Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5swB1JkT1VyW8pJXYfhhtWuqbUk.roa
File: 5swB1JkT1VyW8pJXYfhhtWuqbUk.roa (raw, json)
Hash identifier: P4bpo9eoBW3ismZvtEHI2xgozarCbgRUUYsWF6JkP1Y=
Subject key identifier: E6:CC:01:D4:99:13:D5:5C:96:F2:92:57:61:F8:61:B5:6B:AA:6D:49
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019F26D6E5EE54E716CDFC3B52AECA6996AD
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5swB1JkT1VyW8pJXYfhhtWuqbUk.roa
Signing time: Fri 03 Jul 2026 07:17:25 +0000
ROA not before: Fri 03 Jul 2026 07:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138719
IP address blocks: 185.220.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:d6:e5:ee:54:e7:16:cd:fc:3b:52:ae:ca:69:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 3 07:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6cc01d49913d55c96f2925761f861b56baa6d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:5b:34:6f:d1:ba:88:66:68:ee:6a:44:0c:
61:68:84:a9:0a:c4:30:4b:b6:b2:13:63:a9:b9:5b:
79:82:2f:1a:2a:8b:55:13:e7:ca:c1:80:92:78:18:
34:b7:5d:5b:6c:ee:02:2f:b7:53:99:98:b6:0e:b5:
f2:aa:ed:52:ce:3d:cd:0c:9a:25:0c:6e:60:49:ea:
31:a1:cc:5b:89:0a:d1:41:f2:07:e3:0f:8c:4d:c4:
28:c8:cd:e6:3a:e5:21:17:d3:e2:80:b5:cd:e0:ff:
86:5f:9a:e1:9e:be:2a:a0:b8:c3:8b:c7:f0:fe:92:
8e:c5:fc:8b:fa:a4:56:4e:c7:bb:68:d1:d2:ec:3d:
d4:3f:d8:96:b5:43:95:11:32:53:fa:b2:7a:eb:86:
aa:ed:7a:97:64:ec:9f:19:5c:7f:16:94:0f:21:78:
d3:75:67:5c:96:29:f7:ad:a3:61:6e:79:33:99:13:
b0:2e:03:f3:0a:5c:7f:15:e1:3b:12:21:02:60:0f:
ed:cb:a1:c6:b6:1b:e7:fa:8c:12:ad:c5:2d:cc:fd:
05:8e:0a:91:eb:ac:9c:bb:c2:bf:d1:00:69:ad:19:
95:0d:63:cd:08:fb:d9:82:ad:1c:8f:4a:36:c4:3a:
18:88:9f:10:8e:32:8e:ad:8d:2d:d6:ec:cd:50:6a:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:01:D4:99:13:D5:5C:96:F2:92:57:61:F8:61:B5:6B:AA:6D:49
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5swB1JkT1VyW8pJXYfhhtWuqbUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.199.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b7:df:e7:80:11:34:e3:3a:a0:69:13:2c:f3:c7:b4:70:ee:
94:48:30:cf:0c:ee:eb:1b:48:78:d3:98:3f:46:fe:62:d6:f2:
5d:c9:80:61:a4:b3:be:09:9f:ed:20:81:20:2b:26:cd:35:8f:
e1:6c:a5:4a:9e:cc:13:18:f6:a4:15:5f:d8:46:36:81:40:c8:
2c:7b:dd:f9:2d:88:f2:8b:ec:0a:d5:d5:a9:12:bf:ef:c5:77:
ef:42:e7:59:f4:85:99:b8:2c:21:3d:a3:a2:a2:25:5c:4f:65:
e6:16:d7:70:fd:76:98:9f:1c:c1:c6:82:8a:cc:34:ea:8b:94:
29:ee:66:80:f5:d4:a0:af:37:e0:aa:45:be:f5:c2:33:f3:ff:
eb:61:1f:4a:f4:13:42:a0:24:a2:06:18:fd:d9:f8:23:88:f2:
62:ea:3c:e3:6b:b9:70:4f:47:48:78:91:ab:3b:35:29:2e:e4:
e6:eb:f2:9d:29:b1:da:81:23:b8:22:aa:7e:7e:a9:23:91:48:
66:93:3e:7c:8b:24:fb:3b:8f:21:db:34:d2:c2:29:12:f1:6f:
cd:55:a9:ed:54:8b:28:57:b4:69:ce:5f:9f:50:fc:ee:2e:ca:
1d:03:54:b1:14:05:90:e4:b0:0c:64:5e:d8:83:67:03:85:09:
3b:c7:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:35 2026 by rpki-client