Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/sgB7Y6iAfG4YtCK5fcaRJ5CMZ9I.roa
File: sgB7Y6iAfG4YtCK5fcaRJ5CMZ9I.roa (raw, json)
Hash identifier: kusLyvgc/pixapeWbBNMAKTcjIgtCZ1dtKYQZG/QtHs=
Subject key identifier: B2:00:7B:63:A8:80:7C:6E:18:B4:22:B9:7D:C6:91:27:90:8C:67:D2
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01A186F778A2B3FEA20052591281FD424E31
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/sgB7Y6iAfG4YtCK5fcaRJ5CMZ9I.roa
Signing time: Thu 29 Oct 2026 09:22:07 +0000
ROA not before: Thu 29 Oct 2026 09:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 45.152.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:f7:78:a2:b3:fe:a2:00:52:59:12:81:fd:42:4e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Oct 29 09:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2007b63a8807c6e18b422b97dc69127908c67d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:b6:c5:f6:f5:c9:a8:84:d8:4b:be:3c:86:
e1:a7:5e:5b:d0:1f:aa:65:e8:e3:9f:62:77:7f:71:
bc:37:53:60:6d:a4:fa:07:d6:b3:de:c6:10:48:b1:
18:db:e5:3e:a2:0c:fe:c8:93:b7:90:ac:d5:37:d5:
4a:66:51:85:54:1b:82:b1:e9:db:9f:c8:70:99:54:
e9:47:29:0e:0b:0e:10:16:1e:95:1c:79:63:50:e0:
d8:72:85:97:84:2b:39:8e:05:b3:4c:99:07:3e:06:
7e:10:8b:6a:bd:80:c8:a7:5d:f4:01:08:6a:f7:c9:
ce:47:03:bd:ba:ab:24:7a:8f:31:c9:65:94:d6:99:
ec:6f:54:ce:0d:8f:fb:52:e2:2f:05:33:7f:31:e0:
27:ce:80:78:89:9d:67:de:85:68:63:14:25:a5:39:
b6:b2:95:fe:2b:39:b5:2a:c1:2c:6c:b4:05:e1:14:
db:60:c6:96:94:e8:98:a4:24:c7:be:1c:d0:f4:a4:
ce:53:01:3d:cc:6f:4f:8e:45:18:80:a0:37:b6:81:
d7:82:f8:91:d4:3b:10:9e:8d:44:f9:38:74:3a:da:
4c:29:ef:5b:68:b3:ad:bc:30:3e:bd:cf:90:84:09:
db:74:1d:13:26:de:b3:a7:93:8b:db:b8:29:ac:14:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:00:7B:63:A8:80:7C:6E:18:B4:22:B9:7D:C6:91:27:90:8C:67:D2
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/sgB7Y6iAfG4YtCK5fcaRJ5CMZ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:be:d2:09:fa:a0:8b:00:ce:d0:8a:41:2e:36:97:18:bf:0e:
99:f4:2f:93:c3:52:7c:46:a3:3b:0a:3e:8c:1f:1f:a4:e7:72:
9e:28:2a:ac:43:32:be:86:78:b7:91:52:54:8d:c3:02:f5:a0:
b4:e1:72:9f:6f:7b:64:30:fa:c4:5e:ff:82:c7:45:cf:98:01:
6a:eb:df:37:ce:a3:c8:06:ae:15:24:51:9e:cf:0d:f2:9d:08:
a2:91:cc:03:f1:44:d3:8c:bb:43:ae:b6:0d:5e:15:ac:d7:66:
66:23:ee:a1:11:c2:5e:2f:f2:ac:16:25:a8:b5:49:ec:d4:4b:
f2:ca:ba:4e:24:70:be:fd:68:f7:a8:07:d4:32:3a:88:4b:98:
04:39:31:e9:9e:12:6f:bf:8a:89:e3:09:38:79:ce:50:47:1a:
75:84:c7:01:7f:7c:a8:aa:06:18:37:62:1c:d4:5c:f9:5e:02:
b6:f1:09:59:53:73:f4:56:1a:a5:58:db:d7:e6:c2:2b:37:bb:
83:86:40:1d:04:52:7f:6a:06:32:07:dd:7c:9a:d3:da:4b:81:
fe:c6:85:56:30:c7:56:c8:50:be:55:fd:86:4f:57:b0:cd:2d:
d9:31:7e:d2:95:52:75:05:31:49:2e:4a:00:41:19:30:5f:6a:
a6:49:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:56 2026 by rpki-client