Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/swtfhREMGBdM94COnjWKNQH-uvw.roa
File: swtfhREMGBdM94COnjWKNQH-uvw.roa (raw, json)
Hash identifier: eVXbh4q/CHYC8OtafAnCyVe2lhsfVD/4dajOsOYXNiU=
Subject key identifier: B3:0B:5F:85:11:0C:18:17:4C:F7:80:8E:9E:35:8A:35:01:FE:BA:FC
Certificate issuer: /CN=de095ad023a7ffbe45314e3a849058b550927dc3
Certificate serial: 019F2368C5E4F65D4C01A98CB02C133D9B4B
Authority key identifier: DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/swtfhREMGBdM94COnjWKNQH-uvw.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39449
IP address blocks: 77.95.160.0/21 maxlen: 21
88.151.80.0/21 maxlen: 21
178.20.80.0/21 maxlen: 21
185.52.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c5:e4:f6:5d:4c:01:a9:8c:b0:2c:13:3d:9b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de095ad023a7ffbe45314e3a849058b550927dc3
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b30b5f85110c18174cf7808e9e358a3501febafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:64:91:89:ab:f5:a9:78:8f:14:80:03:00:
a4:8a:f3:99:48:a0:18:09:f6:fc:8b:00:74:26:6b:
2a:81:8f:16:72:ff:03:f6:0c:f6:c0:92:a7:68:d2:
99:3d:ec:22:a5:a1:06:92:21:b9:45:c7:e5:fb:e4:
05:97:01:e7:46:67:57:3c:53:9a:38:ee:3f:b8:b5:
f7:02:8c:1e:b4:e1:86:1a:59:e6:cc:1d:f2:4e:08:
24:89:0b:0f:e6:ea:c6:8b:64:1f:86:38:b3:48:2f:
c6:62:1a:3b:89:f3:c0:49:97:3a:bf:2a:d8:70:17:
d0:af:30:83:ce:9c:21:ba:0a:01:52:44:e5:e8:8e:
d7:69:76:51:46:6e:be:fe:7a:fc:6f:ab:29:83:61:
e5:b8:93:0d:37:6c:ed:04:75:0c:7a:ee:98:9f:65:
59:60:cd:3d:f6:96:50:59:96:75:15:85:c9:16:65:
83:a4:eb:3e:c1:af:76:6a:0a:7c:d7:29:d7:1b:36:
c3:e8:95:99:97:1a:b4:d0:be:84:7d:2b:e2:53:9a:
74:ca:7e:1c:56:f9:9f:ee:92:f5:e4:ec:9a:8d:96:
9b:41:8c:59:bb:ca:eb:5e:bd:22:ee:a9:87:4b:92:
69:ea:a9:73:3f:74:47:b3:2f:fc:78:a5:0b:61:38:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:5F:85:11:0C:18:17:4C:F7:80:8E:9E:35:8A:35:01:FE:BA:FC
X509v3 Authority Key Identifier:
keyid:DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/swtfhREMGBdM94COnjWKNQH-uvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.160.0/21
88.151.80.0/21
178.20.80.0/21
185.52.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:e0:ad:06:70:63:69:cb:f5:c9:fb:a5:07:d0:9c:47:ae:f7:
a5:06:7a:dd:06:7e:d4:db:df:d9:f4:cf:10:9b:1e:a6:da:e0:
19:2d:02:6e:32:90:2e:21:b8:22:ca:6f:d2:94:98:57:90:8a:
ba:92:7d:fc:cd:b1:c0:ae:14:7a:40:85:1c:dd:ae:bb:6a:7c:
fd:b0:a3:12:aa:c7:b1:f0:3a:a1:1e:08:ec:9c:0e:9f:42:af:
17:c2:21:0a:90:a8:39:47:8d:22:7a:b9:b4:53:5a:b5:ca:f0:
fa:7c:e1:a4:bd:ac:8e:7a:a7:a8:c4:36:1a:d8:eb:aa:3c:99:
08:c0:ad:63:b7:4d:f7:49:d8:94:d8:48:93:9c:e4:83:60:f9:
0b:f7:25:c5:70:e6:93:aa:5d:b2:88:a9:f2:86:f6:42:d8:4e:
03:57:dd:53:e8:49:d9:6e:5c:3d:ea:4b:57:ee:30:18:b5:20:
01:ee:a3:e6:9b:f8:65:a2:2b:cd:07:b2:26:09:0a:01:8e:a0:
d3:05:74:3d:21:74:ae:96:1e:11:ee:37:8c:3d:63:1e:c9:6a:
af:94:d8:86:ce:6e:e5:0c:bd:ac:e6:57:b1:8b:6e:35:7f:83:
26:eb:67:85:ad:35:ca:47:aa:2e:3e:32:9e:d2:49:78:38:38:
cb:cb:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:42 2026 by rpki-client