Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/AU-swXxl72gZyALHdqhjgdRWBx8.roa
File: AU-swXxl72gZyALHdqhjgdRWBx8.roa (raw, json)
Hash identifier: 8TRT/xoqqhzVh0IB0LZwneWwiLY/tgMy6Mb+5VJxVds=
Subject key identifier: 01:4F:AC:C1:7C:65:EF:68:19:C8:02:C7:76:A8:63:81:D4:56:07:1F
Certificate issuer: /CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Certificate serial: 019ED62F5A8E645C15A43074B3D04C075EDC
Authority key identifier: 16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/AU-swXxl72gZyALHdqhjgdRWBx8.roa
Signing time: Wed 17 Jun 2026 15:24:48 +0000
ROA not before: Wed 17 Jun 2026 15:24:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207067
IP address blocks: 188.241.21.0/24 maxlen: 24
2a00:a607::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:2f:5a:8e:64:5c:15:a4:30:74:b3:d0:4c:07:5e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Validity
Not Before: Jun 17 15:24:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=014facc17c65ef6819c802c776a86381d456071f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:ee:06:77:24:05:54:fe:55:50:e0:f6:7c:
f4:25:9d:1a:df:13:85:3d:ed:6e:03:3d:96:87:01:
70:96:d0:a5:8c:06:fb:40:4c:b2:66:81:fc:bf:e4:
26:09:05:7b:45:78:e4:5a:79:03:9b:5a:4e:a4:d9:
32:90:db:9c:70:9d:33:81:f7:5c:f1:7e:d3:fa:d4:
2c:20:ab:21:5f:dc:23:22:97:47:e8:b3:fd:36:15:
e5:ff:72:4f:33:0f:06:5c:72:0f:44:11:57:d8:9b:
2a:51:e0:70:29:ea:a9:1a:b7:e8:91:0a:a8:44:44:
c9:23:8e:b4:7a:a1:c9:1c:27:04:ee:56:94:a1:cd:
fb:8f:9a:55:ae:a7:55:83:6c:b1:13:7a:2c:96:14:
a5:e4:2b:14:d1:98:ce:43:18:ec:e7:41:c4:be:5d:
c3:ec:b9:26:17:71:80:a4:4e:d1:38:40:cf:2c:89:
0f:bd:89:de:27:eb:c6:81:82:af:f0:f5:c0:33:cb:
b4:37:4b:72:2b:90:3a:bc:d5:4f:af:b9:08:40:c5:
4a:3b:6c:56:65:f5:0e:b8:7b:99:85:7f:ef:75:a9:
24:4e:e3:17:65:0d:26:9e:42:75:b4:2a:9e:be:ed:
98:cc:d6:2f:a2:a1:f4:8c:1e:10:07:fd:ff:9c:9d:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4F:AC:C1:7C:65:EF:68:19:C8:02:C7:76:A8:63:81:D4:56:07:1F
X509v3 Authority Key Identifier:
keyid:16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/AU-swXxl72gZyALHdqhjgdRWBx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.21.0/24
IPv6:
2a00:a607::/32
Signature Algorithm: sha256WithRSAEncryption
4c:eb:4b:ea:4c:2f:5d:57:77:5f:2c:de:e3:25:49:96:47:39:
92:5e:e5:28:0c:4d:ec:2d:55:8d:53:d9:74:6c:92:45:b5:b8:
8d:04:ac:c0:78:a5:5a:ed:a6:fb:a8:a6:10:0e:15:fd:ea:92:
