Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SwMVZ__AcLq-HHHslwFSlZGHW7Y.roa
File: SwMVZ__AcLq-HHHslwFSlZGHW7Y.roa (raw, json)
Hash identifier: WAUmCP40Py8VsBUr3OrR3H/ZzjCCUoQwRkDgVYmRy/o=
Subject key identifier: 4B:03:15:67:FF:C0:70:BA:BE:1C:71:EC:97:01:52:95:91:87:5B:B6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019E878F2BBEE6DB2E8AECC481655F821AFE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SwMVZ__AcLq-HHHslwFSlZGHW7Y.roa
Signing time: Tue 02 Jun 2026 08:59:27 +0000
ROA not before: Tue 02 Jun 2026 08:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215242
IP address blocks: 2.56.111.0/24 maxlen: 24
45.94.169.0/24 maxlen: 24
45.132.183.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:8f:2b:be:e6:db:2e:8a:ec:c4:81:65:5f:82:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 2 08:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b031567ffc070babe1c71ec9701529591875bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:c7:f8:c4:e5:e0:4a:65:8a:22:1d:7b:05:
9f:c2:77:81:97:52:ec:d9:bc:4f:bc:7f:aa:08:5d:
31:1d:ad:00:8b:d5:ee:57:a8:6b:cf:f0:de:03:60:
63:cf:fb:e7:31:df:3c:68:e3:2f:e6:9c:b6:e5:9a:
75:39:f9:81:f7:48:a3:40:ca:a7:00:af:13:a7:55:
6a:f8:e9:f8:2f:89:56:04:fe:cc:44:32:22:f1:f9:
86:50:ee:d1:5a:45:22:46:8d:44:bf:03:50:f7:56:
1d:53:fb:cb:ca:91:50:c8:17:c6:db:0e:f1:52:d8:
54:0c:80:7f:89:2e:c1:d3:f8:25:48:92:7c:f0:47:
86:ce:a3:9d:92:12:df:2c:b6:fe:ef:94:8b:0f:0b:
b8:0a:21:9c:ed:50:15:e6:dd:5b:bf:db:bf:e8:76:
2a:0e:22:42:b5:d4:2c:b8:58:66:4c:65:f0:e1:71:
21:08:a4:34:aa:45:45:22:da:45:19:fc:03:9e:1e:
fb:ae:91:af:03:d0:2c:d9:50:8d:60:06:d1:d5:84:
bd:be:d7:22:62:93:73:60:f9:33:25:8d:8e:c2:37:
a8:f4:ec:90:58:eb:ed:d5:ed:31:00:29:d9:fe:44:
65:bc:f3:8e:9d:2e:8e:83:bb:7f:fc:c5:a5:00:e1:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:15:67:FF:C0:70:BA:BE:1C:71:EC:97:01:52:95:91:87:5B:B6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SwMVZ__AcLq-HHHslwFSlZGHW7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
45.94.169.0/24
45.132.183.0/24
45.138.180.0/24
45.151.3.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4d:26:b0:86:fa:f9:24:48:41:81:00:9f:a1:bb:4e:85:b7:
ea:88:5b:e9:6a:66:15:f9:52:96:bb:f2:67:ea:25:b8:9d:ff:
72:f5:d2:ee:d9:d4:69:90:56:eb:44:2e:12:39:8c:7a:a6:87:
93:72:6b:6f:39:07:23:72:8e:db:1e:19:18:5b:78:05:85:93:
76:00:72:23:dd:84:14:3e:fd:1f:82:bc:97:a0:9e:04:ed:f8:
36:e3:d4:d3:48:d7:5d:9a:1c:3f:31:4b:78:d3:30:be:82:a6:
a2:e1:e9:2b:37:cf:1e:5e:28:3a:ab:3c:9f:54:8c:1b:b3:bc:
c9:54:9a:9a:9e:a7:39:9e:ae:a5:ba:23:82:73:33:a0:5e:8f:
ed:bd:9c:f4:93:6d:1d:8d:ba:ce:11:f8:db:74:a8:b6:28:60:
23:3b:af:19:84:af:dc:47:3e:8e:0c:42:fa:39:81:7f:46:19:
d9:4e:cd:b9:5e:ef:d1:bb:20:cd:4c:c1:ef:a0:dd:4a:88:e2:
6b:e7:da:b1:a5:80:72:6a:19:ed:ba:18:29:dc:dd:2e:44:89:
a7:68:17:aa:ec:50:d7:98:ca:cb:e5:89:2e:98:88:01:a9:7d:
f3:b0:d4:db:16:c7:fe:3a:50:b0:08:9b:96:fe:3c:e5:b5:5b:
44:16:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 02:04:31 2026 by rpki-client