Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/SwlwWC6qeIOhSte4Utz7PdUgqHg.roa
File: SwlwWC6qeIOhSte4Utz7PdUgqHg.roa (raw, json)
Hash identifier: yli4qoeWd8be0mGTI1Qdhmlvgjg03i5HcPN89QNf6ro=
Subject key identifier: 4B:09:70:58:2E:AA:78:83:A1:4A:D7:B8:52:DC:FB:3D:D5:20:A8:78
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 019F2368FB21BF690B7C0BD08D26F550A14B
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/SwlwWC6qeIOhSte4Utz7PdUgqHg.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7155
IP address blocks: 92.51.216.0/22 maxlen: 24
92.51.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:21:bf:69:0b:7c:0b:d0:8d:26:f5:50:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b0970582eaa7883a14ad7b852dcfb3dd520a878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6f:c2:bb:6c:36:86:10:bc:38:40:14:bd:f0:
73:ef:8f:2b:47:99:ff:d9:9e:d1:4f:1c:55:b1:3b:
bb:87:21:dc:f6:fd:f3:94:34:a9:a8:e0:cf:c1:a6:
0c:46:79:1e:14:64:78:8a:bb:69:17:57:32:e7:26:
ad:24:57:8f:2a:17:79:6d:c3:a7:c1:f8:c7:8a:2e:
9e:5f:0b:a9:1b:04:42:a9:ee:d4:17:c2:af:f8:ab:
c3:cf:e6:36:c4:15:83:7f:01:f7:2a:78:f7:88:92:
87:91:c9:64:1c:8d:50:8f:c2:3c:cb:5f:f6:0c:de:
5d:7b:98:2c:ea:dc:c9:ba:c7:86:bb:8e:19:60:a6:
13:d1:60:12:fe:b5:f1:7b:38:d8:30:79:2a:cc:94:
0c:e8:41:93:d0:83:13:cc:9a:6f:51:8c:2e:67:ab:
a6:ae:8a:c4:14:91:11:1d:54:65:0d:3d:97:d6:eb:
44:79:21:b0:75:89:bd:85:ce:86:9d:f5:80:30:40:
61:56:d5:e5:e6:73:85:31:c0:1b:d8:9f:c3:c9:ca:
58:0a:31:b7:86:ae:de:7b:24:c6:74:aa:f6:6e:cd:
ba:67:45:97:f3:c6:bd:f7:04:d7:cb:1b:b3:1d:6f:
b4:6d:52:0c:c4:95:e7:06:98:01:2a:3a:4a:49:60:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:09:70:58:2E:AA:78:83:A1:4A:D7:B8:52:DC:FB:3D:D5:20:A8:78
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/SwlwWC6qeIOhSte4Utz7PdUgqHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.216.0/21
Signature Algorithm: sha256WithRSAEncryption
50:b6:75:da:b5:ce:a2:ed:64:7b:5d:33:e9:b1:7e:b2:64:51:
cd:cd:e5:9d:74:03:15:c6:bc:07:a5:40:dc:4f:b6:4e:d9:51:
99:2c:1a:74:bd:ec:08:14:05:0b:a6:44:02:9e:1c:6a:6b:31:
31:a8:e3:8e:aa:65:60:e6:63:d2:8a:a0:4f:78:69:84:07:2f:
ed:d5:fa:10:f9:d2:b3:a7:bc:b7:38:00:67:50:b9:91:36:df:
21:ea:d1:f1:bd:f3:08:f0:18:ed:70:a7:82:e3:d7:03:05:42:
7e:1c:90:f8:c7:46:e4:44:f2:f0:55:28:37:51:e1:d6:70:02:
26:e6:df:8e:9d:1b:d0:5c:6a:1f:19:3b:c0:66:a3:7b:73:58:
ff:60:5e:04:e6:11:0e:ef:c0:90:7f:68:7c:db:a3:dc:51:9b:
af:b3:37:37:63:45:cc:19:a5:23:5d:14:35:a6:8c:06:b5:ce:
33:b0:bd:62:e7:ec:3f:19:9e:e8:9e:85:7b:4c:e9:28:0f:75:
21:2a:98:62:0e:48:0d:4a:85:27:fc:26:e8:16:04:02:5d:e9:
a0:4e:aa:c3:74:d3:3e:8a:53:04:ad:00:ca:67:5a:89:c0:b4:
f7:19:96:26:f3:17:a5:d2:b9:25:7b:1e:d4:3c:c6:fd:21:5c:
43:8f:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:48 2026 by rpki-client