Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/sweOVKgXsN3kVUYF6KimvpfAP0U.roa
File: sweOVKgXsN3kVUYF6KimvpfAP0U.roa (raw, json)
Hash identifier: ypb9r2C25en3AgJorcke1Z6J6YyhaP9BSnmzJXPiBxA=
Subject key identifier: B3:07:8E:54:A8:17:B0:DD:E4:55:46:05:E8:A8:A6:BE:97:C0:3F:45
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 019B7D5AC815FDEAE132922598CDE8159969
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/sweOVKgXsN3kVUYF6KimvpfAP0U.roa
Signing time: Fri 02 Jan 2026 06:17:39 +0000
ROA not before: Fri 02 Jan 2026 06:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57945
IP address blocks: 91.236.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:c8:15:fd:ea:e1:32:92:25:98:cd:e8:15:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Jan 2 06:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3078e54a817b0dde4554605e8a8a6be97c03f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:73:ef:2f:31:03:34:9a:9c:57:0d:95:4f:
d0:4f:e0:ee:56:e2:28:9a:10:12:49:1c:99:20:fa:
22:18:f0:ac:5d:05:ca:1f:41:34:28:21:96:60:e1:
f2:60:1c:5e:86:9c:79:12:5d:83:e8:d9:a2:e9:90:
ff:a7:8b:4a:59:81:96:2c:4e:4f:0d:a5:aa:ff:0a:
6a:a0:ff:ff:22:2d:64:1e:bc:00:20:86:f2:8b:9c:
b1:db:76:09:61:86:4b:f9:5d:ce:a8:31:80:aa:67:
c7:5d:e2:cd:9f:20:97:37:89:a9:8e:77:fc:f1:94:
d1:c9:ac:fc:88:ba:3b:dd:78:51:cb:52:af:3d:02:
c2:0f:33:f1:3f:c2:90:4e:80:8c:5c:9d:00:b9:f6:
d3:c4:cc:a9:2c:99:09:60:0e:96:9d:5f:e8:3f:67:
49:a6:a3:84:e8:89:fb:f6:84:9a:99:c4:96:9b:0b:
eb:6a:19:55:1d:57:bf:72:ee:34:cb:b2:53:e8:5f:
13:90:cc:fb:95:c5:7e:27:f3:9f:8e:ec:8d:2f:ab:
18:90:a1:2c:7d:37:8d:a6:8f:53:8e:4e:8d:76:8e:
70:05:6c:cb:98:de:f7:c6:8f:9b:d2:53:fd:90:48:
66:50:fd:46:c2:ba:3b:ac:39:af:7b:82:4d:77:6d:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:8E:54:A8:17:B0:DD:E4:55:46:05:E8:A8:A6:BE:97:C0:3F:45
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/sweOVKgXsN3kVUYF6KimvpfAP0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.233.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e6:6b:3e:94:81:af:05:59:52:19:f8:e1:86:44:c7:f1:eb:
e8:cd:e7:dd:8c:94:35:f7:73:f1:4b:39:94:3b:c1:d0:26:6e:
0b:e9:4c:04:12:42:3f:23:65:5a:90:7e:1b:e0:02:5e:ad:be:
c2:16:e8:50:05:a9:21:b2:f5:62:cd:3a:5f:1a:77:df:4b:08:
25:8e:f4:0f:f6:71:ba:92:82:fe:f9:2f:83:35:41:73:15:e2:
7c:ce:52:34:4a:2f:b0:0d:24:e6:cc:7e:8f:74:73:0a:d2:e9:
e3:9e:14:1e:99:01:ef:eb:01:4a:32:7a:7a:52:dd:6f:7c:87:
c8:48:08:0c:3a:89:ae:83:06:9d:bf:3d:d5:37:42:2b:53:97:
e5:23:49:e4:04:86:b5:0b:89:3b:a5:1e:a3:41:de:fd:d3:95:
60:8c:a5:a3:69:15:8e:c5:c7:51:3c:15:e8:b6:de:52:c3:60:
22:de:31:3b:3b:05:f7:7c:ad:c4:27:de:f6:b1:4e:4c:ee:3f:
9d:1d:5e:08:af:2a:06:5e:f5:c5:5a:eb:3f:47:22:d9:aa:75:
f4:55:7e:43:01:99:63:41:ec:91:bd:75:90:09:ff:e0:36:5a:
d0:df:9b:2e:8d:f7:57:f2:2c:30:4f:7d:84:c7:56:fe:29:67:
d5:0b:d9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:56 2026 by rpki-client