Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/SBa_meSA36HXFsjD_RIbWMn9xQI.roa
File: SBa_meSA36HXFsjD_RIbWMn9xQI.roa (raw, json)
Hash identifier: EdE7JSBny/awWzg8i3vFdNMbdChaGR5jW5k8vNopIlk=
Subject key identifier: 48:16:BF:99:E4:80:DF:A1:D7:16:C8:C3:FD:12:1B:58:C9:FD:C5:02
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 019F23693AD1E1517B0EA77D322F07817D97
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/SBa_meSA36HXFsjD_RIbWMn9xQI.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207648
IP address blocks: 81.29.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3a:d1:e1:51:7b:0e:a7:7d:32:2f:07:81:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4816bf99e480dfa1d716c8c3fd121b58c9fdc502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:09:90:37:23:18:fe:25:fc:d2:1b:99:5e:
db:54:0c:1e:56:97:fb:db:97:90:d9:e9:e2:83:ab:
5a:2a:33:98:cd:df:67:80:d4:c2:03:a9:8f:d4:34:
b2:aa:16:4e:07:85:19:81:eb:7d:7d:bc:e9:41:b9:
ca:b3:a0:83:e7:cd:1d:a5:0c:f8:5a:13:dd:b7:fa:
0c:60:f6:f8:29:b9:79:35:9f:80:f7:65:67:1f:af:
7a:4e:fc:45:77:5b:89:3d:e9:65:f7:c4:fa:7a:b9:
c0:42:c1:4c:f4:80:44:4b:aa:76:15:38:ee:7f:1b:
8f:d4:10:63:a7:cd:8a:9f:93:a8:2c:66:c0:73:e1:
e2:95:5e:d6:67:73:a8:d0:20:a1:8f:16:07:dc:cf:
04:3a:a0:b3:2d:54:de:97:56:95:ee:f9:a6:3f:5b:
5b:61:4b:e0:ed:6c:4c:d9:3c:3f:ef:8b:5c:5a:9f:
ec:20:65:71:ec:75:75:de:e5:48:0f:a6:7d:81:f4:
4a:4a:4f:bf:c9:92:a1:96:33:b6:cf:21:90:c4:ff:
53:15:0a:db:50:11:33:f7:d2:e3:63:1f:61:dc:f0:
cc:aa:11:74:1f:45:31:22:ce:9b:bf:b4:a2:05:52:
ee:af:28:b9:68:08:99:9d:67:8c:4d:6d:9d:00:3a:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:BF:99:E4:80:DF:A1:D7:16:C8:C3:FD:12:1B:58:C9:FD:C5:02
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/SBa_meSA36HXFsjD_RIbWMn9xQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.133.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6d:12:8f:b8:4e:61:60:2a:fb:6b:30:c7:26:af:0c:20:df:
a4:d7:0f:39:86:9b:1f:a1:6b:6b:e0:c9:92:f9:70:32:ff:d1:
49:43:48:47:fa:14:8a:70:db:b0:05:fe:82:91:32:79:71:8a:
1e:03:7b:2d:1a:82:95:c2:99:8f:3a:dc:0f:1f:6a:2d:05:5e:
f6:3c:b7:da:37:6e:a9:74:df:10:2f:2b:4a:8f:04:09:e8:23:
43:81:e8:ac:44:2f:be:8f:ff:29:03:60:3f:8a:09:1e:2d:9e:
17:ae:4e:ee:fe:5a:da:69:d7:55:2d:8a:6c:9c:15:f5:e2:4a:
f0:8b:a9:d0:e0:37:6c:1b:e6:47:9b:da:2e:52:02:b4:fb:11:
95:e5:89:32:77:2c:22:de:e6:56:9a:59:76:28:fa:71:b9:4e:
4a:ff:73:ad:82:5d:56:e0:eb:bf:a1:a6:9b:70:51:6e:0e:52:
e4:75:8e:01:8b:f3:0c:ff:7c:89:4c:53:0e:df:33:6d:0a:20:
ef:61:0b:53:34:7f:01:b2:b4:7a:2a:f6:97:b5:1e:05:c7:b1:
c0:3f:73:ab:58:0e:dc:9c:4d:c0:8f:66:60:6a:85:fa:18:cd:
05:95:6a:8d:5f:12:c4:b7:9d:40:d4:ce:c4:56:cf:a3:6d:22:
1a:65:6c:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTrR4VF7Dqd9Mi8HgX2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Nzg5ZTczN2RlNmY1ZWUzODcwOTNhMTNiYjkyMGUyZjhl
YmJiODcwHhcNMjYwNzAyMTUxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODE2YmY5OWU0ODBkZmExZDcxNmM4YzNmZDEyMWI1OGM5ZmRjNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEoJkDcjGP4l/NIbmV7bVAweVpf7
25eQ2enig6taKjOYzd9ngNTCA6mP1DSyqhZOB4UZget9fbzpQbnKs6CD580dpQz4
WhPdt/oMYPb4Kbl5NZ+A92VnH696TvxFd1uJPell98T6ernAQsFM9IBES6p2FTju
fxuP1BBjp82Kn5OoLGbAc+HilV7WZ3Oo0CChjxYH3M8EOqCzLVTel1aV7vmmP1tb
YUvg7WxM2Tw/74tcWp/sIGVx7HV13uVID6Z9gfRKSk+/yZKhljO2zyGQxP9TFQrb
UBEz99LjYx9h3PDMqhF0H0UxIs6bv7SiBVLuryi5aAiZnWeMTW2dADo3DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgWv5nkgN+h1xbIw/0SG1jJ/cUCMB8GA1UdIwQY
MBaAFAZ4nnN95vXuOHCToTu5IOL467uHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5pZWMzM205ZTQ0Y0pPaE83a2c0dmpydTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt
YTcyNDdlOWQ1ZjNhLzEvU0JhX21lU0EzNkhYRnNqRF9SSWJXTW45eFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh
LzEvQm5pZWMzM205ZTQ0Y0pPaE83a2c0dmpydTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2FMA0G
CSqGSIb3DQEBCwUAA4IBAQBYbRKPuE5hYCr7azDHJq8MIN+k1w85hpsfoWtr4MmS
+XAy/9FJQ0hH+hSKcNuwBf6CkTJ5cYoeA3stGoKVwpmPOtwPH2otBV72PLfaN26p
dN8QLytKjwQJ6CNDgeisRC++j/8pA2A/igkeLZ4Xrk7u/lraaddVLYpsnBX14krw
i6nQ4DdsG+ZHm9ouUgK0+xGV5Ykydywi3uZWmll2KPpxuU5K/3Otgl1W4Ou/oaab
cFFuDlLkdY4Bi/MM/3yJTFMO3zNtCiDvYQtTNH8BsrR6KvaXtR4Fx7HAP3OrWA7c
nE3Aj2ZgaoX6GM0FlWqNXxLEt51A1M7EVs+jbSIaZWw2
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:46 2026 by rpki-client