Route Origin Authorization
$ rpki-client -vvf 0.sb/repo/sb/1/37382e33312e3231312e302f32342d3234203d3e2038383838.roa
File: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: ZH2MPK5Y9NbC6Hw/nhbwrWxKOmqdg9sEArKo5dngpp8=
Subject key identifier: 97:89:B0:F3:76:36:12:FA:90:30:C7:8E:5B:9E:0C:F2:BD:FC:92:1E
Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial: 5712785E31BBD23DD94CD45391DD890A3C512A3A
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access: rsync://0.sb/repo/sb/1/37382e33312e3231312e302f32342d3234203d3e2038383838.roa
Signing time: Wed 29 Oct 2025 14:53:13 +0000
ROA not before: Wed 29 Oct 2025 14:48:13 +0000
ROA not after: Wed 28 Oct 2026 14:53:13 +0000
asID: 8888
IP address blocks: 78.31.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:12:78:5e:31:bb:d2:3d:d9:4c:d4:53:91:dd:89:0a:3c:51:2a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
Validity
Not Before: Oct 29 14:48:13 2025 GMT
Not After : Oct 28 14:53:13 2026 GMT
Subject: CN=9789B0F3763612FA9030C78E5B9E0CF2BDFC921E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:62:19:6e:7d:db:97:65:3a:c9:7a:e2:c8:
01:5d:95:6d:f9:0a:42:c0:2c:87:7e:2b:fd:17:8d:
d1:c1:06:59:c6:f2:91:28:13:66:93:31:cd:1a:56:
fc:8e:69:9a:cc:e0:ff:42:26:ad:2f:33:e1:9b:e6:
31:3d:dd:85:e6:3f:44:88:67:7c:f5:72:df:c3:51:
eb:e5:48:44:d6:70:a8:07:dc:4e:4b:b1:d8:a9:56:
30:fb:64:7f:f2:46:9f:2b:4d:99:ab:c5:5b:8c:6c:
f9:68:f8:4c:c2:22:38:a7:e6:ae:8f:f4:fc:4b:e1:
88:df:3c:ec:d4:6f:1c:64:03:f5:e8:a8:b6:2f:d6:
99:c1:a0:34:5e:f5:9c:21:1f:eb:a9:3a:0e:eb:44:
dd:e3:cb:e6:a1:79:98:7e:80:23:bc:d5:27:5c:6d:
ed:d3:c0:8a:76:2b:3f:99:12:b1:07:9f:49:62:d5:
56:d8:e2:f5:8b:7f:84:ea:54:93:81:fe:ec:9e:de:
e2:5b:35:64:4e:09:1d:b2:a7:5e:6c:d0:26:65:43:
5b:22:5c:e2:e5:bc:43:54:e4:3b:b0:fb:92:9b:41:
ca:e8:92:f7:ef:26:ad:3f:e5:6f:48:5a:8c:0c:d0:
75:23:d1:1e:df:56:7b:91:d5:69:6b:7f:c7:5c:a9:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:89:B0:F3:76:36:12:FA:90:30:C7:8E:5B:9E:0C:F2:BD:FC:92:1E
X509v3 Authority Key Identifier:
keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/1/37382e33312e3231312e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.211.0/24
Signature Algorithm: sha256WithRSAEncryption
29:12:cd:0d:84:2a:d1:13:fe:56:f0:f6:fe:42:95:d0:e7:77:
67:a1:d3:2f:c4:30:dd:44:57:70:aa:55:f8:2f:58:48:f5:eb:
