Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/sGm0vU9oSC-btG4YiEKa4VaTO0s.roa
File: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (raw, json)
Hash identifier: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=
Subject key identifier: B0:69:B4:BD:4F:68:48:2F:9B:B4:6E:18:88:42:9A:E1:56:93:3B:4B
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019B797DEE16B8872A76E2BBFD9550B7A49E
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/sGm0vU9oSC-btG4YiEKa4VaTO0s.roa
Signing time: Thu 01 Jan 2026 12:17:34 +0000
ROA not before: Thu 01 Jan 2026 12:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42547
IP address blocks: 193.106.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:ee:16:b8:87:2a:76:e2:bb:fd:95:50:b7:a4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Jan 1 12:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b069b4bd4f68482f9bb46e1888429ae156933b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:4d:c1:c8:31:1f:28:14:7e:7c:92:60:84:
e1:d2:f9:e7:c1:0b:77:6c:2c:d6:6c:ce:68:4f:6d:
da:28:ec:9b:70:81:8f:cd:8c:f5:64:2c:10:b6:6c:
16:a6:f6:e6:8e:27:b1:e6:29:57:b8:49:4d:db:a5:
dc:96:18:cf:0d:70:41:57:81:57:95:a9:c1:90:98:
ce:13:07:2d:e7:77:fa:39:41:f4:a7:f7:8a:9e:f0:
97:fc:74:55:39:5f:c7:78:a5:6a:df:87:8c:48:98:
ec:2d:f2:a5:ea:ba:04:33:dd:cb:06:0d:fa:c4:82:
29:16:80:e0:6f:66:8b:73:60:c6:3f:c9:a8:31:8a:
5e:c2:8a:e3:45:bc:c9:69:e4:cc:87:54:c0:d6:12:
ee:8f:3e:19:50:9b:2a:95:91:2e:ec:a4:72:ca:65:
4b:8d:6f:32:46:cf:24:de:2c:0e:cc:0a:50:7d:a2:
2b:0a:99:02:a0:dc:5c:e4:c2:2b:2b:a6:c8:6d:4e:
7f:cd:c8:05:73:a0:4d:91:53:63:7c:7f:8d:5d:6a:
aa:f9:22:61:65:94:0b:fb:a0:3d:db:cb:1a:33:c0:
9c:02:dd:01:53:ae:10:bc:3a:19:03:fd:68:e8:83:
ad:f6:71:0d:da:e5:09:ea:dc:d5:7c:a4:69:27:4d:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:69:B4:BD:4F:68:48:2F:9B:B4:6E:18:88:42:9A:E1:56:93:3B:4B
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/sGm0vU9oSC-btG4YiEKa4VaTO0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:2e:c3:e7:09:cd:02:10:9f:1b:d7:fc:00:78:7c:a4:6f:96:
4f:a2:97:ef:e3:06:12:16:2b:c7:6d:2f:47:d4:36:fd:a2:81:
6d:9b:01:19:16:d6:68:77:5e:12:a4:bd:26:44:15:b5:81:70:
50:65:42:e6:75:72:d1:bd:ee:c3:de:31:cf:36:9a:ce:42:9a:
15:7a:67:1c:8d:c6:32:af:b7:ca:fd:9e:7e:62:54:d6:89:5e:
ac:89:34:66:49:a6:56:21:44:c0:c6:8b:d0:19:e2:f5:c1:26:
18:d2:18:b7:fe:9f:b2:7e:0d:07:e7:13:96:65:4f:c9:02:d9:
bf:c9:04:74:e1:f5:95:3d:a9:7d:34:94:be:c7:e6:9f:14:93:
f9:ac:b8:2c:6d:8b:1d:d7:95:f5:04:f1:06:f5:0d:b7:ad:14:
b6:01:6e:8f:fd:0a:82:80:06:89:1c:93:02:17:30:68:13:62:
75:72:be:0e:9e:c2:e7:b8:64:6b:67:46:cd:3d:53:9e:bf:91:
38:8d:33:85:29:6c:a4:fa:7f:9c:b4:36:0f:fa:77:14:5f:6b:
7c:d4:fe:e1:fc:19:7a:ed:c5:44:e0:05:5f:e7:fd:fc:60:5a:
6b:36:2c:40:e3:da:77:5d:27:ab:e7:b1:7d:dd:34:9a:ac:ab:
cd:19:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:46 2026 by rpki-client