Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/sbqC7N_wUa4q8tipBdZquspEtdM.roa
File: sbqC7N_wUa4q8tipBdZquspEtdM.roa (raw, json)
Hash identifier: GWrWJHWfHuRJqdNaMh/zaxrPpWqKcwHZQDPdO0Af6TM=
Subject key identifier: B1:BA:82:EC:DF:F0:51:AE:2A:F2:D8:A9:05:D6:6A:BA:CA:44:B5:D3
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 01A1479253A9AC25FE7E7D1931F103AF9D87
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/sbqC7N_wUa4q8tipBdZquspEtdM.roa
Signing time: Sat 17 Oct 2026 01:55:34 +0000
ROA not before: Sat 17 Oct 2026 01:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204121
IP address blocks: 185.114.0.0/22 maxlen: 22
193.162.31.0/24 maxlen: 24
212.48.184.0/22 maxlen: 22
2a06:6cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:92:53:a9:ac:25:fe:7e:7d:19:31:f1:03:af:9d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Oct 17 01:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1ba82ecdff051ae2af2d8a905d66abaca44b5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:2f:bf:a9:c2:f3:27:fc:18:af:8d:49:12:
c5:69:0c:c8:89:72:2e:65:3e:6d:1d:55:19:5d:3d:
18:f0:bd:18:4a:84:6d:d6:8f:66:bc:1e:f9:27:31:
2a:4e:c7:0f:b8:cb:f3:d1:61:04:1b:91:c0:cf:25:
85:aa:0f:32:f9:f0:16:a0:1f:47:ea:db:25:0c:e9:
45:50:ed:7e:de:3b:5b:5c:82:01:9c:3e:31:7b:b4:
86:77:86:4d:46:c4:19:b4:75:f9:ef:e2:52:f3:e7:
ee:e2:7c:ce:e0:64:8c:8b:5e:19:98:e2:a0:1a:b8:
36:68:c1:8a:aa:d5:9c:6b:b6:98:14:e7:20:b0:66:
b2:6e:37:11:2a:27:a1:d4:7e:f0:33:d6:f8:9a:45:
c9:80:a0:19:7b:f4:2d:77:a9:73:2f:15:a4:fa:84:
2f:41:53:ea:85:f2:3d:dc:87:58:b3:f0:46:c0:b8:
84:42:15:dd:40:55:8c:57:1e:eb:8d:c7:1d:e9:da:
dc:2c:29:02:2a:0f:b2:26:9f:c0:d8:d1:11:c8:81:
59:ed:55:28:22:3e:70:1c:44:52:18:72:f3:6a:d3:
65:d5:3e:4e:31:f3:fa:71:8f:0d:27:29:9f:10:2d:
7c:c9:f7:f3:26:a6:99:9e:1c:8e:ee:d1:76:77:5b:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:82:EC:DF:F0:51:AE:2A:F2:D8:A9:05:D6:6A:BA:CA:44:B5:D3
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/sbqC7N_wUa4q8tipBdZquspEtdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.0.0/22
193.162.31.0/24
212.48.184.0/22
IPv6:
2a06:6cc0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:5e:c3:76:30:da:ca:d6:c6:fb:3d:7e:93:04:a8:01:fb:15:
52:b4:0d:48:db:ac:02:11:64:92:56:f0:0f:74:05:3e:69:a9:
e7:73:b5:2e:b1:b1:97:19:ce:45:02:d1:07:e3:99:f8:5b:be:
b6:fc:7d:84:7e:c7:59:15:5d:b9:57:a2:a9:79:a5:3f:63:61:
ee:26:cb:ea:9b:39:f2:8d:98:bd:a3:95:6e:41:3a:1c:18:5a:
2f:25:64:dc:83:3c:37:ab:ed:21:2d:e3:95:40:f1:01:e4:ef:
19:f0:b0:ab:a6:fa:12:df:0b:3d:b0:66:65:cd:a4:59:a6:14:
d3:45:ea:ce:c2:54:70:22:15:71:05:44:5d:a2:27:cc:ca:69:
6d:6d:ef:6b:c8:4a:54:7d:8f:0b:fc:28:8c:5c:8e:f6:1f:5a:
10:28:fd:44:07:27:6a:11:bf:12:50:e4:e2:db:94:85:34:df:
46:94:1d:f7:ae:bb:b1:e4:64:9b:2e:c7:73:dc:d2:c0:ae:82:
77:a7:fc:b0:97:38:ae:39:fc:96:3c:20:34:52:9b:1e:5f:3e:
fa:f0:f8:75:09:95:12:2f:12:83:44:54:98:9b:39:2d:d5:5b:
0a:be:63:e5:24:f4:aa:ad:61:2b:9b:17:ef:3b:db:20:fe:50:
fe:12:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:38:49 2026 by rpki-client