Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SqbLsMut2L9xDSC2SD34PpCt2Uk.roa
File: SqbLsMut2L9xDSC2SD34PpCt2Uk.roa (raw, json)
Hash identifier: wgKwkfj11T9F7d4o0ip1KisIV9MHG61CxHpRs/9XSIY=
Subject key identifier: 4A:A6:CB:B0:CB:AD:D8:BF:71:0D:20:B6:48:3D:F8:3E:90:AD:D9:49
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019989ECD166CB984CB16C9030792170DEF0
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SqbLsMut2L9xDSC2SD34PpCt2Uk.roa
Signing time: Sat 27 Sep 2025 06:47:02 +0000
ROA not before: Sat 27 Sep 2025 06:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 81.29.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:89:ec:d1:66:cb:98:4c:b1:6c:90:30:79:21:70:de:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 27 06:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aa6cbb0cbadd8bf710d20b6483df83e90add949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:1a:ff:a2:67:b1:b8:00:22:3e:e0:96:02:
62:f7:02:52:3b:7c:0e:cb:42:a2:27:de:05:2d:0f:
a7:f5:8f:e0:80:2a:3b:09:90:15:26:85:8b:5d:12:
50:cb:8e:52:97:45:56:70:e2:e2:6c:29:1a:f5:39:
41:15:3a:be:1c:0d:58:16:04:2e:9f:4d:8d:c4:c9:
0a:91:d4:00:1a:b4:af:79:bd:ae:60:67:83:25:ac:
39:b9:74:1d:7f:77:b7:47:83:a4:3e:e0:53:30:87:
d2:88:08:8b:84:d4:5d:b9:a5:1b:0f:f6:32:9d:79:
95:03:b8:36:a8:bc:c8:fe:1f:d4:cb:96:40:41:c3:
97:17:9f:d3:da:0e:8a:8c:0d:68:7b:cf:b0:11:71:
68:23:5e:d8:ce:a6:58:95:dd:31:d2:97:a9:25:45:
83:fb:0e:32:d0:53:93:2b:4a:8d:d8:19:0d:07:ce:
5f:bb:34:1b:1e:55:f2:8b:d9:1d:73:59:7c:36:14:
c3:b9:02:f2:c9:b9:9b:1f:78:79:a2:6e:78:af:5b:
a8:02:54:39:2d:ef:27:9b:03:fa:8b:98:fd:12:54:
25:ec:2b:55:60:dc:17:6c:7c:f1:a9:fd:14:35:e0:
fd:a1:60:6f:4b:fa:66:e4:6a:03:20:aa:d3:1e:80:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:CB:B0:CB:AD:D8:BF:71:0D:20:B6:48:3D:F8:3E:90:AD:D9:49
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SqbLsMut2L9xDSC2SD34PpCt2Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:93:0f:82:06:52:a7:0b:55:3d:05:88:44:e4:d0:72:a7:92:
c9:b4:f5:34:98:3a:3d:ad:c6:fe:fe:cd:41:60:e4:5b:5c:11:
66:70:1c:90:bb:4b:1e:58:5c:78:61:8e:c3:02:9f:93:68:67:
f6:21:5c:d4:a9:3d:b9:fc:25:24:cb:92:1f:2d:17:2d:ac:8e:
39:09:40:6a:cc:58:cf:de:0d:01:b0:85:90:93:21:a6:52:84:
65:bf:cf:2e:a2:a7:8b:b2:35:92:45:81:e1:fe:8f:73:eb:72:
25:7b:97:fa:82:d1:5e:3b:25:86:70:92:cb:fd:7f:81:88:b8:
5b:ca:dd:64:b4:9b:22:c8:1b:34:9f:65:be:b2:0e:37:3a:cb:
e9:4a:e9:3d:59:12:64:72:2b:53:0b:6a:a7:d6:cf:77:4c:62:
08:0f:c9:c9:d1:85:45:db:9f:99:ed:84:d7:a3:78:f1:76:ba:
d6:94:eb:f3:71:36:0b:f3:f4:3e:63:d5:61:ea:6f:42:6d:d0:
19:ea:a7:50:09:24:d0:8d:04:5b:fa:14:5c:ee:da:ff:ad:b6:
22:c0:e6:63:74:cd:de:51:d7:3d:bd:8a:7c:78:fc:5e:9c:53:
22:aa:d8:e0:db:e6:4b:d2:91:88:2f:5e:a4:a6:dc:be:08:fb:
b0:a2:97:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmJ7NFmy5hMsWyQMHkhcN7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwOTI3MDY0NzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWE2Y2JiMGNiYWRkOGJmNzEwZDIwYjY0ODNkZjgzZTkwYWRkOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Ea/6JnsbgAIj7glgJi9wJSO3wO
y0KiJ94FLQ+n9Y/ggCo7CZAVJoWLXRJQy45Sl0VWcOLibCka9TlBFTq+HA1YFgQu
n02NxMkKkdQAGrSveb2uYGeDJaw5uXQdf3e3R4OkPuBTMIfSiAiLhNRduaUbD/Yy
nXmVA7g2qLzI/h/Uy5ZAQcOXF5/T2g6KjA1oe8+wEXFoI17YzqZYld0x0pepJUWD
+w4y0FOTK0qN2BkNB85fuzQbHlXyi9kdc1l8NhTDuQLyybmbH3h5om54r1uoAlQ5
Le8nmwP6i5j9ElQl7CtVYNwXbHzxqf0UNeD9oWBvS/pm5GoDIKrTHoCTkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqmy7DLrdi/cQ0gtkg9+D6QrdlJMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvU3FiTHNNdXQyTDl4RFNDMlNEMzRQcEN0MlVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2SMA0G
CSqGSIb3DQEBCwUAA4IBAQAvkw+CBlKnC1U9BYhE5NByp5LJtPU0mDo9rcb+/s1B
YORbXBFmcByQu0seWFx4YY7DAp+TaGf2IVzUqT25/CUky5IfLRctrI45CUBqzFjP
3g0BsIWQkyGmUoRlv88uoqeLsjWSRYHh/o9z63Ile5f6gtFeOyWGcJLL/X+BiLhb
yt1ktJsiyBs0n2W+sg43OsvpSuk9WRJkcitTC2qn1s93TGIID8nJ0YVF25+Z7YTX
o3jxdrrWlOvzcTYL8/Q+Y9Vh6m9CbdAZ6qdQCSTQjQRb+hRc7tr/rbYiwOZjdM3e
Udc9vYp8ePxenFMiqtjg2+ZL0pGIL16kpty+CPuwopeG
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:31 2025 by rpki-client