Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/sb-GCH9IlUVV1HBTwu_2sGH00L8.roa
File: sb-GCH9IlUVV1HBTwu_2sGH00L8.roa (raw, json)
Hash identifier: NIEwuhjNP7AJ1aGJG2ysJUL1eP2V5WuknrN1zsvlhbE=
Subject key identifier: B1:BF:86:08:7F:48:95:45:55:D4:70:53:C2:EF:F6:B0:61:F4:D0:BF
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 01988B880876D0EDC6B246A0988A53C7D46E
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/sb-GCH9IlUVV1HBTwu_2sGH00L8.roa
Signing time: Fri 08 Aug 2025 21:13:24 +0000
ROA not before: Fri 08 Aug 2025 21:13:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 158.94.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:88:08:76:d0:ed:c6:b2:46:a0:98:8a:53:c7:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Aug 8 21:13:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1bf86087f48954555d47053c2eff6b061f4d0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:5d:7e:3f:cc:b2:d3:00:c0:3b:d9:b5:78:
16:1b:9d:49:ce:90:5a:43:a8:ca:1d:b7:6a:f6:62:
9a:5a:fa:8f:f5:d4:f5:dc:3e:a1:42:2b:01:53:a2:
92:27:07:bc:b2:04:5c:5d:e6:0c:5e:f7:0e:fe:ec:
41:81:bd:05:0a:54:fa:6c:b4:54:89:17:7c:82:0f:
4d:63:bc:4e:bc:3d:dc:e3:4b:4e:74:ab:23:98:69:
53:3d:8a:56:5e:0e:b7:69:5d:82:10:5d:0e:f8:90:
4e:95:11:32:ae:0a:7d:55:53:66:df:3c:17:82:61:
b0:15:b8:cb:4d:72:4b:99:84:0a:b1:ec:21:c0:13:
2e:97:0a:9c:fc:b8:3b:60:52:af:0a:17:59:1b:c0:
0d:37:6e:3b:1b:d9:88:a1:33:a3:a9:b9:ae:a2:64:
40:be:76:d9:59:26:6b:55:d1:12:ec:ae:d3:5d:3a:
04:e3:22:95:98:86:f7:ac:58:ae:3a:98:bd:40:88:
06:34:52:cc:60:f1:29:11:58:a4:8c:d3:f6:9c:53:
6f:5b:0e:d8:47:03:5d:1d:44:a9:a8:53:8c:62:33:
e3:2f:bf:3e:16:88:1b:22:1b:35:b1:f1:84:f0:78:
d0:d3:4c:8a:18:3d:f3:e8:13:14:6b:39:12:94:14:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:86:08:7F:48:95:45:55:D4:70:53:C2:EF:F6:B0:61:F4:D0:BF
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/sb-GCH9IlUVV1HBTwu_2sGH00L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.64.0/20
Signature Algorithm: sha256WithRSAEncryption
43:53:10:ee:cb:55:4d:5a:db:77:d5:6f:cc:dd:7b:81:f9:68:
45:f2:99:fc:62:c4:e2:34:c2:83:14:9b:89:df:d9:49:54:60:
ae:e2:d5:13:cb:ea:68:87:e3:bc:25:0a:60:1a:cb:3a:1a:18:
ed:c8:ce:8c:c3:5e:4d:fe:a8:aa:48:53:51:e5:c0:97:98:65:
63:d8:f3:ba:1e:ba:7c:11:b3:df:ea:12:81:d4:be:01:6b:8c:
11:74:95:43:c0:fd:41:45:91:0a:6f:ff:fe:77:8c:d3:5a:1d:
69:f2:ba:a6:3a:09:ab:45:b1:89:1c:b5:76:4e:8b:4c:76:83:
9b:a9:08:35:80:1d:2a:e3:44:ff:d4:ca:c6:64:0e:42:a1:d3:
ff:a0:21:30:68:ee:85:59:73:14:e9:f7:ff:88:c3:e0:35:1b:
18:94:00:d3:50:90:cc:58:8c:75:58:5b:7f:83:7c:c0:18:1e:
42:03:ad:34:27:83:cd:4f:ad:21:f5:9f:eb:a6:0f:a5:a0:36:
3b:0b:77:e8:7a:b5:d0:04:14:37:7a:54:e5:6b:fe:82:78:25:
6b:13:ef:26:2c:57:14:81:dc:22:b1:48:a0:56:38:a0:1b:b2:
f2:d7:bc:0c:34:9f:0f:85:67:36:07:4a:43:f7:23:3c:2c:fc:
b4:8a:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:26 2025 by rpki-client