Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/sMBZ3vjGEUtM40NjdvzPcZTnf50.roa
File: sMBZ3vjGEUtM40NjdvzPcZTnf50.roa (raw, json)
Hash identifier: crm+/1m+9HQAnmFgGaM7ygbKfdqnJUcmlOnOnrROKus=
Subject key identifier: B0:C0:59:DE:F8:C6:11:4B:4C:E3:43:63:76:FC:CF:71:94:E7:7F:9D
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01A032FE15B81A69807F62DD0B89ABDE4E0C
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/sMBZ3vjGEUtM40NjdvzPcZTnf50.roa
Signing time: Mon 24 Aug 2026 08:58:27 +0000
ROA not before: Mon 24 Aug 2026 08:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 2.56.63.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.156.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
185.29.122.0/24 maxlen: 24
185.59.29.0/24 maxlen: 24
185.114.192.0/24 maxlen: 24
185.114.194.0/24 maxlen: 24
2a04:4280::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:fe:15:b8:1a:69:80:7f:62:dd:0b:89:ab:de:4e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Aug 24 08:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0c059def8c6114b4ce3436376fccf7194e77f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:4f:42:b6:79:85:7a:da:1e:3d:37:37:77:
5e:c5:48:c4:25:2e:f1:35:39:cf:54:39:4d:25:5d:
85:a1:dc:d4:a1:c9:76:d5:46:19:19:2c:f6:ac:5d:
f6:7b:0f:79:21:b9:80:c7:05:89:d2:81:b6:30:ee:
27:c0:7f:e2:3e:dd:52:48:f8:ef:c1:0e:41:c7:d9:
3b:85:4d:63:fe:61:ed:d0:9e:01:c2:e8:60:e5:d3:
29:77:dd:aa:c8:dd:51:f5:e9:27:2b:f9:c9:31:04:
6f:58:45:b6:73:57:89:b7:31:92:c3:a0:05:e3:23:
2c:13:c2:b3:28:8d:54:47:bb:23:b3:0a:0c:30:49:
39:74:ca:b6:09:b6:a1:94:aa:d9:cc:b5:e7:34:68:
93:26:75:e2:f7:8d:91:1f:fa:95:9e:d9:e6:be:23:
40:69:77:96:71:4b:de:fd:9a:ce:de:88:e1:f7:b6:
3d:89:2d:a4:29:c7:ea:7f:50:a5:66:db:db:17:ac:
41:58:bd:b2:e7:69:3b:91:5a:ce:04:a1:11:ab:25:
cc:44:d9:0b:01:5a:36:1e:3b:b7:60:bf:e4:8b:1e:
ec:0d:6b:da:4d:81:5b:5d:4b:d6:93:a8:e6:d3:a3:
d4:7c:69:f5:71:d4:3c:cf:7b:62:f2:06:99:d9:8b:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C0:59:DE:F8:C6:11:4B:4C:E3:43:63:76:FC:CF:71:94:E7:7F:9D
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/sMBZ3vjGEUtM40NjdvzPcZTnf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.63.0/24
31.210.152.0/21
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0-185.29.122.255
185.59.29.0/24
185.114.192.0/24
185.114.194.0/24
IPv6:
2a04:4280::/48
2a04:4280:100::/48
Signature Algorithm: sha256WithRSAEncryption
1f:29:34:39:14:8d:9f:44:aa:b8:ff:84:56:89:9f:b8:d0:bc:
19:61:1a:ce:00:64:ae:04:79:7c:e2:65:d1:b3:9d:dc:cd:7b:
84:97:9d:b7:04:0c:d5:f8:19:05:2f:92:1d:79:d3:4e:96:90:
1a:2c:8f:a3:72:a5:33:23:86:6c:64:43:3b:79:59:6a:34:ec:
40:dc:2e:13:f2:11:8b:68:df:05:72:8c:3a:04:ec:05:45:33:
10:f9:6c:33:d4:bb:10:62:d2:04:89:8d:8a:47:2d:b1:7f:2e:
c8:ad:82:84:bc:bf:54:e1:ce:36:72:31:9d:3d:c0:a2:49:20:
0c:fe:6c:a8:fd:51:8e:12:f5:11:92:83:46:7a:6d:6a:04:e2:
28:14:bd:48:14:25:1e:1d:25:d7:76:35:36:9d:83:49:78:24:
c3:81:01:c5:5a:ae:bd:2e:79:df:62:3e:d8:65:c0:4e:ff:e0:
38:eb:d6:e8:9c:bb:7e:1d:2f:79:94:b9:86:7d:b1:c0:3f:fb:
df:0c:c1:c3:39:59:8e:bf:23:d2:7a:ff:ee:e3:40:be:4b:99:
fe:98:76:e0:71:59:2c:1d:6a:97:4e:92:c7:4f:b2:09:a0:45:
e3:bd:cd:be:f9:84:d2:d4:02:e3:88:40:e9:ba:4c:94:f8:43:
7d:41:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:25 2026 by rpki-client