Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SWFOT_4BOEIgQVfeY5m_SFrQMpg.roa
File: SWFOT_4BOEIgQVfeY5m_SFrQMpg.roa (raw, json)
Hash identifier: E4xtRmt+iqoP/usd0HYXFAYGDSyX/WMscGnaPkRnNVA=
Subject key identifier: 49:61:4E:4F:FE:01:38:42:20:41:57:DE:63:99:BF:48:5A:D0:32:98
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A0FC73ED0DBECDFAE3D84AD33080BCBB79
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SWFOT_4BOEIgQVfeY5m_SFrQMpg.roa
Signing time: Fri 02 Oct 2026 11:50:50 +0000
ROA not before: Fri 02 Oct 2026 11:50:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209706
IP address blocks: 2a0c:9a40:8f30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:73:ed:0d:be:cd:fa:e3:d8:4a:d3:30:80:bc:bb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 2 11:50:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49614e4ffe013842204157de6399bf485ad03298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:08:69:bf:a4:a6:f7:e7:02:f4:95:ca:8a:
bd:d6:5b:98:5e:45:71:8c:6f:8d:c6:d4:75:1f:81:
63:95:6c:49:6a:05:c8:f5:a4:cc:26:49:e5:dc:ea:
aa:41:f3:94:3e:d9:61:ab:15:dc:b4:6a:d7:54:c3:
5d:67:b8:72:ed:56:81:8f:55:98:03:9e:bd:75:35:
55:eb:ec:98:66:f4:75:e2:f0:d7:f2:8b:a4:20:a0:
12:69:28:96:0f:45:28:43:71:b6:2a:c0:d5:e7:c8:
20:bc:89:d0:a7:ce:e3:dd:82:8c:39:58:ff:ec:c4:
83:29:be:da:20:78:4c:8d:69:a3:53:ad:a5:67:83:
23:62:4a:b4:5c:4c:bd:23:69:d2:d6:25:16:98:93:
e1:df:5a:09:fd:76:c9:f3:77:4c:23:97:3d:0e:b6:
c1:d2:68:71:c8:b0:24:50:c1:48:c6:75:fb:66:44:
77:f1:7a:44:5c:33:1d:bb:08:3b:bf:14:19:d5:a5:
2e:61:42:f5:7d:8f:ee:74:b5:31:a3:48:ea:1a:3d:
a4:a3:0d:fc:be:60:9c:95:a2:4a:b9:94:c3:3e:de:
c4:b9:a8:76:93:b3:4d:b3:68:27:c7:a5:e2:1b:44:
85:e9:ee:86:79:84:6b:47:f9:e3:6c:07:c9:55:7f:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:61:4E:4F:FE:01:38:42:20:41:57:DE:63:99:BF:48:5A:D0:32:98
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SWFOT_4BOEIgQVfeY5m_SFrQMpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8f30::/44
Signature Algorithm: sha256WithRSAEncryption
58:bd:84:d4:98:c5:93:0b:ed:12:d5:50:34:9e:af:b6:5f:6d:
8f:91:6a:c4:e0:e9:ae:da:52:c7:09:69:aa:e8:87:2f:b9:98:
46:21:c6:19:f5:b4:60:90:43:ae:77:65:35:37:10:c3:67:75:
f5:e0:5c:14:35:01:23:ce:6e:02:52:f1:39:73:fc:2e:21:d7:
1c:4d:de:0a:55:a9:ee:66:c3:74:02:90:de:65:b4:d4:82:48:
3f:ea:71:f4:b8:57:37:ed:4e:4f:17:1e:d2:fd:b9:85:9d:cb:
aa:6e:3f:80:89:63:c7:71:33:1b:9a:90:94:bc:a6:8d:05:b4:
a9:df:f2:31:40:2d:90:dc:70:8a:c5:0a:e3:38:c7:25:8b:0d:
48:30:97:00:16:55:ee:2a:62:80:7e:b3:62:1b:36:3c:df:47:
67:28:39:5e:c3:7f:8d:75:e3:a5:f9:da:2e:6d:10:3e:36:9b:
3e:5b:fa:42:47:d9:be:8b:28:2b:f5:84:0e:48:19:19:13:fb:
53:02:cf:34:1b:41:15:e6:f5:14:23:93:0b:42:6e:4d:7d:c2:
c6:d2:e1:4b:7d:3d:1b:6d:c7:03:9b:ca:a7:46:af:be:ea:29:
78:c2:67:e5:6c:84:13:fd:ec:eb:18:7c:be:df:59:a1:d1:0c:
01:7a:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:31:13 2026 by rpki-client