Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/sbxckOpdRmsL3IOZkXvPw_lxG8g.roa
File: sbxckOpdRmsL3IOZkXvPw_lxG8g.roa (raw, json)
Hash identifier: +YSKpNz3HshHTq5k+BAAiNGsiW2WG4yJKy7VDrjUYAI=
Subject key identifier: B1:BC:5C:90:EA:5D:46:6B:0B:DC:83:99:91:7B:CF:C3:F9:71:1B:C8
Certificate issuer: /CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Certificate serial: 019F4C3D124D4E6E76BBF7E22D5B8E603753
Authority key identifier: 03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/sbxckOpdRmsL3IOZkXvPw_lxG8g.roa
Signing time: Fri 10 Jul 2026 13:34:58 +0000
ROA not before: Fri 10 Jul 2026 13:34:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.24.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:3d:12:4d:4e:6e:76:bb:f7:e2:2d:5b:8e:60:37:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Validity
Not Before: Jul 10 13:34:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1bc5c90ea5d466b0bdc8399917bcfc3f9711bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:a2:34:4e:af:3e:96:45:bc:61:52:87:e2:
50:ab:a1:99:5b:1a:3c:6a:cf:7d:3f:96:f4:28:f9:
5a:1c:d8:5d:b8:5c:e6:84:63:f9:16:cc:b7:bc:d3:
6c:d5:d9:d2:fe:5e:76:55:00:64:ed:08:11:21:ca:
5b:a2:12:a1:4e:39:ce:d4:04:6e:d7:2c:41:b4:db:
8a:74:58:c7:1b:a3:ee:20:84:95:07:3e:58:af:72:
37:87:28:7d:00:41:57:96:e7:aa:00:bf:85:48:48:
b8:50:47:65:2c:25:0d:04:ed:9e:6d:70:a5:e0:bd:
a1:0c:c0:88:48:bc:65:06:bf:ab:88:2a:76:02:b9:
52:bc:8b:9d:6e:e7:5a:a8:bb:02:15:29:b0:4d:ea:
f3:ea:79:01:b3:91:da:10:7f:23:ae:85:66:da:25:
13:ab:e8:fc:78:18:fd:c5:c1:1d:fe:16:58:e9:d9:
05:81:9b:66:e4:fb:63:78:29:5d:e7:78:be:9d:3e:
3a:d7:27:af:be:95:a8:9b:bd:fa:1c:fa:c1:2e:e9:
0e:16:b7:74:0b:25:9f:ef:97:e4:19:40:c2:5b:78:
dd:07:25:5e:3d:eb:e6:1a:f9:29:b9:0c:5e:2c:c2:
52:f3:f4:c9:ed:09:82:ca:1a:55:a7:76:37:ab:47:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:5C:90:EA:5D:46:6B:0B:DC:83:99:91:7B:CF:C3:F9:71:1B:C8
X509v3 Authority Key Identifier:
keyid:03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/sbxckOpdRmsL3IOZkXvPw_lxG8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:d9:10:e2:01:92:a8:f8:4a:e2:f2:ba:97:5a:ee:79:cf:e4:
18:7e:f1:3b:40:0d:fe:8a:5d:1a:b0:f1:e1:4f:c0:96:ed:4c:
b5:db:a2:34:25:5d:a1:88:10:08:99:73:86:ec:8c:ec:73:0c:
22:27:8a:6a:bf:34:bb:10:3f:2a:e4:4f:2f:7f:2a:89:c5:ca:
01:1c:c5:9e:5a:35:7a:7f:ae:48:80:27:88:6d:83:46:02:1b:
25:44:7d:0c:f2:37:a1:fe:5e:33:fb:25:e5:e3:29:1e:7a:5b:
76:1b:fe:80:00:be:ce:a4:78:c0:12:da:b2:96:33:91:10:37:
e0:2c:78:f9:49:88:fa:54:fb:e0:0a:b7:05:bb:de:0e:a2:f8:
a1:7d:29:c7:20:e2:0d:2d:4e:e4:7e:e3:16:fb:e3:35:93:c4:
9e:ff:8e:5c:03:15:fd:fa:eb:23:c2:4d:70:2e:17:64:b1:9a:
76:9e:dc:73:dc:cb:ab:84:aa:35:1d:09:2e:e9:93:ea:6e:ff:
58:3a:ea:56:1e:f8:a3:1a:d2:a6:c5:92:3b:0a:2e:27:2b:75:
a1:37:2f:98:84:64:6d:5a:63:c9:38:89:03:7f:d2:af:ed:76:
44:2f:f2:1c:77:fd:9c:8d:8b:ea:aa:f4:4b:3e:ad:60:f8:db:
17:59:6b:f1
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ9MPRJNTm52u/fiLVuOYDdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjZlZTE5Y2M4YjQzNDAzZWUzNmE5NGEyZTgyZTQwMTll
MzUxZDEwHhcNMjYwNzEwMTMzNDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWJjNWM5MGVhNWQ0NjZiMGJkYzgzOTk5MTdiY2ZjM2Y5NzExYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOOiNE6vPpZFvGFSh+JQq6GZWxo8
as99P5b0KPlaHNhduFzmhGP5Fsy3vNNs1dnS/l52VQBk7QgRIcpbohKhTjnO1ARu
1yxBtNuKdFjHG6PuIISVBz5Yr3I3hyh9AEFXlueqAL+FSEi4UEdlLCUNBO2ebXCl
4L2hDMCISLxlBr+riCp2ArlSvIudbudaqLsCFSmwTerz6nkBs5HaEH8jroVm2iUT
q+j8eBj9xcEd/hZY6dkFgZtm5PtjeCld53i+nT461yevvpWom736HPrBLukOFrd0
CyWf75fkGUDCW3jdByVePevmGvkpuQxeLMJS8/TJ7QmCyhpVp3Y3q0f4fQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFLG8XJDqXUZrC9yDmZF7z8P5cRvIMB8GA1UdIwQY
MBaAFANm7hnMi0NAPuNqlKLoLkAZ41HRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJidUdjeUxRMEEtNDJxVW91Z3VRQm5qVWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNjQwOWUtZTcyZS00NTYyLTllNWIt
MTNiNGEyM2RhMmMzLzEvc2J4Y2tPcGRSbXNMM0lPWmtYdlB3X2x4RzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lNjQwOWUtZTcyZS00NTYyLTllNWItMTNiNGEyM2RhMmMz
LzEvQTJidUdjeUxRMEEtNDJxVW91Z3VRQm5qVWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjRgwDQYJ
KoZIhvcNAQELBQADggEBADPZEOIBkqj4SuLyupda7nnP5Bh+8TtADf6KXRqw8eFP
wJbtTLXbojQlXaGIEAiZc4bsjOxzDCInimq/NLsQPyrkTy9/KonFygEcxZ5aNXp/
rkiAJ4htg0YCGyVEfQzyN6H+XjP7JeXjKR56W3Yb/oAAvs6keMAS2rKWM5EQN+As
ePlJiPpU++AKtwW73g6i+KF9Kccg4g0tTuR+4xb74zWTxJ7/jlwDFf366yPCTXAu
F2Sxmnae3HPcy6uEqjUdCS7pk+pu/1g66lYe+KMa0qbFkjsKLicrdaE3L5iEZG1a
Y8k4iQN/0q/tdkQv8hx3/ZyNi+qq9Es+rWD42xdZa/E=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:39 2026 by rpki-client