Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/sbN8EnhWE2l__QvXJmkc9vK_YUw.roa
File: sbN8EnhWE2l__QvXJmkc9vK_YUw.roa (raw, json)
Hash identifier: Uceuxsw6EIStQVLEZXyq2I0QPItxAW4XKZWxVvN6eTQ=
Subject key identifier: B1:B3:7C:12:78:56:13:69:7F:FD:0B:D7:26:69:1C:F6:F2:BF:61:4C
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019C7761A13C2957275DF6CF05149B0F6D32
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/sbN8EnhWE2l__QvXJmkc9vK_YUw.roa
Signing time: Thu 19 Feb 2026 19:30:12 +0000
ROA not before: Thu 19 Feb 2026 19:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200040
IP address blocks: 131.222.240.0/24 maxlen: 24
131.222.241.0/24 maxlen: 24
131.222.242.0/24 maxlen: 24
195.18.8.0/24 maxlen: 24
2a14:10c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:61:a1:3c:29:57:27:5d:f6:cf:05:14:9b:0f:6d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Feb 19 19:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1b37c12785613697ffd0bd726691cf6f2bf614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:05:04:eb:83:7f:e4:a6:64:4a:37:de:09:
4a:6f:a1:fb:0b:b9:e8:2a:52:a5:4d:bd:ea:ea:78:
57:e0:ad:5d:3e:fa:7e:7b:10:38:58:60:c2:d7:fa:
b8:26:b8:1a:47:a4:33:e9:90:4f:31:de:f4:5b:59:
dc:88:36:27:16:a7:e5:a7:53:fe:fd:cc:11:da:43:
01:f2:d4:da:1a:1f:61:18:2f:30:70:8c:3e:43:fb:
0a:ed:7a:e0:30:cd:64:1c:5d:e4:39:f1:51:12:52:
73:a7:b2:6e:03:a5:ae:c4:55:4d:e5:86:1e:82:3f:
af:a9:5c:02:d7:43:ac:b3:3e:e1:b5:3a:39:09:18:
40:84:88:2a:84:b1:b9:9e:8c:3b:9c:9f:2d:bc:c0:
ab:84:f8:c9:c7:d5:93:e8:16:12:6f:f7:8a:72:1c:
06:72:4c:75:99:30:71:7a:84:cc:2b:c3:ac:a5:7a:
a6:0d:f4:06:5f:31:7b:e6:69:d2:08:a1:af:9c:8a:
22:2b:31:e4:b6:2b:bf:89:50:9d:91:50:91:65:72:
30:74:89:20:e4:17:25:8c:d3:24:84:fe:de:a8:c0:
db:be:68:65:af:d2:82:4e:27:84:8f:d9:9e:84:c9:
7a:9e:b9:00:4d:f1:5d:83:60:5f:5a:c8:48:2c:6a:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:7C:12:78:56:13:69:7F:FD:0B:D7:26:69:1C:F6:F2:BF:61:4C
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/sbN8EnhWE2l__QvXJmkc9vK_YUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.240.0-131.222.242.255
195.18.8.0/24
IPv6:
2a14:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:19:cd:0d:85:d8:33:30:d1:b3:5a:90:e0:5e:df:27:73:b8:
00:f4:06:16:a6:4d:85:54:9e:22:e0:78:a3:9f:5a:13:02:ac:
d9:84:ec:4c:ab:e2:03:5e:19:f9:dd:8f:5a:6c:9e:92:6e:fa:
5e:78:63:6c:e4:66:4a:49:d7:d6:bd:64:ef:4c:8a:64:50:a9:
b4:f1:1e:92:39:af:43:16:71:bd:fc:20:ab:38:e9:b8:3d:5d:
d0:10:af:23:0c:2e:85:9d:1f:d2:23:e3:42:91:8a:a9:3b:7c:
f8:58:6e:16:d7:ef:d2:87:be:a1:d0:a0:7a:b9:7f:55:4e:85:
5d:06:3f:ec:6c:1b:83:79:0a:da:03:9e:98:7d:96:a5:be:aa:
25:97:3d:b3:ce:3b:12:4c:b8:b6:5b:61:8e:89:29:80:e9:f7:
57:7b:eb:c0:8e:42:8a:9d:26:a0:76:b7:a9:ca:db:14:86:d3:
84:70:1b:47:d3:63:73:1f:79:88:3a:3b:d0:b3:67:79:80:9b:
47:96:7f:96:a3:cd:10:70:2a:8f:53:9f:5e:03:4f:e3:8e:f6:
56:a3:8d:ea:11:0e:71:e6:d7:be:28:56:26:71:a4:04:9a:65:
39:26:eb:5c:40:9b:b8:ef:5b:6b:17:e8:64:13:32:8b:fc:bf:
75:f7:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:24 2026 by rpki-client