Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/OS9El_lE1YFidGkD6u7b5PW_Swk.roa
File: OS9El_lE1YFidGkD6u7b5PW_Swk.roa (raw, json)
Hash identifier: kc1xeHQSX9yaoh8FDTkRuRX1sg9TtwB9rWtzmmLQbkU=
Subject key identifier: 39:2F:44:97:F9:44:D5:81:62:74:69:03:EA:EE:DB:E4:F5:BF:4B:09
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 019CF263738368DE910162D2FCAEC38F983B
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/OS9El_lE1YFidGkD6u7b5PW_Swk.roa
Signing time: Sun 15 Mar 2026 16:45:29 +0000
ROA not before: Sun 15 Mar 2026 16:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32346
IP address blocks: 209.248.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:63:73:83:68:de:91:01:62:d2:fc:ae:c3:8f:98:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Mar 15 16:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=392f4497f944d58162746903eaeedbe4f5bf4b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:6c:e8:7c:be:d5:35:13:5f:29:0d:eb:ef:
9d:24:b2:d8:c5:b9:4b:44:99:6c:6a:01:95:c3:72:
64:8b:0f:c0:b3:4e:36:47:34:e9:1a:02:db:1c:44:
5e:69:3f:b6:e7:10:dc:72:12:03:f0:8f:58:d2:ca:
e7:d3:30:2c:f6:d8:b7:5a:5d:e9:c2:42:6c:76:05:
8c:d1:7b:0f:cf:10:87:03:f2:eb:3e:e6:c6:fa:64:
a7:39:a9:b5:53:78:d9:b7:d9:f8:1f:d8:e7:5b:8c:
02:ff:a7:fc:73:5e:d8:e6:12:de:bb:19:3d:8c:5b:
c0:be:b4:ad:19:24:c8:63:21:52:a2:49:7b:04:2e:
61:2b:71:35:f5:87:1e:7f:cb:c0:b7:13:c6:3d:e8:
74:0b:68:75:f1:31:ed:bd:50:69:4d:47:38:d1:09:
63:ec:e7:f3:4f:e4:fd:f0:3b:f8:5b:d1:a3:27:c1:
46:f8:5b:b5:09:d8:59:31:ad:5c:a0:b5:70:dd:2e:
d5:af:6b:91:ff:b8:f7:4c:af:94:0b:86:98:ea:f5:
4d:e3:d6:34:bc:50:66:e3:e6:bf:c2:de:d8:02:58:
3d:2d:e3:da:28:ac:91:5f:1c:e9:c4:d9:c4:45:0c:
0b:e8:dd:75:33:a3:b3:90:99:3f:33:f3:93:63:68:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:44:97:F9:44:D5:81:62:74:69:03:EA:EE:DB:E4:F5:BF:4B:09
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/OS9El_lE1YFidGkD6u7b5PW_Swk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:ff:eb:ee:d7:46:95:1c:9b:f6:12:20:86:37:07:59:c0:87:
5d:1c:98:50:1e:76:19:82:5a:5a:04:f2:0e:fa:8f:8d:58:ca:
92:fd:9c:cf:d2:a3:1e:92:c8:81:23:72:02:38:00:0a:9f:b7:
9d:02:8c:33:54:f3:44:81:b6:f1:b9:f8:fc:49:81:c5:4a:e5:
e4:70:9b:2b:70:64:eb:1b:dd:e3:5b:f0:f8:b2:29:f9:d9:84:
31:63:fc:1c:55:7b:be:fb:62:a5:5d:69:7c:f6:64:33:34:2a:
a1:9b:71:b7:a3:93:5a:2c:cb:52:a7:13:90:94:e0:e1:d0:41:
89:f4:6f:a0:82:2d:27:4b:60:ee:f1:ef:d3:9f:b5:b2:40:1a:
9d:bb:df:06:a2:94:93:e2:80:bd:76:f1:43:9f:47:2c:1a:12:
7d:fb:c1:49:76:b1:03:2f:ae:77:1d:51:20:76:12:53:4b:42:
a5:09:f3:bb:03:15:82:91:91:81:ee:75:9e:a8:ee:ad:4a:68:
60:3f:cf:94:77:8d:1f:f1:b3:43:ae:18:4b:13:79:14:4c:b8:
85:75:b2:32:53:3e:5f:ea:e9:31:c6:38:e5:7f:cd:62:83:31:
14:6b:bd:f1:c5:2c:8b:c5:94:cb:f9:48:e4:4a:c7:c0:57:ed:
e6:ce:b6:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzyY3ODaN6RAWLS/K7Dj5g7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTI3MjYxMTEzOWYxNWQwMzdkN2E0YmU1NDU2OTZjZDI4
NTM4NjcwHhcNMjYwMzE1MTY0NTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTJmNDQ5N2Y5NDRkNTgxNjI3NDY5MDNlYWVlZGJlNGY1YmY0YjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOxs6Hy+1TUTXykN6++dJLLYxblL
RJlsagGVw3Jkiw/As042RzTpGgLbHEReaT+25xDcchID8I9Y0srn0zAs9ti3Wl3p
wkJsdgWM0XsPzxCHA/LrPubG+mSnOam1U3jZt9n4H9jnW4wC/6f8c17Y5hLeuxk9
jFvAvrStGSTIYyFSokl7BC5hK3E19Ycef8vAtxPGPeh0C2h18THtvVBpTUc40Qlj
7OfzT+T98Dv4W9GjJ8FG+Fu1CdhZMa1coLVw3S7Vr2uR/7j3TK+UC4aY6vVN49Y0
vFBm4+a/wt7YAlg9LePaKKyRXxzpxNnERQwL6N11M6OzkJk/M/OTY2gYJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkvRJf5RNWBYnRpA+ru2+T1v0sJMB8GA1UdIwQY
MBaAFJPicmEROfFdA316S+VFaWzShThnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1KeVlSRTU4VjBEZlhwTDVVVnBiTktGT0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kYjQyYWItNDljYy00MjdkLTg2Y2Et
NDdhMmMyNTBlNWFhLzEvT1M5RWxfbEUxWUZpZEdrRDZ1N2I1UFdfU3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9kYjQyYWItNDljYy00MjdkLTg2Y2EtNDdhMmMyNTBlNWFh
LzEvay1KeVlSRTU4VjBEZlhwTDVVVnBiTktGT0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0fggMA0G
CSqGSIb3DQEBCwUAA4IBAQBv/+vu10aVHJv2EiCGNwdZwIddHJhQHnYZglpaBPIO
+o+NWMqS/ZzP0qMeksiBI3ICOAAKn7edAowzVPNEgbbxufj8SYHFSuXkcJsrcGTr
G93jW/D4sin52YQxY/wcVXu++2KlXWl89mQzNCqhm3G3o5NaLMtSpxOQlODh0EGJ
9G+ggi0nS2Du8e/Tn7WyQBqdu98GopST4oC9dvFDn0csGhJ9+8FJdrEDL653HVEg
dhJTS0KlCfO7AxWCkZGB7nWeqO6tSmhgP8+Ud40f8bNDrhhLE3kUTLiFdbIyUz5f
6ukxxjjlf81igzEUa73xxSyLxZTL+UjkSsfAV+3mzra9
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:23 2026 by rpki-client