Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/sBZLHXKBmdbc_L4gzOAoly8cQPM.roa
File: sBZLHXKBmdbc_L4gzOAoly8cQPM.roa (raw, json)
Hash identifier: I+AR7y/II5oW2YCQFrlgfnsSemBFgNZUNVA0P5zmKuU=
Subject key identifier: B0:16:4B:1D:72:81:99:D6:DC:FC:BE:20:CC:E0:28:97:2F:1C:40:F3
Certificate issuer: /CN=92f77382d8154e8c994a94ba46c89eff34382a5f
Certificate serial: 019FB374FA0FB468DF4234D031D8D6CF0CDF
Authority key identifier: 92:F7:73:82:D8:15:4E:8C:99:4A:94:BA:46:C8:9E:FF:34:38:2A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/sBZLHXKBmdbc_L4gzOAoly8cQPM.roa
Signing time: Thu 30 Jul 2026 14:36:55 +0000
ROA not before: Thu 30 Jul 2026 14:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1836
IP address blocks: 185.235.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:74:fa:0f:b4:68:df:42:34:d0:31:d8:d6:cf:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f77382d8154e8c994a94ba46c89eff34382a5f
Validity
Not Before: Jul 30 14:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0164b1d728199d6dcfcbe20cce028972f1c40f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:e7:21:70:9d:34:d2:b4:5a:b2:5f:c1:3b:
1e:9d:8b:cb:85:e9:9a:f9:12:1e:97:51:d2:cc:2d:
70:fa:9d:47:07:b5:b5:9f:3e:d3:d9:ce:c7:cd:3c:
e7:0b:2c:1b:7e:8f:a8:6f:ad:bc:dc:7c:4f:74:53:
61:5b:24:8b:91:87:f2:48:de:4a:d9:df:ec:f4:62:
7b:7e:24:a8:16:11:72:ca:89:e7:4f:f7:05:45:34:
00:ba:e0:87:32:75:18:01:a9:57:ab:e4:30:45:4f:
65:f0:e2:59:8d:fb:bb:44:a1:68:9c:3d:e1:6f:7a:
2a:b7:98:8b:84:fa:cf:d7:cb:23:41:b8:af:8b:5f:
b9:ac:9e:f9:0b:22:55:77:90:96:94:52:da:67:eb:
10:dd:82:59:8b:b1:fd:c5:f2:80:f7:d1:01:42:54:
da:7b:bd:7d:0c:73:11:80:e4:5d:f8:a3:4f:49:13:
33:f9:b1:8b:b9:37:42:52:59:19:74:e0:f2:94:95:
d8:e1:29:f9:27:97:62:e4:f7:ef:63:8c:ac:bd:77:
cc:ea:36:81:6c:89:94:bd:9c:d5:47:cd:c7:3a:05:
d1:05:cd:97:3c:92:c4:86:02:c2:92:8e:2f:0b:05:
90:3d:8f:b2:e2:c4:61:22:78:1e:fb:a8:91:96:1b:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:4B:1D:72:81:99:D6:DC:FC:BE:20:CC:E0:28:97:2F:1C:40:F3
X509v3 Authority Key Identifier:
keyid:92:F7:73:82:D8:15:4E:8C:99:4A:94:BA:46:C8:9E:FF:34:38:2A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/sBZLHXKBmdbc_L4gzOAoly8cQPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:21:bd:41:1f:13:2e:79:46:63:54:42:52:86:38:4c:98:e0:
13:b5:df:af:bb:39:04:d5:09:37:e8:ee:84:bc:e2:1a:a1:45:
b4:5e:6d:82:c4:8d:41:8c:d3:ef:f2:3f:84:60:c8:89:28:83:
c6:1e:9d:5e:c6:e7:29:52:2d:5f:d2:0b:d7:0f:cd:7f:4e:fd:
81:62:ff:d1:27:df:26:43:fb:16:33:de:7c:4b:c3:7b:f3:08:
b2:e2:ec:ac:25:96:5b:a7:7a:89:8c:8e:45:fe:03:27:7d:01:
83:a8:fe:b8:7f:7f:aa:64:fd:86:37:5d:09:3e:e8:cf:b4:8a:
aa:b7:f7:38:60:e6:95:df:a5:2d:85:aa:8a:b1:b7:e1:3f:24:
19:6d:27:f0:f4:a8:94:97:40:ee:d6:0c:64:3c:5f:76:7a:54:
98:09:7e:8e:ea:5a:91:cb:5b:b2:7f:45:16:57:c9:0e:0d:b2:
ab:d9:d1:66:ed:07:77:d6:ba:56:3c:cc:61:8b:59:bf:86:d2:
b9:e5:14:43:c1:47:ef:67:52:d0:d3:c7:e6:72:58:8d:77:05:
42:77:e5:33:12:2b:d2:1b:82:e2:7f:c6:2b:6c:ac:3b:12:0b:
51:7d:70:e7:55:fe:1d:91:0e:af:1a:88:b8:ec:8d:89:94:b3:
42:13:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 02:00:59 2026 by rpki-client