Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/SW6Tanlspu32Q4YoMd-Rt7HAHNs.roa
File: SW6Tanlspu32Q4YoMd-Rt7HAHNs.roa (raw, json)
Hash identifier: aL36fgXsHk04MAwwOrDjHIzxG5aLhcW1gldiD4rfIMM=
Subject key identifier: 49:6E:93:6A:79:6C:A6:ED:F6:43:86:28:31:DF:91:B7:B1:C0:1C:DB
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A1A1180B3B609B0AFB9D43197AEB9BF9F7
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/SW6Tanlspu32Q4YoMd-Rt7HAHNs.roa
Signing time: Tue 03 Nov 2026 11:07:49 +0000
ROA not before: Tue 03 Nov 2026 11:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 153.56.242.0/24 maxlen: 24
153.56.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:18:0b:3b:60:9b:0a:fb:9d:43:19:7a:eb:9b:f9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Nov 3 11:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=496e936a796ca6edf643862831df91b7b1c01cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:f2:c6:fa:f5:6c:35:a8:51:a8:5b:e2:42:
8d:61:2c:79:fa:e8:61:81:ce:6d:d5:ac:c5:94:3c:
24:10:7c:3a:d8:ff:de:30:fd:2c:55:25:55:99:bf:
74:b7:35:86:8f:0e:34:d6:4a:8e:2a:cb:7c:a9:68:
a8:ff:5f:51:5b:4f:af:fa:ee:b2:ff:da:ea:7d:b3:
40:cb:d6:da:02:d3:af:08:4a:61:53:32:e8:57:a2:
01:96:bf:c8:62:db:4c:7f:cd:c3:97:ca:33:92:91:
ff:a5:73:87:20:cf:d5:0d:90:93:e7:a6:a8:74:a7:
68:2b:68:4e:b2:e0:b9:f4:03:d2:dc:0d:0d:bc:8a:
ee:94:78:48:14:2e:2c:cb:92:33:09:f5:a6:fc:54:
fa:48:15:b7:b8:20:96:ce:ca:60:22:c8:e1:55:b5:
69:c7:d1:9f:04:3c:1b:99:05:2f:83:bb:40:c2:c8:
1e:65:07:89:18:e3:b1:6a:29:0d:f4:d6:2f:a2:34:
6a:d3:7a:d0:af:cb:e8:e6:7f:11:5e:8c:44:1f:6e:
09:c2:e8:83:e4:7e:51:e5:1d:27:f0:22:ea:c1:9d:
63:8e:8a:45:eb:21:39:b0:6c:41:d9:48:fc:f6:93:
c9:55:1b:93:be:4e:60:ec:fa:f8:05:59:21:41:a7:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:93:6A:79:6C:A6:ED:F6:43:86:28:31:DF:91:B7:B1:C0:1C:DB
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/SW6Tanlspu32Q4YoMd-Rt7HAHNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.242.0/23
Signature Algorithm: sha256WithRSAEncryption
15:7f:da:96:d7:57:f7:64:52:cb:74:de:8c:75:57:a9:52:3e:
aa:b6:0c:84:ba:3d:c6:78:0c:aa:d5:5a:c5:45:28:11:28:d4:
6f:a1:a7:40:70:16:d6:39:4f:2c:ca:c8:fe:c3:83:9c:29:3b:
8a:81:3e:2b:bc:95:16:ad:e0:da:f5:cd:87:36:e9:be:20:17:
1e:2f:a2:20:be:a2:33:78:ea:0a:b4:c1:a8:48:87:99:ad:7d:
4a:be:d1:23:00:8f:cd:19:20:92:95:59:a7:07:6f:8c:a5:ea:
1d:84:43:7f:a9:c8:55:7f:4c:3e:cf:94:9a:6d:33:ef:6f:f2:
ec:58:00:72:00:66:22:72:e8:25:ea:e9:73:bb:84:a2:fd:fa:
91:65:22:8e:2f:7a:32:02:5c:db:72:59:98:99:85:ba:fd:dc:
0b:f9:8a:e9:03:fe:43:df:85:48:1a:d9:78:cd:68:98:c7:3e:
5d:78:bf:d6:a2:23:ba:d4:98:8b:23:09:82:eb:84:f1:cb:cc:
58:b1:d3:a5:3f:e6:3a:fe:2a:06:b8:2b:dd:f1:7e:be:11:4a:
31:38:14:2f:d2:4e:27:a9:17:74:d4:85:10:70:2b:59:e0:3f:
36:5c:65:3e:57:91:36:3e:e6:b5:92:af:6b:b8:c2:bf:ce:f5:
af:f1:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:23:56 2026 by rpki-client