14:ec:3a:63:0b:b3:11:51:9e:cc:44:c3:e0:cb:05:65:19:0e:
1b:21:f0:22:95:02:fe:0b:13:67:f4:6b:e9:6b:72:3a:48:f5:
6e:7b:b5:0a:ed:52:74:87:78:e6:97:96:39:22:42:87:67:30:
47:70:6a:67:a4:39:b0:1c:2a:a0:64:fb:56:d7:3d:96:e2:c1:
e9:67:aa:15:72:4f:87:38:e7:20:b2:62:61:0a:db:ee:ba:65:
36:8b:a7:80:a5:29:0e:e4:f6:3d:1e:7b:35:1c:7f:d9:dc:9e:
63:7b:f5:bb:9c:a6:e3:8c:bb:9b:be:6f:70:9c:e8:de:f3:02:
ad:f9:40:a7:ed:dd:b8:46:f2:e8:33:76:45:e8:1e:09:1a:ad:
5c:d9:c2:12:6c:2b:7c:e4:8b:fe:d5:78:af:a7:dc:cc:e8:32:
7c:98:31:55:1c:a0:c3:c1:ba:7d:b4:15:c1:71:39:e9:78:b0:
c9:b7:a2:34:bf:90:8d:6a:19:2a:31:07:64:29:2f:7e:fc:b5:
fa:b6:50:f4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ7WL1qOZFwVpDB0s9BMB17cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmU5ZTA5MTZlY2Q0OWIyMGQ1NDJmZjNhNDEwZTQxNmI3
NTg1YjQwHhcNMjYwNjE3MTUyNDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTRmYWNjMTdjNjVlZjY4MTljODAyYzc3NmE4NjM4MWQ0NTYwNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfnuBnckBVT+VVDg9nz0JZ0a3xOF
Pe1uAz2WhwFwltCljAb7QEyyZoH8v+QmCQV7RXjkWnkDm1pOpNkykNuccJ0zgfdc
8X7T+tQsIKshX9wjIpdH6LP9NhXl/3JPMw8GXHIPRBFX2JsqUeBwKeqpGrfokQqo
RETJI460eqHJHCcE7laUoc37j5pVrqdVg2yxE3oslhSl5CsU0ZjOQxjs50HEvl3D
7LkmF3GApE7ROEDPLIkPvYneJ+vGgYKv8PXAM8u0N0tyK5A6vNVPr7kIQMVKO2xW
ZfUOuHuZhX/vdakkTuMXZQ0mnkJ1tCqevu2YzNYvoqH0jB4QB/3/nJ3bYwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAFPrMF8Ze9oGcgCx3aoY4HUVgcfMB8GA1UdIwQY
MBaAFBa+ngkW7NSbINVC/zpBDkFrdYW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnI2ZUNSYnMxSnNnMVVMX09rRU9RV3QxaGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85ODUwYzAtZDVjOS00MDFjLThjMDkt
MjBiYWJiOTc2NmM4LzEvQVUtc3dYeGw3MmdaeUFMSGRxaGpnZFJXQng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85ODUwYzAtZDVjOS00MDFjLThjMDktMjBiYWJiOTc2NmM4
LzEvRnI2ZUNSYnMxSnNnMVVMX09rRU9RV3QxaGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAvPEVMA0E
AgACMAcDBQAqAKYHMA0GCSqGSIb3DQEBCwUAA4IBAQBM60vqTC9dV3dfLN7jJUmW
RzmSXuUoDE3sLVWNU9l0bJJFtbiNBKzAeKVa7ab7qKYQDhX96pIU7DpjC7MRUZ7M
RMPgywVlGQ4bIfAilQL+CxNn9Gvpa3I6SPVue7UK7VJ0h3jml5Y5IkKHZzBHcGpn
pDmwHCqgZPtW1z2W4sHpZ6oVck+HOOcgsmJhCtvuumU2i6eApSkO5PY9Hns1HH/Z
3J5je/W7nKbjjLubvm9wnOje8wKt+UCn7d24RvLoM3ZF6B4JGq1c2cISbCt85Iv+
1Xivp9zM6DJ8mDFVHKDDwbp9tBXBcTnpeLDJt6I0v5CNahkqMQdkKS9+/LX6tlD0
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:32:47 2026 by rpki-client