Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/SbOTDMQ2VNb-37WEXepwsuwWPxc.roa
File: SbOTDMQ2VNb-37WEXepwsuwWPxc.roa (raw, json)
Hash identifier: hENxaWOPFxGNIQbmljjeVjoOSxx52ihXBKGb9BCJkvQ=
Subject key identifier: 49:B3:93:0C:C4:36:54:D6:FE:DF:B5:84:5D:EA:70:B2:EC:16:3F:17
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01A0E7B06E611666C0A41CAB15E7BDB22EFE
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/SbOTDMQ2VNb-37WEXepwsuwWPxc.roa
Signing time: Mon 28 Sep 2026 11:04:54 +0000
ROA not before: Mon 28 Sep 2026 11:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:b0:6e:61:16:66:c0:a4:1c:ab:15:e7:bd:b2:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Sep 28 11:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49b3930cc43654d6fedfb5845dea70b2ec163f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:c9:e1:d2:0b:56:07:63:a6:7b:7e:28:99:
a8:99:53:21:62:f5:92:75:74:07:39:73:eb:75:cc:
f9:84:24:5b:af:ce:a5:48:31:52:49:e4:52:5a:1d:
63:62:66:3c:4c:db:d8:ab:9c:d4:1f:f9:d2:da:6c:
5d:f7:2d:01:9e:50:36:67:bf:d2:ec:3e:bd:b7:c8:
2a:80:31:4b:df:b4:52:79:e8:d4:e2:a4:8d:6a:ae:
7a:36:ce:7c:d8:7d:0d:e9:dc:ac:81:a2:91:1e:94:
57:6a:f6:ae:89:c3:cf:72:58:11:ca:e8:79:5e:a9:
9c:63:7d:39:27:bf:07:1e:8f:f5:4f:a3:e0:01:39:
49:8b:a8:97:62:2b:a8:3b:9a:43:a0:6b:50:d7:59:
76:42:b8:e9:ad:41:77:5a:ee:11:fb:b1:b4:04:41:
5e:ba:8d:e7:b5:0a:da:df:a1:b9:9b:20:a7:dc:83:
cd:80:22:b5:31:a2:b2:cf:f7:d1:85:56:95:26:0c:
2c:fe:c6:dc:56:e7:3f:2f:ab:26:6c:0a:1c:df:31:
96:53:47:eb:d8:e0:40:f0:cb:9b:cb:81:fc:23:1b:
6b:1a:d5:6c:8a:9a:94:6f:3d:91:58:f0:10:8c:2c:
a1:ad:82:41:66:5a:ca:33:bd:05:ef:6e:95:bb:09:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B3:93:0C:C4:36:54:D6:FE:DF:B5:84:5D:EA:70:B2:EC:16:3F:17
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/SbOTDMQ2VNb-37WEXepwsuwWPxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e2:7e:37:e9:73:67:be:39:30:c6:bf:0a:17:7d:e6:eb:97:
e0:b1:c7:bf:26:ac:27:75:08:6c:e7:af:be:d0:e6:aa:4f:3c:
07:25:5a:74:19:6b:63:80:a8:18:b6:0c:c1:9d:a7:a7:5a:81:
8d:87:a4:00:a7:bd:d3:db:59:16:2f:2b:f3:d9:38:8d:eb:4a:
b8:18:5e:a1:73:ae:04:d6:67:39:a4:df:77:c8:a7:07:77:7e:
6f:8e:f7:04:4a:b3:b7:12:57:bf:c7:2e:42:ad:89:9f:ea:1a:
21:37:2f:2c:49:73:12:ff:d5:80:55:1c:77:30:f0:97:e5:03:
4c:61:d7:55:5a:f6:46:1d:3b:62:dd:4a:85:c5:dc:16:7d:2f:
57:73:d4:04:f4:fc:0d:ad:f7:28:94:ef:e6:84:74:10:59:50:
69:26:30:7f:d2:50:59:82:21:0d:da:7c:84:09:34:be:db:a7:
ba:ea:df:0c:95:10:21:4b:3a:61:14:3b:98:ba:0e:cc:f3:68:
01:dd:f1:a0:e4:76:c3:2b:96:9c:18:0e:13:70:0c:37:5e:7a:
19:95:04:37:67:52:12:df:50:cc:66:84:c7:bb:f3:a2:73:27:
7e:ef:3a:64:f2:a8:90:7c:6d:89:b5:2d:34:e2:e8:bc:25:71:
30:65:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:39 2026 by rpki-client