95:11:bd:b6:fb:db:98:99:60:19:e6:dd:eb:b9:e9:32:30:04:
1a:20:7d:60:cd:cc:e9:53:4f:d3:06:b0:21:8c:97:31:f9:9a:
04:bf:4b:26:b2:61:29:6c:31:7b:be:96:68:bf:d1:26:ad:bb:
00:34:e6:69:7c:1e:81:53:cb:ef:0f:e5:1d:1c:91:05:1e:5d:
76:c5:59:4a:ed:a9:fd:70:9b:3a:aa:cb:7b:3f:a0:aa:de:5a:
0d:b5:13:51:1a:d3:ff:1b:a1:53:41:e1:a0:ba:7b:90:b2:06:
ab:27:bd:3a:50:58:47:f9:79:49:f9:3e:10:72:cd:90:5c:5d:
93:13:15:04:80:11:e5:1b:fd:ca:80:b7:5e:7c:b3:a0:88:86:
79:32:47:99:dd:f2:12:d3:cf:6b:77:8d:12:31:a0:62:0d:82:
15:d7:fe:bd:38:0d:a7:da:8f:5f:16:5b:ff:22:3d:d3:6b:17:
b2:68:0e:cb:aa:55:59:49:f0:39:da:f5:3c:c1:47:04:9f:93:
4d:67:e1:11:31:7e:27:23:60:2c:01:9f:c4:52:96:9b:8a:ed:
65:45:40:40
-----BEGIN CERTIFICATE-----
MIIErDCCA5SgAwIBAgIUVxJ4XjG70j3ZTNRTkd2JCjxRKjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE3YjA4ODkyMmQwZjMzZmVjYTE2NGUwODU1NGVjOTky
ZGFhMzljNTAeFw0yNTEwMjkxNDQ4MTNaFw0yNjEwMjgxNDUzMTNaMDMxMTAvBgNV
BAMTKDk3ODlCMEYzNzYzNjEyRkE5MDMwQzc4RTVCOUUwQ0YyQkRGQzkyMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoe2IZbn3bl2U6yXriyAFdlW35
CkLALId+K/0XjdHBBlnG8pEoE2aTMc0aVvyOaZrM4P9CJq0vM+Gb5jE93YXmP0SI
Z3z1ct/DUevlSETWcKgH3E5LsdipVjD7ZH/yRp8rTZmrxVuMbPlo+EzCIjin5q6P
9PxL4YjfPOzUbxxkA/XoqLYv1pnBoDRe9ZwhH+upOg7rRN3jy+aheZh+gCO81Sdc
be3TwIp2Kz+ZErEHn0li1VbY4vWLf4TqVJOB/uye3uJbNWROCR2yp15s0CZlQ1si
XOLlvENU5Duw+5KbQcrokvfvJq0/5W9IWowM0HUj0R7fVnuR1Wlrf8dcqbWlAgMB
AAGjggG2MIIBsjAdBgNVHQ4EFgQUl4mw83Y2EvqQMMeOW54M8r38kh4wHwYDVR0j
BBgwFoAUkXsIiSLQ8z/soWTghVTsmS2qOcUwDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzEvOTE3QjA4ODkyMkQw
RjMzRkVDQTE2NEUwODU1NEVDOTkyREFBMzlDNS5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2tYc0lpU0xROHpfc29XVGdoVlRzbVMycU9jVS5jZXIwaQYIKwYBBQUH
AQsEXTBbMFkGCCsGAQUFBzALhk1yc3luYzovLzAuc2IvcmVwby9zYi8xLzM3Mzgy
ZTMzMzEyZTMyMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQATh/TMA0GCSqGSIb3DQEBCwUAA4IBAQApEs0NhCrRE/5W8Pb+QpXQ
53dnodMvxDDdRFdwqlX4L1hI9euVEb22+9uYmWAZ5t3ruekyMAQaIH1gzczpU0/T
BrAhjJcx+ZoEv0smsmEpbDF7vpZov9EmrbsANOZpfB6BU8vvD+UdHJEFHl12xVlK
7an9cJs6qst7P6Cq3loNtRNRGtP/G6FTQeGgunuQsgarJ706UFhH+XlJ+T4Qcs2Q
XF2TExUEgBHlG/3KgLdefLOgiIZ5MkeZ3fIS089rd40SMaBiDYIV1/69OA2n2o9f
Flv/Ij3TaxeyaA7LqlVZSfA52vU8wUcEn5NNZ+ERMX4nI2AsAZ/EUpabiu1lRUBA
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:34 2025 by rpki-client