Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sbmGU3T-4Czth4o6cEEyvsZcSnE.roa
File: sbmGU3T-4Czth4o6cEEyvsZcSnE.roa (raw, json)
Hash identifier: AaslDVsIer7xvCShbYVj8C5ZrjKSF5mXBZCwdufw0Cs=
Subject key identifier: B1:B9:86:53:74:FE:E0:2C:ED:87:8A:3A:70:41:32:BE:C6:5C:4A:71
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A08FDAAB552A282EA23ADD81986A2E4F73
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sbmGU3T-4Czth4o6cEEyvsZcSnE.roa
Signing time: Fri 11 Sep 2026 09:44:27 +0000
ROA not before: Fri 11 Sep 2026 09:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 195.58.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:da:ab:55:2a:28:2e:a2:3a:dd:81:98:6a:2e:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 11 09:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1b9865374fee02ced878a3a704132bec65c4a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:57:c2:f0:e5:1d:d2:7e:01:8d:fd:3e:e7:
b8:d1:5f:e5:d2:1c:21:23:97:7d:4d:4f:39:88:6a:
72:72:db:61:aa:6f:60:0a:7e:39:c0:56:6c:89:e2:
f8:57:e8:76:3f:4a:b6:77:5f:10:72:95:8e:de:38:
60:34:75:86:3f:59:2a:4d:cc:02:c7:6c:29:a9:74:
e1:46:3c:97:96:70:dd:b9:b8:0f:b3:a2:26:b1:4c:
b2:bc:ca:d7:8a:4b:8f:a0:da:97:a4:83:6c:be:de:
39:5f:2f:e2:10:78:9c:4f:f7:38:f6:64:dd:14:84:
0b:af:ea:f7:97:1b:85:b9:06:f3:c4:c0:63:99:20:
54:c4:04:31:54:89:a2:99:2a:0e:21:87:4e:35:3b:
1f:0e:42:e1:6d:f5:99:ba:f5:58:c5:ef:31:fd:83:
67:d6:fa:c0:db:fc:98:73:8a:c0:da:08:af:89:8f:
35:af:7b:3b:5c:36:f5:ca:47:8d:6c:66:10:58:d6:
20:9b:3a:9d:53:14:ca:44:66:99:f2:d1:f4:ca:26:
35:11:23:3b:f5:e6:4a:94:25:8c:41:a2:43:ef:15:
7a:72:09:8d:ad:d0:8a:a8:f9:c2:42:a6:87:7e:8b:
57:51:eb:0c:e1:f9:1f:94:e6:94:68:ff:f9:17:d7:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:86:53:74:FE:E0:2C:ED:87:8A:3A:70:41:32:BE:C6:5C:4A:71
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sbmGU3T-4Czth4o6cEEyvsZcSnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.45.0/24
Signature Algorithm: sha256WithRSAEncryption
17:03:f0:a8:39:9f:8e:70:25:21:95:17:79:40:6c:73:c5:d9:
63:fc:d8:26:8e:35:04:03:e6:94:ee:a1:7c:54:65:21:76:aa:
10:0a:40:62:68:d9:f2:bf:87:1b:96:d8:82:5a:4f:49:55:90:
37:69:cd:be:59:1d:a9:a5:3b:b0:e2:d1:4a:a0:f0:33:94:6b:
66:c3:f3:a2:e0:72:3e:a0:fc:77:13:6e:7d:a3:4a:f2:0e:8f:
45:8e:0e:cc:a0:f4:bd:10:cd:4c:69:54:05:13:0b:78:e2:df:
0c:0f:e5:c3:73:9b:83:aa:55:94:ea:7d:7d:fc:d5:af:13:df:
51:3f:9a:86:31:bc:54:0f:26:f6:a2:20:d0:f3:04:2d:b0:ca:
85:37:31:e7:74:3b:7f:64:c9:5e:81:a7:75:51:27:73:d3:db:
75:02:16:c2:2e:48:f0:f4:76:bf:32:03:90:ee:d0:b8:37:e8:
ea:5c:e9:17:67:a9:fd:99:05:7e:dd:10:8b:2f:aa:aa:4c:d3:
fd:6e:f4:da:cd:a5:5e:b3:0b:ba:67:2c:06:85:9a:8a:01:57:
f6:be:93:43:04:5a:e4:97:b9:cb:e8:77:1f:6b:ad:00:e6:fe:
ff:4e:39:35:a8:e0:27:dd:ad:04:cb:93:b6:9f:1d:af:a0:c1:
22:d9:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:41 2026 by rpki-client