Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/sgFbUhWIlnGwJJ6JNLmJAt2bOWA.roa
File: sgFbUhWIlnGwJJ6JNLmJAt2bOWA.roa (raw, json)
Hash identifier: xYVDJvZc+IUzCCdzcBxOHRLTNncpeo+GSxRLuB7cQoc=
Subject key identifier: B2:01:5B:52:15:88:96:71:B0:24:9E:89:34:B9:89:02:DD:9B:39:60
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5E1E4C9A0883EFFC99369437A4BFE
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/sgFbUhWIlnGwJJ6JNLmJAt2bOWA.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a11:a900::/29 maxlen: 29
2a12:e600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e1:e4:c9:a0:88:3e:ff:c9:93:69:43:7a:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2015b5215889671b0249e8934b98902dd9b3960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:6e:9a:4c:95:92:32:95:4f:98:04:b7:f1:
69:d6:9f:5e:53:47:e2:ec:2d:e2:35:fe:28:c0:67:
e2:4a:88:eb:0a:24:65:5d:de:ae:bf:b4:8f:8f:c6:
4e:11:c4:7d:21:cf:af:94:b0:d5:42:95:2b:45:68:
04:1f:82:9b:b0:c7:44:34:6c:df:6a:5f:50:90:e0:
e7:92:7d:31:48:63:2a:f9:80:21:ba:b9:15:f9:4d:
6b:82:e6:ae:af:7c:d0:db:86:8b:64:44:db:f9:07:
d9:f4:0c:aa:c0:a0:fb:2d:1f:8e:7c:ac:20:4b:33:
b9:e8:a3:8b:12:4c:96:e5:67:1d:d7:57:84:c5:6e:
23:ad:83:fc:ae:b5:83:6f:36:19:9a:98:50:c4:81:
60:ea:8e:9e:fa:2d:e6:f6:24:72:5a:d4:16:47:a1:
a3:c2:d4:e6:95:1b:0b:9b:64:8e:02:c6:9f:65:f4:
c4:2d:a3:a1:54:ca:3a:d8:92:9b:a1:fb:6e:67:f9:
ae:6e:37:09:cc:35:c9:41:31:d0:7e:ad:c1:54:f6:
86:09:09:05:e1:16:d0:7c:69:25:43:32:02:3e:8b:
87:a1:70:23:b5:1e:94:46:30:2c:40:d2:21:aa:65:
ad:13:9e:22:7a:0c:2e:e7:6d:16:13:40:36:ac:0b:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:5B:52:15:88:96:71:B0:24:9E:89:34:B9:89:02:DD:9B:39:60
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/sgFbUhWIlnGwJJ6JNLmJAt2bOWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a900::/29
2a12:e600::/29
Signature Algorithm: sha256WithRSAEncryption
71:4c:21:3d:60:a8:5e:f5:80:ea:80:6a:a9:dc:df:e6:18:76:
f1:52:a4:2d:da:da:63:ac:09:52:20:1a:b3:c2:1a:13:01:f0:
b1:d7:07:01:db:35:dc:7f:d9:7f:44:08:f3:03:a4:38:10:db:
d7:7b:c2:73:98:fe:f1:59:1e:2c:63:0d:2d:90:c4:54:7c:a2:
2c:30:d4:20:90:ea:ce:ac:70:0e:cf:d0:72:7e:71:c9:b9:66:
ee:20:dd:dc:89:79:c2:0e:a8:1c:a5:41:c7:87:c2:87:df:3f:
af:8d:ac:dd:a2:7d:86:9d:8f:df:41:54:e8:48:91:94:be:04:
81:e4:e2:b6:b4:91:7b:4a:a0:1f:fb:e8:a0:56:79:ff:81:4b:
83:97:91:3a:23:dc:97:50:c7:37:6f:06:49:df:f9:45:6d:0c:
f6:7a:3a:57:72:ad:87:0b:1c:5d:a0:b9:64:5c:16:a0:5e:3f:
c2:03:3e:aa:0e:d6:35:10:19:30:11:2a:c3:7b:6d:04:af:0e:
7d:62:e3:4f:d1:bf:c8:42:09:9b:14:a8:e0:55:05:85:f8:f1:
24:61:1b:8f:31:eb:a3:90:45:a6:77:ea:95:92:58:ae:d0:03:
2a:95:20:29:53:fe:c2:8b:91:a8:53:7d:bd:59:3d:3f:e6:94:
7e:48:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:28 2026 by rpki-client