:5E:B5:E1:0F:B6:04:AD:B1
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/SLbomanQ3-fIQUZVXrXhD7YErbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.195.0/24
83.98.197.0/24
85.222.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ae:29:a5:52:dc:7d:bc:4c:7c:da:7e:d8:2d:bb:96:b6:76:
38:aa:d9:b5:d8:f0:ab:57:0a:76:19:4f:54:82:9e:c8:9f:69:
31:15:72:1b:a2:b9:fd:6c:92:d0:3f:98:3e:60:88:c5:67:8d:
a1:68:23:56:6c:dd:e8:ba:68:38:81:b9:7d:87:9b:6e:e4:62:
2a:ba:e9:6e:35:b0:3e:4e:d3:69:19:7e:8a:3b:52:4a:e3:49:
b1:06:47:6b:76:2e:a4:31:c8:81:b6:7b:37:dc:46:f1:9a:da:
ed:c2:bf:ba:71:b8:10:e0:10:ec:58:f5:d7:8e:dc:3d:a4:11:
f3:7b:c4:76:73:9e:e5:83:96:37:2b:f2:94:34:d5:90:90:61:
93:dd:17:76:2a:88:1e:36:b4:2d:27:04:77:81:b9:57:d7:f5:
23:0b:c5:c1:8d:16:0d:b6:ab:bd:e1:74:ef:39:09:70:75:85:
63:26:0a:2d:20:28:d4:ed:fa:7a:7f:9e:35:1e:cb:52:01:eb:
c7:37:1a:12:65:c4:8d:ca:de:b8:67:4a:02:e2:79:3b:31:ec:
d5:ca:53:53:cd:97:db:00:47:26:0a:9e:63:5f:bd:50:75:f6:
6e:37:5c:83:99:5b:a1:a7:96:73:c8:10:3e:b0:31:92:f1:76:
d8:57:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:57:11 2026 by rpki-client