Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/B-SwTv_JYHW-bPMHYyjzazUm1aY.roa
File: B-SwTv_JYHW-bPMHYyjzazUm1aY.roa (raw, json)
Hash identifier: FKmRcjSQDrrR/evEGvY5dR26Sve4uEyZ1EBe8nolhQA=
Subject key identifier: 07:E4:B0:4E:FF:C9:60:75:BE:6C:F3:07:63:28:F3:6B:35:26:D5:A6
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 01A1BB6432EE132B85EA4B7247B8B19AFB18
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/B-SwTv_JYHW-bPMHYyjzazUm1aY.roa
Signing time: Sun 08 Nov 2026 13:41:08 +0000
ROA not before: Sun 08 Nov 2026 13:41:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210092
IP address blocks: 91.234.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:64:32:ee:13:2b:85:ea:4b:72:47:b8:b1:9a:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Nov 8 13:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07e4b04effc96075be6cf3076328f36b3526d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:b6:1b:04:da:12:a6:a9:a7:2d:1a:bb:07:
01:59:e4:6d:34:49:3e:33:66:cb:ab:17:23:1e:93:
88:70:29:57:ab:89:88:dc:49:b3:bd:93:a3:22:d4:
b2:63:66:73:00:d8:be:2d:51:1b:1f:8f:ce:b7:51:
12:73:44:8e:f0:04:f0:58:52:c3:85:b8:b7:b4:8f:
10:0e:3b:58:cb:a0:a3:3e:17:a5:6b:0a:27:fa:47:
8b:78:9a:f7:0c:ee:4a:cf:ff:c8:9f:ee:f2:d8:4d:
21:48:bb:1c:ff:ea:ad:65:47:f3:e8:41:6b:2c:c3:
08:04:3e:45:32:6c:bb:46:2d:7e:d6:a1:fe:41:1a:
d0:c6:44:75:7e:f5:5b:62:3f:c4:cc:9f:b3:39:13:
66:bf:97:b0:da:ae:f6:60:c8:cf:92:39:f5:5c:f5:
5d:9a:12:db:af:22:5d:c3:79:41:76:8a:0b:29:80:
b2:6e:01:72:2d:61:52:41:7b:e5:3b:f3:70:d4:09:
ec:79:54:bc:34:01:28:02:29:49:6e:9b:fb:d8:2f:
a3:65:79:ce:df:17:d4:d3:e5:a0:6e:3e:c3:aa:7f:
74:56:42:ad:5a:2c:8d:1b:a3:33:14:b1:67:73:45:
d7:53:85:c6:37:db:db:14:11:c0:7f:b4:e1:1d:ad:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E4:B0:4E:FF:C9:60:75:BE:6C:F3:07:63:28:F3:6B:35:26:D5:A6
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/B-SwTv_JYHW-bPMHYyjzazUm1aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.90.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:86:8d:8a:54:e1:b4:ab:ae:61:f0:72:35:a0:2f:ae:36:1d:
7e:5e:86:46:65:f3:aa:70:67:41:bc:31:3c:d1:ff:1e:b4:7f:
7e:f2:e2:4a:a6:0d:fa:23:5b:79:78:5c:c6:9e:04:f5:5c:46:
0c:92:5a:40:d4:4b:92:ea:7d:5d:0b:58:43:dc:0c:6d:0c:80:
dd:ee:ac:4a:06:85:f2:ac:42:cf:1b:50:36:48:90:7a:93:e0:
88:8f:39:63:64:32:e7:c2:11:50:8e:b5:c5:d1:a9:11:b6:b4:
be:be:cd:5a:f3:11:07:31:0b:ca:ae:f1:f3:cd:3a:bb:0e:f2:
5c:66:08:de:20:d9:8c:4a:b7:70:d8:d8:e0:12:b0:22:e2:ff:
a5:11:1a:94:d3:9e:05:64:78:69:e2:46:4b:3d:67:dc:d2:09:
e4:ee:bb:51:2a:d5:6f:cb:cb:30:9f:93:10:0f:4c:39:a0:19:
19:e1:c3:f9:3c:87:71:f1:4e:fc:83:39:ef:ea:c3:d3:84:12:
91:bd:15:d5:75:ba:33:87:35:35:15:71:5a:27:33:5e:33:e2:
be:a5:d9:6f:ce:7f:d6:d7:22:5b:48:0c:b1:de:be:73:47:b9:
00:67:0d:28:f2:32:f9:88:3b:ff:96:12:81:0e:bc:e4:b5:52:
78:f5:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:38:38 2026 by rpki-client