Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Sb-_qE2YunP70NKCQgd68ZthJlw.roa
File: Sb-_qE2YunP70NKCQgd68ZthJlw.roa (raw, json)
Hash identifier: 01KKfBn745GHeBBaQVBopdAOdhKl3q8/rANXUCKcJK8=
Subject key identifier: 49:BF:BF:A8:4D:98:BA:73:FB:D0:D2:82:42:07:7A:F1:9B:61:26:5C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0F3575170D48EE18F8B03FC2B8210CABF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Sb-_qE2YunP70NKCQgd68ZthJlw.roa
Signing time: Wed 30 Sep 2026 17:23:00 +0000
ROA not before: Wed 30 Sep 2026 17:23:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218789
IP address blocks: 2a06:9801:f49::/48 maxlen: 48
2a06:9801:1589::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:57:51:70:d4:8e:e1:8f:8b:03:fc:2b:82:10:ca:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 30 17:23:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49bfbfa84d98ba73fbd0d28242077af19b61265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:7e:0c:ba:f8:58:93:a1:bd:55:e4:8c:30:
cd:23:1c:9b:05:af:8d:c8:5b:d9:60:74:c7:77:79:
89:f3:fe:27:fd:65:ad:eb:37:c5:4b:50:dd:44:da:
b9:22:62:ac:6a:7d:b9:89:5a:e6:2c:13:df:40:26:
cc:29:5d:44:2b:69:10:bb:3c:68:19:32:8f:8e:df:
17:08:c0:dc:7c:e8:02:dd:81:ca:6b:8b:8d:c9:73:
ac:f7:29:db:bf:7f:b7:61:50:90:35:e1:aa:f1:32:
56:95:94:e9:95:a1:8f:a0:c9:fe:5b:4d:18:93:bf:
54:61:f9:d4:77:05:9e:3c:2f:90:c5:16:ad:2f:a7:
9d:68:21:e7:fb:ff:46:3b:f7:b4:ec:58:9c:54:17:
5f:b2:51:54:a0:50:14:46:d5:d1:e2:59:95:8a:53:
12:66:d5:53:06:64:1c:ef:9c:30:aa:f3:69:0b:04:
7d:87:89:bc:05:9e:0f:c6:8c:17:2a:d4:2e:9b:fd:
39:9c:60:5b:2e:45:2f:68:c1:a2:f3:e3:f8:dc:64:
72:a3:97:1e:52:54:80:ce:d0:c9:69:02:07:49:fb:
78:1e:88:6b:1f:f3:55:82:ea:e0:0f:4b:e6:30:38:
6e:8f:a9:fa:91:a8:71:0e:c6:47:17:38:7b:dc:5a:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:BF:A8:4D:98:BA:73:FB:D0:D2:82:42:07:7A:F1:9B:61:26:5C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Sb-_qE2YunP70NKCQgd68ZthJlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f49::/48
2a06:9801:1589::/48
Signature Algorithm: sha256WithRSAEncryption
a5:0c:63:bc:e4:15:20:de:92:25:24:dc:56:cc:5c:ec:4f:68:
9f:39:18:b7:a1:cf:8a:36:df:6b:fb:36:fc:00:8f:42:cb:d5:
f6:26:40:00:3d:16:f4:23:13:65:21:e7:94:79:45:02:7a:c0:
14:a9:b1:c5:dc:76:b5:4d:64:7d:8f:10:2f:49:ae:db:57:07:
41:80:e1:21:15:f1:2b:a6:13:c7:3d:d7:51:40:bc:0c:2c:59:
8d:5d:30:25:20:35:9f:46:fe:b3:c6:6a:55:d7:96:0f:f8:cf:
61:08:fe:0d:cf:94:34:65:89:71:6a:e6:75:4b:2a:b2:29:b2:
a8:ee:62:c9:03:0b:ad:ee:df:b1:1b:8d:3d:9a:a2:ad:62:da:
d3:e1:39:1e:52:84:ff:22:43:3b:af:d3:2e:1f:b8:c9:1c:6d:
df:67:a7:9f:ba:86:7c:6f:27:4a:54:3d:27:1f:62:ba:43:60:
ba:cb:d1:07:8a:91:65:51:49:13:b7:f0:9f:ba:f5:eb:86:49:
5a:4f:d7:22:64:31:15:32:0d:5d:8a:74:36:ed:df:2f:94:32:
3f:84:a5:76:5a:6a:0f:f7:52:5a:b4:b6:41:07:39:e3:9a:d8:
78:af:de:70:16:6b:63:e0:d3:90:1e:94:c3:95:d4:5e:ac:59:
fc:11:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:32 2026 by rpki-client