Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/SbIASCd3StBO-ufpyDVbe78glYM.roa
File: SbIASCd3StBO-ufpyDVbe78glYM.roa (raw, json)
Hash identifier: CWu1oVtKLMUuy165qdHGtMBYUpsbOHNV0M+LG4mxujM=
Subject key identifier: 49:B2:00:48:27:77:4A:D0:4E:FA:E7:E9:C8:35:5B:7B:BF:20:95:83
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A03D0F4C02D589ABC401C7371E940E1F66
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/SbIASCd3StBO-ufpyDVbe78glYM.roa
Signing time: Wed 26 Aug 2026 07:53:27 +0000
ROA not before: Wed 26 Aug 2026 07:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 132.243.64.0/24 maxlen: 24
212.87.188.0/24 maxlen: 24
212.87.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:0f:4c:02:d5:89:ab:c4:01:c7:37:1e:94:0e:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 26 07:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49b2004827774ad04efae7e9c8355b7bbf209583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:0a:88:7a:89:49:88:03:05:49:98:44:ce:
8f:6f:cf:1e:42:96:70:d2:cd:f8:b0:c0:45:a7:bc:
41:8a:3b:9a:a3:7c:a9:a2:1d:4e:68:a9:f3:21:5d:
49:7a:d1:fd:3b:34:26:fc:2d:d6:2a:e9:ae:ab:dd:
a8:a9:b7:a9:c0:9f:0e:b5:6e:96:02:e3:bc:50:33:
ce:fd:8c:da:30:e9:7b:00:2e:ea:0a:ea:34:a5:7a:
0d:de:04:68:3c:10:5e:5f:84:f1:80:f8:61:53:28:
9a:98:43:96:61:9e:ad:ba:fc:4a:74:27:3c:62:39:
f4:aa:5b:dc:39:f7:89:39:9b:26:bb:19:f1:62:84:
4d:23:15:d7:f2:10:4e:9f:af:90:ff:e0:44:e8:2a:
44:ef:7b:49:bf:a8:5d:43:21:0e:32:40:54:a8:87:
00:ae:29:7f:e1:75:3b:29:df:2e:5a:e6:29:88:8b:
77:a7:ac:a3:15:6e:c0:84:8d:42:9b:60:3e:77:46:
a9:91:85:68:82:33:0b:d6:d0:fb:52:c3:81:f3:da:
78:a7:07:f6:6c:30:3f:6d:19:18:4b:61:28:96:8a:
93:a0:32:57:89:0a:68:db:71:4d:64:d3:7a:03:18:
43:09:dc:c3:a1:80:da:a8:2b:02:47:61:ee:27:f6:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:00:48:27:77:4A:D0:4E:FA:E7:E9:C8:35:5B:7B:BF:20:95:83
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/SbIASCd3StBO-ufpyDVbe78glYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.64.0/24
212.87.188.0/23
Signature Algorithm: sha256WithRSAEncryption
97:a6:12:1f:3e:24:83:bb:1f:51:89:dc:41:f4:69:40:e3:9f:
da:32:a8:48:be:05:3a:92:4b:f0:fb:d8:55:f2:ee:05:a7:0d:
73:0b:fc:b9:f6:ef:9e:b8:86:9e:cc:4c:63:45:c1:69:52:05:
6f:bf:a5:3b:9b:89:c9:9a:08:94:b2:d2:28:4a:2a:e0:dd:07:
fc:b6:15:a8:3a:b0:49:09:da:9b:b6:b2:25:65:c9:69:29:15:
39:a6:85:53:6c:b2:72:e3:da:b5:a9:85:ae:e8:b7:fe:e3:41:
03:22:fc:8b:2e:8c:c0:1f:89:35:0a:93:68:5d:91:08:08:7f:
fe:73:9f:1e:dc:3a:50:44:42:9e:85:11:22:89:75:b1:c1:35:
0a:d5:16:f0:46:77:fe:3c:b4:64:da:bb:af:e8:2e:20:60:66:
d4:79:35:a1:55:73:b1:40:84:99:51:e0:0e:7e:7f:36:fa:1f:
33:34:86:79:64:a9:65:b4:fd:73:fe:b6:81:47:99:9f:10:58:
a9:ac:fa:f3:7b:72:3c:95:0a:4e:ac:a3:c3:d0:e7:4d:a1:17:
25:80:62:30:6e:76:65:ea:fc:7c:ff:b9:81:ff:0b:56:b7:18:
5b:99:1a:ec:02:68:2e:21:86:0e:9f:9a:54:94:c4:5f:80:c6:
f7:ae:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:31 2026 by rpki-client