Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sgonmc-YLuAb6aV7Ef9jZGnmJ70.roa
File: sgonmc-YLuAb6aV7Ef9jZGnmJ70.roa (raw, json)
Hash identifier: WxROpRJLWFmaexnrpaLemn1G6GdhaSFHmBpOmcfT52o=
Subject key identifier: B2:0A:27:99:CF:98:2E:E0:1B:E9:A5:7B:11:FF:63:64:69:E6:27:BD
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EFA47929ABF37916BDB975C85282C833F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sgonmc-YLuAb6aV7Ef9jZGnmJ70.roa
Signing time: Wed 24 Jun 2026 15:37:35 +0000
ROA not before: Wed 24 Jun 2026 15:37:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133674
IP address blocks: 201.24.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:47:92:9a:bf:37:91:6b:db:97:5c:85:28:2c:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 24 15:37:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b20a2799cf982ee01be9a57b11ff636469e627bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:d5:bc:e7:95:af:5e:25:b7:cc:82:2d:30:
f1:0b:07:3c:78:77:3c:7a:33:26:8b:62:d6:ea:d4:
e7:31:a0:e1:66:1d:f8:05:8b:d9:1a:59:e9:f4:a7:
71:2f:14:eb:fd:9e:e8:5f:fb:a5:2b:ba:88:dc:c1:
ea:d6:f6:20:cc:b2:38:b0:05:50:fb:93:f7:1f:ea:
cc:52:fa:b7:2a:47:59:6a:46:58:5a:92:c3:18:2a:
43:e9:c8:d6:d8:8e:10:2b:37:6a:14:cb:30:74:75:
d7:ee:83:f2:ea:e7:21:17:c3:a9:b9:c0:f5:df:98:
81:c2:15:43:dc:ff:da:96:f5:17:30:47:3c:7f:30:
fa:1b:f7:fb:51:c7:90:7b:ed:8e:26:ff:55:d7:67:
93:0e:5a:2a:9a:3f:1f:58:b8:ec:44:10:e7:64:88:
16:aa:59:b3:51:45:48:5c:82:03:a3:2b:17:8b:34:
0f:8d:af:9d:8c:f5:f4:d6:23:f9:84:76:9c:0b:70:
b0:2f:11:c4:ea:31:fb:88:f2:ad:36:d0:43:99:b8:
77:cf:79:3e:d2:56:34:45:0a:cb:00:15:f1:e9:42:
e4:47:48:76:41:2b:4b:68:cb:d2:8d:63:9c:ba:dd:
83:66:4d:a4:2d:cc:ef:dd:cf:91:91:fe:cd:31:45:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:27:99:CF:98:2E:E0:1B:E9:A5:7B:11:FF:63:64:69:E6:27:BD
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sgonmc-YLuAb6aV7Ef9jZGnmJ70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.24.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:79:2a:59:a3:f0:2f:2d:07:13:d3:1e:d9:6c:1f:9e:cd:2c:
17:a6:b6:ad:1b:2b:95:ee:39:29:26:c5:e8:55:d4:7d:a5:74:
cd:cc:3e:78:38:99:5a:86:8d:ee:1d:32:1a:c4:cb:08:a3:ff:
ca:96:65:a6:2c:55:8a:39:84:f4:20:ee:dc:4b:f6:3e:f4:51:
b9:26:79:fb:08:7f:38:b3:60:13:65:5d:e9:43:0b:17:54:d2:
e4:e6:54:0c:dd:ca:ff:22:c1:d0:4f:6a:46:03:ae:32:f0:40:
0a:a4:e1:c5:2a:25:24:db:7e:66:aa:3c:9a:d6:f6:08:b9:df:
c3:36:b6:38:1a:f8:c0:95:75:b4:05:88:1b:f1:fe:db:b3:d3:
01:c1:be:c6:a9:86:f7:05:92:c8:c7:a9:19:01:01:f6:fa:17:
2e:7b:d6:b6:81:9f:61:b4:f1:a3:60:34:11:0b:03:3a:4c:19:
88:64:a4:9d:03:3b:39:be:6e:1a:62:ec:4e:4f:3a:c1:54:67:
c6:41:ea:a7:8a:f4:3a:d0:43:66:a2:79:df:9f:dc:4e:62:59:
81:cd:76:02:12:5f:49:0a:b7:ce:9f:e1:5a:85:fa:01:1d:50:
72:61:0a:4a:6b:fe:ae:14:a6:e9:9f:e9:11:31:95:4e:5e:98:
ad:5a:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:33 2026 by rpki-client