Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/SMSgelubJSOLBVZ-smCvqnI-Ohw.roa
File: SMSgelubJSOLBVZ-smCvqnI-Ohw.roa (raw, json)
Hash identifier: 8Ebh+rjESi3nt5+4WFx9Ng5uGDoI/GGkzTBScBfsOR4=
Subject key identifier: 48:C4:A0:7A:5B:9B:25:23:8B:05:56:7E:B2:60:AF:AA:72:3E:3A:1C
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 019D00E87D3803087FB34C3173C0BE3E1A65
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/SMSgelubJSOLBVZ-smCvqnI-Ohw.roa
Signing time: Wed 18 Mar 2026 12:25:29 +0000
ROA not before: Wed 18 Mar 2026 12:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 37.16.74.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:e8:7d:38:03:08:7f:b3:4c:31:73:c0:be:3e:1a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Mar 18 12:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48c4a07a5b9b25238b05567eb260afaa723e3a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:81:92:37:bc:2f:10:69:ce:77:e7:41:a7:69:
61:9d:be:f4:78:e2:df:21:64:ab:6d:c0:2a:0c:38:
54:7c:1d:f4:68:94:68:42:b4:58:9f:bc:8d:59:e1:
1a:f6:6f:f2:d1:60:00:7d:48:fb:78:d1:14:40:aa:
a8:93:28:42:6f:4d:98:24:6a:ee:a1:e6:be:2b:33:
f0:bb:23:b6:d1:61:cb:c7:a6:df:32:9f:e2:7e:6f:
40:28:af:0d:4d:89:e9:66:ec:d0:fd:31:7c:d7:a7:
92:29:8c:7f:d6:bf:fe:42:4d:0d:6b:f0:a7:c7:3c:
2e:81:9c:14:79:99:bd:aa:14:93:97:69:66:ca:c2:
63:08:70:d6:27:2c:55:ea:14:c0:7b:f2:75:b6:f8:
63:2c:b8:de:7a:35:54:2b:61:92:0a:d1:11:77:c6:
f9:1d:e5:cf:19:c9:cd:97:d5:7f:9c:ad:b3:59:f8:
fe:e0:1b:b1:49:68:05:dc:35:7f:71:48:bc:80:40:
70:3e:b9:64:c7:69:ff:f7:5e:88:a3:be:fe:1d:32:
e3:1c:0c:f5:70:d1:64:6c:e8:2d:43:42:93:fd:cb:
51:a0:be:bd:9f:a5:76:46:f2:7e:90:94:d2:6d:4f:
b3:a2:c0:bb:34:e4:9c:4b:47:83:17:70:d2:46:be:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:A0:7A:5B:9B:25:23:8B:05:56:7E:B2:60:AF:AA:72:3E:3A:1C
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/SMSgelubJSOLBVZ-smCvqnI-Ohw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5e:2f:a3:97:49:ee:e7:8c:38:52:9f:98:d4:ec:0e:f1:fe:
e6:ad:9f:97:fb:e4:33:13:28:25:bd:c7:c0:e3:3f:94:a9:ce:
c9:bd:d6:8f:91:38:5c:94:7f:aa:a7:09:23:5c:b5:37:c9:5f:
36:bc:3b:6d:8f:29:c8:24:af:57:ee:59:8e:0e:a6:95:d4:44:
c9:4b:e3:42:5a:d9:53:27:39:59:8c:c5:7b:84:77:0e:02:36:
53:54:c9:9a:df:ce:b8:33:1a:36:ae:7e:13:44:16:e6:39:5a:
25:20:43:aa:57:dd:e9:46:57:6c:9e:0d:41:e9:c0:e5:51:03:
b0:85:36:c7:d5:61:cc:30:d0:fe:29:5f:a1:bb:70:c7:86:9c:
51:4e:86:4e:5b:6d:0e:2b:6c:c3:eb:c9:e5:3b:3b:e3:f8:52:
09:78:6c:9b:5b:a5:bb:ca:6c:6f:e5:15:56:24:e1:fe:f7:f7:
ce:7a:3f:32:4d:a2:eb:b6:c0:7e:0f:22:bc:7d:91:8a:f5:a1:
c7:1f:94:29:2f:a0:f7:26:0d:ec:b8:15:5f:16:03:cc:c9:7b:
59:6e:75:73:b5:aa:f4:24:00:39:4f:f3:73:77:e1:02:15:41:
ed:52:e3:c6:da:2d:c6:f2:6c:39:b4:6f:b2:7e:18:0f:55:25:
ab:ad:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:55 2026 by rpki-client