Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Smw8KxULxNV1U3wUVaTgjVcAEN0.roa
File: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (raw, json)
Hash identifier: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=
Subject key identifier: 4A:6C:3C:2B:15:0B:C4:D5:75:53:7C:14:55:A4:E0:8D:57:00:10:DD
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019F469DA3366C0D5808AF04E869D54FF623
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Smw8KxULxNV1U3wUVaTgjVcAEN0.roa
Signing time: Thu 09 Jul 2026 11:22:43 +0000
ROA not before: Thu 09 Jul 2026 11:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 14.102.8.0/24 maxlen: 24
91.200.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:9d:a3:36:6c:0d:58:08:af:04:e8:69:d5:4f:f6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jul 9 11:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a6c3c2b150bc4d575537c1455a4e08d570010dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:9c:27:1e:96:f4:6e:3a:56:95:90:fd:9e:
b4:88:31:15:f9:6a:01:60:ee:52:2a:3a:41:26:36:
e4:97:a3:3e:e6:fa:9a:f2:1a:9e:d9:b7:68:99:13:
23:0c:49:f0:3b:5d:17:77:ff:5d:a3:fb:41:98:1c:
56:a6:0e:ab:14:48:c2:51:ff:b3:ec:95:25:e1:42:
e6:82:50:86:3d:d2:73:87:57:ff:6a:0a:5f:96:ed:
37:33:51:c2:2c:94:ac:eb:d6:32:2f:c2:8c:15:2b:
f0:21:bf:8e:de:92:f5:0c:82:e5:0e:2c:00:71:89:
eb:42:05:b2:1d:c5:96:e0:65:35:7d:53:88:90:91:
fa:88:60:0e:74:a0:85:d5:a5:aa:98:9a:2c:dd:4c:
d3:b5:f8:27:8d:93:d8:04:78:b1:78:65:d4:f0:ee:
6d:c4:9a:db:40:88:b7:70:09:ba:ed:74:d0:bf:59:
5a:fc:d0:3e:3b:fe:62:11:cc:34:60:e8:ff:af:8e:
4a:8e:3c:83:42:d2:44:d8:0c:a7:af:a5:55:c5:8b:
0b:4d:e7:85:6d:1b:e0:ab:8e:57:8c:3a:60:6b:a1:
ce:13:f6:9c:b2:60:ab:53:46:6f:99:8b:b0:ef:5f:
53:ff:ec:81:f7:81:b8:65:ba:d6:39:ea:7a:46:65:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:3C:2B:15:0B:C4:D5:75:53:7C:14:55:A4:E0:8D:57:00:10:DD
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Smw8KxULxNV1U3wUVaTgjVcAEN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.8.0/24
91.200.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:77:10:b7:0b:25:cb:3c:b3:5f:6c:7d:f0:25:84:23:5b:1c:
4e:b9:db:0b:06:db:93:94:81:6b:ac:04:a8:fb:96:20:3e:42:
1d:6f:f9:e4:77:07:0e:9f:3c:2c:c1:eb:60:a5:b4:6f:9b:42:
1d:e8:6a:2a:21:42:43:52:30:66:ff:b3:cf:45:b6:a3:02:98:
02:6a:a4:89:14:da:4c:95:d6:b8:db:e8:18:85:78:af:83:6a:
4e:16:b3:06:08:11:0e:b8:c2:5e:31:3f:5c:ec:db:71:5b:b2:
d9:23:f4:8d:f8:f1:fa:a9:fa:88:5f:3a:de:82:b2:4c:c7:12:
3a:4f:e8:ae:2a:66:06:38:e0:9e:31:e2:a6:ea:a9:c3:9a:49:
c1:81:17:c4:16:df:dc:98:ba:17:7e:ea:d5:5e:2f:23:c8:cf:
f6:99:df:8e:a0:53:2b:68:a2:8e:64:93:7d:07:03:a4:c4:26:
cb:53:50:b6:71:88:27:5b:b7:d5:e4:14:30:e7:ca:95:ac:6f:
1c:22:a5:34:cc:f4:d6:9e:b2:5a:40:7e:48:9e:5e:b6:be:d9:
59:9d:00:82:ea:a0:da:e4:fc:5d:dc:60:6e:c6:55:c2:c2:2b:
08:42:c2:be:4a:99:42:db:67:5d:b3:d9:ac:34:b5:e3:4f:1c:
1e:e1:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:27:14 2026 by rpki-client