Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/swHUmgqcmOWK4XXKxg1o7gCq6Bo.roa
File: swHUmgqcmOWK4XXKxg1o7gCq6Bo.roa (raw, json)
Hash identifier: UtwBABdHmWHq1XBvduftz7S+v1SdOKX2c6FGazJOJbo=
Subject key identifier: B3:01:D4:9A:0A:9C:98:E5:8A:E1:75:CA:C6:0D:68:EE:00:AA:E8:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198BCA1EC8936BF23101B21A8A31A2682D6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/swHUmgqcmOWK4XXKxg1o7gCq6Bo.roa
Signing time: Mon 18 Aug 2025 10:03:05 +0000
ROA not before: Mon 18 Aug 2025 10:03:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 94.183.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:a1:ec:89:36:bf:23:10:1b:21:a8:a3:1a:26:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 18 10:03:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b301d49a0a9c98e58ae175cac60d68ee00aae81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:79:96:94:42:09:37:4a:63:a5:c2:2b:04:
ed:ae:47:d3:61:d1:c3:36:29:eb:0d:0d:a3:ed:51:
53:fd:aa:53:e2:16:cb:cd:55:96:75:98:22:14:71:
93:74:6c:11:cd:6f:61:8a:82:18:b7:93:a1:38:37:
65:75:30:8d:f7:f7:51:0d:11:55:14:9a:97:d9:69:
18:bf:bb:28:17:05:cb:e8:65:34:7a:c8:be:65:48:
59:14:df:0e:fa:4a:e9:05:73:78:83:c6:82:fd:bc:
4e:d2:09:62:6f:f3:cc:c4:19:9b:8c:72:7f:84:5b:
2e:5d:84:e5:51:6e:58:f9:39:08:62:16:fe:2f:a1:
f8:bc:3b:5f:c1:c7:3b:d7:f9:48:0d:43:2f:03:d0:
b1:31:ee:71:94:a8:f3:df:96:02:1b:2a:cd:75:83:
b7:39:29:8c:61:88:d3:1b:01:bb:7f:e8:bd:8b:c7:
a3:cc:51:d9:b0:35:6f:99:0e:f4:d3:33:03:2f:80:
d1:a0:eb:cb:23:98:55:04:5a:09:d2:05:d5:8a:5b:
a4:9c:7a:48:42:d1:f9:b8:bf:78:98:0e:80:3f:79:
1f:30:8c:0e:a3:47:b9:77:58:ec:e9:e7:ea:18:cc:
2d:c0:91:c8:3c:d7:0d:8e:34:40:fd:24:78:2f:69:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:D4:9A:0A:9C:98:E5:8A:E1:75:CA:C6:0D:68:EE:00:AA:E8:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/swHUmgqcmOWK4XXKxg1o7gCq6Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.179.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d4:59:2b:fe:59:c7:5e:1f:2e:05:b3:be:a2:17:52:90:22:
a4:5b:5d:bb:16:bb:19:07:17:b1:ee:68:39:2c:de:08:81:bb:
9e:3b:61:3a:70:09:e7:68:8a:bc:17:e8:66:06:1e:92:e8:96:
41:79:72:57:f5:8f:65:2d:f7:2b:8d:9b:76:fc:ed:a8:1a:38:
ae:a1:ec:37:99:2c:33:5c:7d:a2:d7:71:8d:89:e3:13:71:f8:
e1:29:48:5b:dd:e3:da:ab:66:a7:85:da:3b:e6:e7:42:4d:10:
5c:46:3d:4d:ee:3a:e7:0a:a6:41:98:19:79:af:a5:53:58:66:
22:21:8f:6a:c8:e6:b8:ad:7a:83:a1:28:c6:cf:b6:06:6d:92:
4c:19:e2:83:85:c8:3d:78:55:12:e4:17:a7:d0:14:df:ce:a5:
28:8c:4c:1b:ed:1e:34:b3:f3:b5:59:b0:20:27:ab:ae:2f:69:
d2:7a:15:20:1b:e6:ed:65:9e:1c:c8:50:ce:cd:87:f5:e3:78:
c7:8e:31:53:f3:d2:ee:17:34:01:35:c2:d6:c8:19:ad:46:27:
82:f5:41:68:cb:bc:88:e4:e0:55:01:49:3e:17:05:38:e3:7e:
67:8a:d9:62:1b:8b:67:93:48:78:9a:fb:3b:29:fd:f6:01:87:
21:71:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:12 2025 by rpki-client