Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sbz6txG16H9RAFWd_H8j6oP7xSA.roa
File: sbz6txG16H9RAFWd_H8j6oP7xSA.roa (raw, json)
Hash identifier: z7l9Dbbui5WYHbhXlb9iMv8xvM19nvrDFmynLro+jOg=
Subject key identifier: B1:BC:FA:B7:11:B5:E8:7F:51:00:55:9D:FC:7F:23:EA:83:FB:C5:20
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0D40D4C6C73EBA06ABFB2BE728CC105F1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sbz6txG16H9RAFWd_H8j6oP7xSA.roa
Signing time: Thu 24 Sep 2026 15:33:56 +0000
ROA not before: Thu 24 Sep 2026 15:33:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 151.242.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:0d:4c:6c:73:eb:a0:6a:bf:b2:be:72:8c:c1:05:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 24 15:33:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1bcfab711b5e87f5100559dfc7f23ea83fbc520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:8f:ef:4b:df:bf:76:28:4d:b4:95:fc:59:
53:1d:f1:d2:9e:5d:20:7b:73:c2:3d:61:25:44:96:
b2:24:be:f2:43:e6:b5:3c:87:16:59:23:a4:91:42:
19:de:62:ad:97:5d:c9:9e:ab:38:7d:ec:48:68:9e:
1f:9f:31:ad:98:46:47:3c:ac:75:bc:2a:f0:a4:af:
05:1f:a6:31:69:6b:b3:9d:6e:b2:35:b1:20:71:d6:
07:d9:f1:2d:ab:f0:d0:c3:c9:c9:28:72:36:03:20:
92:eb:a1:55:a1:fe:f1:6f:3d:6c:3c:ff:ab:78:13:
2b:b3:88:f4:4f:81:8a:ca:af:4c:86:38:6c:4b:f2:
3b:69:5c:37:81:fd:7e:99:ab:a9:04:dc:58:e5:76:
df:b3:46:3c:3f:07:4e:83:a3:cd:5a:b0:bb:13:2f:
45:94:45:e2:05:6b:06:7c:7c:71:d3:5a:0b:c0:b0:
29:8c:b2:a5:41:60:6a:af:b1:6b:60:2b:75:8f:6b:
ee:33:f9:af:51:d9:6e:0c:51:42:3b:52:6a:f0:ce:
b7:b4:77:86:5f:dd:73:e0:fb:de:ab:0d:fe:89:df:
a3:cc:7f:10:ce:9f:e2:bf:c4:2c:ec:73:7c:14:18:
fc:5d:30:b3:53:30:c4:75:60:69:7d:7d:cc:48:b9:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:FA:B7:11:B5:E8:7F:51:00:55:9D:FC:7F:23:EA:83:FB:C5:20
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sbz6txG16H9RAFWd_H8j6oP7xSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.237.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1e:30:07:47:7f:a4:77:22:53:22:cb:6a:0f:4b:d8:fc:9c:
36:55:85:93:79:7b:0c:79:36:49:42:f9:3d:98:01:2b:00:93:
b5:d4:e5:7a:2c:be:c3:5d:1c:c4:94:d5:cb:21:df:d1:b5:aa:
c9:f7:79:4e:07:5e:25:b9:78:79:e4:e6:8a:41:01:e3:d7:40:
80:af:34:3b:7c:24:70:c1:5b:73:8e:0a:24:d3:d1:8a:34:7b:
5a:20:40:58:2f:a1:2e:d1:f3:4f:4a:03:b4:ca:98:6f:33:21:
f9:95:a7:34:86:27:5f:d2:ac:fb:df:bd:fb:02:38:b9:d6:a5:
4a:d6:e6:db:be:7d:20:10:9d:86:e4:1c:38:2b:20:d1:fb:63:
be:27:1b:2c:66:1e:d3:14:61:7b:58:01:66:25:e0:56:23:a6:
db:32:d0:00:e4:5a:9f:d9:94:04:1a:b7:a5:32:6f:74:3a:06:
01:96:40:8e:a6:b3:37:a5:03:e1:d2:0c:dd:6a:af:a6:04:54:
73:af:12:48:f3:0d:f2:fe:cc:40:dc:4b:a0:eb:ae:5c:3d:1e:
53:6c:38:fd:87:8a:36:ab:36:92:c0:1d:85:19:d4:71:ed:42:
5a:bd:80:d0:fa:87:2b:1a:fa:87:ca:a9:8f:51:87:f5:0b:27:
19:7d:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:09 2026 by rpki-client