Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/Sb_S1tBlNN5yjIhiOwzCt0GXoKc.roa
File: Sb_S1tBlNN5yjIhiOwzCt0GXoKc.roa (raw, json)
Hash identifier: nTo01f8ApBndo/Q3i+Hin7sdaSsD+w4jDKQkdIBQYN8=
Subject key identifier: 49:BF:D2:D6:D0:65:34:DE:72:8C:88:62:3B:0C:C2:B7:41:97:A0:A7
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 0198F1585B23FEC6F5B4576B92E5E1909927
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/Sb_S1tBlNN5yjIhiOwzCt0GXoKc.roa
Signing time: Thu 28 Aug 2025 15:42:36 +0000
ROA not before: Thu 28 Aug 2025 15:42:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31445
IP address blocks: 195.137.253.0/24 maxlen: 24
2a14:2c02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:58:5b:23:fe:c6:f5:b4:57:6b:92:e5:e1:90:99:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Aug 28 15:42:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49bfd2d6d06534de728c88623b0cc2b74197a0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:de:b7:db:f3:e9:47:93:4c:d2:8d:61:47:
b6:eb:96:a7:5c:8b:6c:29:ea:f7:f1:36:ca:12:c0:
a2:22:0c:d1:14:d0:66:03:65:39:09:04:b2:db:ec:
5c:81:ba:d8:40:34:2b:00:68:f6:51:35:fc:27:fa:
a4:4f:ed:3c:8d:35:99:2c:78:52:0d:30:6e:6f:38:
d1:fe:5f:d9:09:fe:ff:e1:77:a3:39:02:c1:3f:14:
f8:5f:50:de:ab:9f:5d:a2:0b:d2:d4:b9:46:b9:1b:
07:b3:79:8a:cf:33:1e:96:02:97:8b:1d:cf:73:cd:
3f:c8:5b:67:fc:ce:86:2c:dd:a2:13:62:cb:38:08:
a0:7e:ac:c1:af:2b:60:c6:fa:2a:a8:08:07:83:85:
4b:3d:46:cd:8d:cb:1e:93:fa:05:e4:3f:7a:6a:4a:
7e:58:07:78:26:fd:03:e0:23:4b:d7:a9:6c:c1:de:
15:96:54:fc:c8:d8:24:bc:37:27:92:7b:31:ed:c3:
3e:cb:7f:b8:51:54:cd:ce:7c:ac:08:10:ef:64:8c:
2a:a2:f6:29:e6:b8:01:b1:9c:b6:c8:61:89:cb:2d:
bd:70:e8:5f:5b:e5:97:68:c7:70:94:b4:a7:70:b0:
18:7d:2f:5a:66:6a:ea:b1:b6:24:56:ed:05:9e:77:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:D2:D6:D0:65:34:DE:72:8C:88:62:3B:0C:C2:B7:41:97:A0:A7
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/Sb_S1tBlNN5yjIhiOwzCt0GXoKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.253.0/24
IPv6:
2a14:2c02::/32
Signature Algorithm: sha256WithRSAEncryption
58:d2:50:74:06:3e:69:f3:08:9d:4a:51:26:c9:ca:94:d6:0b:
8e:aa:17:8e:97:30:d8:c4:1a:03:15:61:db:e1:e5:aa:a8:b9:
ed:23:03:dc:52:e5:3c:69:84:70:21:de:27:02:ab:a5:f6:3b:
5d:0e:08:8a:e5:6e:1b:70:d3:82:5a:f1:e2:60:6f:a2:a6:4e:
42:8e:48:cc:9d:b4:7c:a3:ea:77:d3:a0:a3:03:98:a7:43:45:
34:28:23:fa:45:16:c0:7f:9c:4d:e8:8d:73:5c:a7:b7:9b:da:
12:2c:75:c7:53:ac:ac:fd:bb:8e:34:5b:5f:f9:0a:4c:77:97:
b5:0c:25:76:e0:28:75:e5:6d:85:0d:36:5d:26:2d:7e:6d:cc:
7b:7a:04:61:e4:fc:d8:17:cd:5e:ed:3f:1c:68:09:7c:dc:f5:
d2:a1:00:8d:c4:68:c1:7d:57:61:ce:6a:f7:16:91:a1:9d:72:
00:9a:e8:4b:0f:24:74:0b:bf:2c:59:25:08:56:c6:b6:e8:9a:
a6:a5:07:fa:23:24:99:67:2a:0a:c6:80:0d:a1:0e:72:0d:ee:
77:24:7b:32:f0:50:c2:8d:02:8b:e8:77:19:b8:5d:86:3f:da:
14:99:af:1b:58:52:2d:b1:8e:d8:f4:91:e2:f0:72:41:87:b5:
39:fd:67:ea
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZjxWFsj/sb1tFdrkuXhkJknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTNmMWI4ZTI5NjVmZDAzODc4MTBhMmY2MmNmNzE0ODE2
ZDE0OTcwHhcNMjUwODI4MTU0MjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWJmZDJkNmQwNjUzNGRlNzI4Yzg4NjIzYjBjYzJiNzQxOTdhMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycjet9vz6UeTTNKNYUe265anXIts
Ker38TbKEsCiIgzRFNBmA2U5CQSy2+xcgbrYQDQrAGj2UTX8J/qkT+08jTWZLHhS
DTBubzjR/l/ZCf7/4XejOQLBPxT4X1Deq59dogvS1LlGuRsHs3mKzzMelgKXix3P
c80/yFtn/M6GLN2iE2LLOAigfqzBrytgxvoqqAgHg4VLPUbNjcsek/oF5D96akp+
WAd4Jv0D4CNL16lswd4VllT8yNgkvDcnknsx7cM+y3+4UVTNznysCBDvZIwqovYp
5rgBsZy2yGGJyy29cOhfW+WXaMdwlLSncLAYfS9aZmrqsbYkVu0FnncN0QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEm/0tbQZTTecoyIYjsMwrdBl6CnMB8GA1UdIwQY
MBaAFKlT8bjill/QOHgQovYs9xSBbRSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQt
YWU4NjMzYzE3Yjg3LzEvU2JfUzF0QmxOTjV5akloaU93ekN0MEdYb0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQtYWU4NjMzYzE3Yjg3
LzEvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw4n9MA0E
AgACMAcDBQAqFCwCMA0GCSqGSIb3DQEBCwUAA4IBAQBY0lB0Bj5p8widSlEmycqU
1guOqheOlzDYxBoDFWHb4eWqqLntIwPcUuU8aYRwId4nAqul9jtdDgiK5W4bcNOC
WvHiYG+ipk5CjkjMnbR8o+p306CjA5inQ0U0KCP6RRbAf5xN6I1zXKe3m9oSLHXH
U6ys/buONFtf+QpMd5e1DCV24Ch15W2FDTZdJi1+bcx7egRh5PzYF81e7T8caAl8
3PXSoQCNxGjBfVdhzmr3FpGhnXIAmuhLDyR0C78sWSUIVsa26JqmpQf6IySZZyoK
xoANoQ5yDe53JHsy8FDCjQKL6HcZuF2GP9oUma8bWFItsY7Y9JHi8HJBh7U5/Wfq
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:11 2025 by rpki-client