Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sw-YdJtO7LqDRDnxiy4Ot9H11mg.roa
File: sw-YdJtO7LqDRDnxiy4Ot9H11mg.roa (raw, json)
Hash identifier: x7kfkuvHS2v5S0oP4sdYGQmb6qEX7ZB8cPgf3bWxfMI=
Subject key identifier: B3:0F:98:74:9B:4E:EC:BA:83:44:39:F1:8B:2E:0E:B7:D1:F5:D6:68
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019933DD1F7E6B22B4A29B456739785F4811
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sw-YdJtO7LqDRDnxiy4Ot9H11mg.roa
Signing time: Wed 10 Sep 2025 13:42:33 +0000
ROA not before: Wed 10 Sep 2025 13:42:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 83.137.157.0/24 maxlen: 24
88.209.205.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:dd:1f:7e:6b:22:b4:a2:9b:45:67:39:78:5f:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 10 13:42:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b30f98749b4eecba834439f18b2e0eb7d1f5d668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:1d:52:64:2e:95:0a:ac:ab:d9:29:2d:9c:
f7:65:74:ac:7e:39:6b:ee:ad:cc:04:a4:77:c6:f7:
f9:14:75:f9:89:ee:17:eb:30:d6:ee:a6:ac:67:b3:
e3:f4:ff:8b:b9:e5:03:95:5b:35:fe:cd:64:87:18:
da:bf:86:8e:96:fd:a6:5e:ab:2c:d0:86:f4:35:c4:
2b:f4:92:b7:d3:2e:30:b6:d8:43:97:3d:73:1a:81:
2d:13:fe:05:8e:f0:6b:9c:9a:f8:a7:44:c8:24:59:
5f:f4:05:80:da:2f:b1:00:67:1e:90:93:e4:32:74:
a0:a2:2d:4d:69:31:40:e9:d5:03:54:1f:58:cc:3e:
67:d6:81:90:db:2b:e5:e0:a5:8b:49:e2:10:f6:13:
39:4b:30:96:68:55:30:9d:5f:fb:e1:93:1f:ed:27:
07:ab:53:ae:72:8a:90:3d:93:e0:61:de:67:57:11:
dd:c9:4d:d5:74:2a:d7:a4:43:e7:09:e7:bd:56:7c:
d2:e8:cf:10:6c:2b:c7:53:0a:6b:08:20:6c:6e:81:
3d:4e:af:e4:b9:68:00:9d:dd:1f:df:1c:5e:39:d9:
f9:c9:d0:b2:09:ea:9d:31:2c:9e:9f:28:a6:db:fc:
26:39:19:88:3d:42:22:0a:29:4c:13:33:a0:8a:19:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:98:74:9B:4E:EC:BA:83:44:39:F1:8B:2E:0E:B7:D1:F5:D6:68
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sw-YdJtO7LqDRDnxiy4Ot9H11mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.157.0/24
88.209.205.0/24
92.52.217.0-92.52.218.255
Signature Algorithm: sha256WithRSAEncryption
18:21:f5:1f:4b:de:b3:fe:76:c0:37:a9:66:a3:90:5e:01:c0:
02:c8:7a:75:d1:57:ed:24:b6:34:c0:b3:bc:9f:1b:0b:2c:61:
8e:80:01:c6:12:e4:22:18:dc:8b:73:55:d7:2b:4d:28:6f:69:
1d:ca:65:66:59:75:54:fe:26:cc:a2:8f:e6:38:bf:5b:21:08:
d8:e8:c1:1b:8b:76:58:18:49:68:ba:8a:b0:c6:78:00:1e:42:
58:37:ea:ec:b2:df:da:7f:81:9d:9e:8c:3a:66:b4:99:d5:08:
25:b5:08:46:09:04:fc:27:a6:5b:41:9f:84:e5:f0:8e:20:ab:
2e:eb:c5:b6:68:7d:ae:6c:cf:f9:a6:9f:ce:0a:22:7f:0e:d4:
0a:71:76:8e:91:0f:c3:f6:a6:65:81:ce:c9:0a:63:10:ee:9a:
6b:83:bc:53:3d:9f:0d:5e:32:f6:a4:3b:01:54:03:d4:d0:86:
af:04:6c:ad:02:80:40:d8:2b:f4:37:50:1b:02:2e:4f:91:da:
ac:0e:86:97:b9:e7:e7:16:6a:e5:55:6c:9b:7c:a8:8b:bd:4d:
e5:36:d3:f2:6d:5f:9f:13:ef:cb:59:fd:24:0f:20:04:bd:a5:
78:94:3c:f2:1e:e4:e2:11:48:c9:c8:f5:06:f7:4b:48:4f:28:
1c:5e:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:31 2025 by rpki-client