Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SgwfnYNKiMulsTVxz-0VILbbbCw.roa
File: SgwfnYNKiMulsTVxz-0VILbbbCw.roa (raw, json)
Hash identifier: KTNN2J/SNvg/z6M2Mqhgs/rGVYhXAkzZd4Ajf4lfLa8=
Subject key identifier: 4A:0C:1F:9D:83:4A:88:CB:A5:B1:35:71:CF:ED:15:20:B6:DB:6C:2C
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019E49116448C8B941BE39ABCE08468C1B32
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SgwfnYNKiMulsTVxz-0VILbbbCw.roa
Signing time: Thu 21 May 2026 05:45:36 +0000
ROA not before: Thu 21 May 2026 05:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48225
IP address blocks: 5.101.47.0/24 maxlen: 24
5.189.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:11:64:48:c8:b9:41:be:39:ab:ce:08:46:8c:1b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 21 05:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a0c1f9d834a88cba5b13571cfed1520b6db6c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:53:51:42:4f:f7:17:45:94:2a:8f:89:d4:
ed:0d:00:fe:c0:dc:fc:ff:5f:4b:fd:7b:b1:ee:32:
41:fa:15:7d:8b:74:0e:0b:4c:f1:d0:ab:f3:84:56:
f6:64:69:0e:53:a0:33:64:1d:22:c6:ab:25:c0:bb:
8d:d2:95:ac:ca:69:28:9a:7d:da:5a:8a:2d:eb:da:
65:ba:8d:e4:42:6f:b5:98:f7:8e:bf:3f:38:06:40:
13:f3:19:37:e9:24:9a:0d:54:e5:ed:2a:ee:2b:76:
f9:d1:90:69:55:be:95:b1:b2:7a:29:0f:ab:e9:15:
50:5f:ec:08:b1:40:aa:c2:b3:d3:2f:a7:c2:5b:8b:
b2:7c:2b:93:4c:e5:1d:5b:5c:bb:1a:99:0a:b0:ce:
71:f6:13:a9:36:15:0d:a3:95:99:1b:72:5c:e7:66:
a8:d0:9f:bf:aa:d3:49:6d:5d:87:73:c0:4d:a9:a0:
71:49:6d:83:5c:32:47:93:08:e6:5c:42:64:c5:0c:
4c:71:94:80:4f:72:6d:74:71:db:0a:7c:28:15:2f:
08:7d:5c:29:98:c8:cb:b2:92:6e:cb:07:56:b2:65:
9a:4c:82:87:28:a5:35:67:2e:d0:32:64:ee:9e:de:
c4:3d:4c:b4:b5:84:c2:b8:c9:af:4e:df:73:b0:0c:
8b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:1F:9D:83:4A:88:CB:A5:B1:35:71:CF:ED:15:20:B6:DB:6C:2C
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SgwfnYNKiMulsTVxz-0VILbbbCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.47.0/24
5.189.219.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5d:0e:6c:e1:0e:95:81:30:6e:77:24:c7:55:1d:fa:12:8e:
f5:3d:fc:eb:11:30:59:7a:57:8d:5c:6b:25:fb:4f:88:9e:d5:
dd:65:8c:ca:1b:df:13:75:a2:45:71:31:91:48:b3:8e:b3:54:
eb:fa:62:b8:0d:26:03:b2:d8:11:07:ff:37:5c:af:c9:57:26:
a2:63:ec:db:9d:90:ff:4b:6a:9a:1b:67:91:01:3b:ae:3f:d0:
24:b0:4c:1b:4f:f2:8c:c6:c2:a1:b9:3e:54:9b:f2:c9:8e:1a:
ca:5f:ac:a1:7c:a7:5e:d7:2b:de:0d:c3:43:ef:e3:42:00:8d:
8f:25:53:f2:19:1a:82:71:58:73:c9:f2:35:7e:84:bc:29:8f:
b0:06:59:08:e1:24:43:5b:57:06:c3:f8:f8:70:c9:ca:c4:1f:
77:98:0b:89:6d:3c:33:b7:f0:01:3e:72:ed:3c:1f:8c:b4:66:
5a:f2:41:9a:a4:ae:f8:ed:1b:31:83:c5:f9:cc:6c:66:99:3d:
fa:f3:ff:e9:2f:22:fd:a0:e1:09:db:cc:38:4f:94:53:2d:fd:
5b:44:30:d4:2a:d0:35:f2:fa:3d:de:c4:c8:c6:5c:ec:65:20:
77:be:3c:b4:8a:c7:2b:b3:8c:c3:98:85:a5:9c:8e:a9:0c:aa:
32:bb:b7:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5JEWRIyLlBvjmrzghGjBsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjYwNTIxMDU0NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTBjMWY5ZDgzNGE4OGNiYTViMTM1NzFjZmVkMTUyMGI2ZGI2YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RJTUUJP9xdFlCqPidTtDQD+wNz8
/19L/Xux7jJB+hV9i3QOC0zx0KvzhFb2ZGkOU6AzZB0ixqslwLuN0pWsymkomn3a
Woot69pluo3kQm+1mPeOvz84BkAT8xk36SSaDVTl7SruK3b50ZBpVb6VsbJ6KQ+r
6RVQX+wIsUCqwrPTL6fCW4uyfCuTTOUdW1y7GpkKsM5x9hOpNhUNo5WZG3Jc52ao
0J+/qtNJbV2Hc8BNqaBxSW2DXDJHkwjmXEJkxQxMcZSAT3JtdHHbCnwoFS8IfVwp
mMjLspJuywdWsmWaTIKHKKU1Zy7QMmTunt7EPUy0tYTCuMmvTt9zsAyLQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEoMH52DSojLpbE1cc/tFSC222wsMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvU2d3Zm5ZTktpTXVsc1RWeHotMFZJTGJiYkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWUvAwQA
Bb3bMA0GCSqGSIb3DQEBCwUAA4IBAQCRXQ5s4Q6VgTBudyTHVR36Eo71PfzrETBZ
eleNXGsl+0+IntXdZYzKG98TdaJFcTGRSLOOs1Tr+mK4DSYDstgRB/83XK/JVyai
Y+zbnZD/S2qaG2eRATuuP9AksEwbT/KMxsKhuT5Um/LJjhrKX6yhfKde1yveDcND
7+NCAI2PJVPyGRqCcVhzyfI1foS8KY+wBlkI4SRDW1cGw/j4cMnKxB93mAuJbTwz
t/ABPnLtPB+MtGZa8kGapK747Rsxg8X5zGxmmT368//pLyL9oOEJ28w4T5RTLf1b
RDDUKtA18vo93sTIxlzsZSB3vjy0iscrs4zDmIWlnI6pDKoyu7eK
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:38:59 2026 by rpki-client