Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/SbQQ2AN295Q5ndar8yL54sGGq4E.roa
File: SbQQ2AN295Q5ndar8yL54sGGq4E.roa (raw, json)
Hash identifier: T6gv6dIwlGoFALLgqsw4xKZ6JgXOgV/2sxGYkLgA1c0=
Subject key identifier: 49:B4:10:D8:03:76:F7:94:39:9D:D6:AB:F3:22:F9:E2:C1:86:AB:81
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019F5CD5CFD7E53FB759024EA57697607ECE
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/SbQQ2AN295Q5ndar8yL54sGGq4E.roa
Signing time: Mon 13 Jul 2026 18:55:43 +0000
ROA not before: Mon 13 Jul 2026 18:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 193.138.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:d5:cf:d7:e5:3f:b7:59:02:4e:a5:76:97:60:7e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Jul 13 18:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49b410d80376f794399dd6abf322f9e2c186ab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:14:51:d0:82:8a:14:b4:91:5b:7a:77:02:
e4:c3:3d:33:d0:52:92:63:e3:d3:dd:4e:b9:c0:6e:
8c:48:aa:5d:02:8f:5b:56:fc:f5:7a:87:6f:bc:06:
e0:6e:34:3b:87:1a:fc:08:e8:66:96:5e:3f:bd:65:
de:41:6e:99:ba:da:ad:3d:91:21:42:5c:ce:bc:59:
78:61:c6:4b:e1:15:0c:08:7d:10:d2:ad:71:e4:36:
2d:ec:1d:42:16:41:20:3e:06:56:e8:a7:a9:bf:a2:
37:d8:02:d7:ef:2c:f8:35:41:b1:aa:90:72:4d:49:
55:a5:78:bb:92:71:9d:89:bc:07:3c:d2:c1:01:ea:
e8:06:02:6a:97:80:10:e7:ed:35:fc:af:6d:1d:8f:
2f:d8:8d:ce:8e:c3:dd:be:74:6b:28:dc:e7:e4:80:
0a:a3:dd:b4:6a:a6:75:fd:3f:f5:cc:81:ac:a6:22:
ca:21:be:87:14:34:d1:4c:5d:58:be:38:6a:24:6b:
ee:9b:46:4e:b9:00:d9:73:15:1f:d1:b1:94:13:b1:
3b:b1:e3:d4:e4:76:54:8f:54:34:f3:71:7a:5d:1f:
40:01:ff:8e:27:12:b0:e2:c5:11:15:f0:6a:43:76:
7a:2c:f4:2b:c2:53:b0:57:3b:ea:71:20:7c:f0:ae:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:10:D8:03:76:F7:94:39:9D:D6:AB:F3:22:F9:E2:C1:86:AB:81
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/SbQQ2AN295Q5ndar8yL54sGGq4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.77.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bf:e8:c3:71:6b:c0:29:0f:5b:bf:cc:8e:f9:77:d5:a5:87:
aa:e0:5e:8d:0f:c9:99:84:2d:10:84:9e:f8:3f:e9:d3:6f:c6:
df:d5:e1:49:ca:ef:b7:5f:58:e6:f8:32:13:78:36:b6:fd:93:
5f:91:b0:d8:91:e4:eb:ba:c0:6c:2a:cc:95:91:5c:bd:c8:60:
49:c4:a3:c6:a6:11:a5:a2:b5:52:08:c1:47:19:3e:d1:5a:b5:
20:20:75:eb:0b:88:1c:29:77:ee:f5:7d:7e:48:42:b3:75:74:
90:15:a9:45:3b:f4:bc:dd:63:ef:ba:44:c5:d7:26:5c:10:fe:
cd:8e:28:7b:68:d4:9d:2b:5a:5c:a8:91:2e:55:9e:63:8d:a0:
39:66:b5:7f:f5:d2:68:e5:35:0e:f5:fd:60:c6:7a:14:d9:e3:
cd:37:0d:5d:8a:0b:7f:70:ba:fa:a5:de:06:c7:8c:ea:13:c2:
fa:aa:86:c8:19:22:f2:64:08:92:a6:7e:d9:44:c9:f2:31:06:
bd:87:69:40:d0:f3:d2:c6:18:a7:8c:10:b9:05:56:d5:a4:8e:
d1:eb:1b:4f:ed:f5:74:b1:7b:62:1b:25:6b:03:58:38:3b:58:
58:4b:2a:d6:50:5d:1b:80:88:01:12:3f:51:ed:72:38:67:4b:
b1:8c:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:53 2026 by rpki-client