Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa
File: sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa (raw, json)
Hash identifier: Edp7rh57lWgI8CoINvbBB1ZSrUO0DPkC2eFiuG6KreQ=
Subject key identifier: B1:61:71:FA:FB:D9:EF:88:29:FF:49:8F:B6:2B:0F:02:F0:DC:F2:F4
Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial: 019CF670BD97385C67C3B0083BC9DDD02E8E
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa
Signing time: Mon 16 Mar 2026 11:38:29 +0000
ROA not before: Mon 16 Mar 2026 11:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 195.182.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:70:bd:97:38:5c:67:c3:b0:08:3b:c9:dd:d0:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Validity
Not Before: Mar 16 11:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b16171fafbd9ef8829ff498fb62b0f02f0dcf2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:65:4a:bb:00:02:6d:3a:fd:8f:74:a3:4c:
4c:d3:04:25:6f:83:87:48:b2:a8:e4:92:6c:e5:ba:
78:cf:e1:42:07:d0:b9:f4:f0:77:64:b7:f6:2b:c7:
97:17:0f:e0:e2:03:6b:b7:5a:bd:69:05:7c:a2:b8:
b5:66:b7:25:0e:e3:35:0b:f2:50:ed:a0:f8:1b:a0:
60:da:79:54:72:cb:b7:ec:0e:e3:32:27:73:39:ec:
38:db:2b:0e:f3:cf:84:97:c7:ad:10:07:35:71:87:
64:69:4c:8f:0f:8c:38:d7:dd:66:0b:2b:d8:4e:d3:
15:e3:c3:09:16:5d:c6:07:26:a2:7e:fe:5b:f9:fc:
cd:7e:7d:0c:9e:b9:36:26:30:59:8a:7d:f0:86:62:
7a:1d:b4:5c:70:6f:3f:53:25:d4:87:a2:76:15:0c:
df:25:fc:39:74:50:f5:93:ee:8b:73:d3:29:e8:ce:
51:23:17:70:b5:05:54:7a:90:f3:88:50:b1:23:47:
dc:6a:47:ae:81:36:38:d7:42:3e:90:ab:3b:ae:93:
81:1e:77:5e:bf:79:2f:ab:fd:9d:a6:f4:2d:ec:48:
82:a6:6a:65:83:eb:95:9f:ae:e5:dd:55:c7:82:5a:
b6:a0:40:4c:b7:50:2f:fe:04:fe:10:39:b9:ba:93:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:71:FA:FB:D9:EF:88:29:FF:49:8F:B6:2B:0F:02:F0:DC:F2:F4
X509v3 Authority Key Identifier:
keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.55.0/24
Signature Algorithm: sha256WithRSAEncryption
58:11:f0:5e:94:31:ce:8b:5c:79:95:56:31:4e:b0:09:44:08:
6c:8d:93:76:d0:88:0b:24:8f:0e:c6:81:0a:03:25:72:62:0f:
37:61:1e:14:97:ee:16:8b:36:8b:3e:ea:07:e0:cb:c4:c4:31:
31:8a:8a:ca:5e:ca:e9:ca:7a:48:4e:b4:95:83:0e:6c:3e:10:
d2:49:67:d3:98:aa:d0:87:15:35:58:ac:18:21:54:b5:b6:f7:
ef:d0:15:f2:73:ce:be:ec:b8:93:19:b6:a9:78:9e:f8:49:96:
8a:06:d9:cc:ec:31:12:7a:a7:20:ea:3d:9e:07:3a:e8:2d:d8:
82:65:15:c3:79:c8:52:c1:fa:df:25:2e:5a:2e:8b:c4:39:f7:
db:4e:7c:05:86:de:3a:04:14:c6:44:5d:f5:34:fc:f4:4f:2d:
45:5c:b6:9d:ad:af:35:d0:4b:2b:b9:47:42:66:4b:50:6b:0f:
5e:bd:19:58:e7:bb:da:b0:71:90:2e:c4:ae:28:93:5b:c1:21:
40:34:65:39:98:e4:18:00:1a:f9:77:af:bc:45:60:c3:7a:c7:
f3:37:b5:97:08:5b:49:0c:7c:a0:31:bc:3a:bb:f0:9e:c4:ff:
b4:96:c1:1a:23:48:0b:21:8a:f5:62:23:ee:a3:f6:df:f1:f6:
cf:a9:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:32 2026 by rpki-client