Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Sw8dY632FvyhqRR5ir45CUEfVP8.roa
File: Sw8dY632FvyhqRR5ir45CUEfVP8.roa (raw, json)
Hash identifier: c+gT0t5rQChwZsqKXIhGDK3cslVsd4Cjeo82HBdLdtY=
Subject key identifier: 4B:0F:1D:63:AD:F6:16:FC:A1:A9:14:79:8A:BE:39:09:41:1F:54:FF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047BEAC70DB20288998333CDBFB214A20
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Sw8dY632FvyhqRR5ir45CUEfVP8.roa
Signing time: Fri 28 Aug 2026 09:41:13 +0000
ROA not before: Fri 28 Aug 2026 09:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 81.94.104.0/21 maxlen: 24
92.71.160.0/19 maxlen: 19
212.221.26.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:be:ac:70:db:20:28:89:98:33:3c:db:fb:21:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 09:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b0f1d63adf616fca1a914798abe3909411f54ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:f6:f4:3e:c7:91:bb:9b:50:53:6c:35:6b:
fc:7c:ba:b5:65:e8:c3:c1:e5:81:96:69:58:5f:dd:
ce:b7:f8:d0:f0:4d:e6:83:45:8f:7b:02:a2:ef:24:
49:65:c0:91:5d:c3:e1:d8:d9:c4:dc:05:77:75:11:
ca:77:3c:39:74:83:60:17:4e:e1:b0:9b:d7:e5:98:
69:8a:36:15:b5:7c:1d:d0:93:23:0b:5d:80:8e:34:
e6:40:37:f0:c8:3d:25:19:75:3b:2f:cb:18:61:32:
7a:c2:8d:67:af:9c:90:48:b7:db:1e:3d:ff:9b:b5:
6d:dd:b2:aa:14:0b:15:d1:c7:9c:71:46:d7:aa:03:
77:b8:0b:ba:b0:de:ce:ae:15:7c:72:ee:21:93:3e:
b6:93:6f:f1:08:23:2f:20:0c:79:86:26:61:0b:88:
da:4d:32:5a:a6:cd:6d:e6:62:22:92:4d:8f:d7:fa:
00:ca:6d:54:40:36:e7:85:e1:d0:02:d3:6d:db:51:
4c:9f:43:e8:9d:ae:a2:8a:bb:89:6b:28:9b:99:a6:
ad:89:e0:55:d7:e4:7b:87:2f:d7:2a:e6:8b:a2:54:
e5:bd:69:83:3f:29:59:90:b9:2a:10:5d:d1:0e:a4:
f9:d8:ab:9a:5d:c2:27:8b:79:03:a7:89:8e:b5:6b:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0F:1D:63:AD:F6:16:FC:A1:A9:14:79:8A:BE:39:09:41:1F:54:FF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Sw8dY632FvyhqRR5ir45CUEfVP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.104.0/21
92.71.160.0/19
212.221.26.0/24
212.222.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:44:e5:2e:6c:b6:bf:78:29:51:4c:e8:71:63:1a:30:b5:7f:
b9:ba:a4:22:c0:43:8e:e6:07:4a:72:96:1d:9a:4d:d1:14:4a:
8c:18:eb:ee:c5:c0:4d:54:03:2e:2d:70:7f:33:8f:7e:9f:9e:
55:36:a1:b5:b8:5a:50:87:f5:0d:a7:47:47:aa:25:c4:d3:05:
86:d3:54:cf:6c:67:b9:aa:e6:08:da:9c:95:db:01:0a:6e:75:
26:ba:ff:81:e0:24:e2:8c:ae:46:61:b9:bd:59:6c:f1:e2:90:
b2:07:6b:a2:f8:a3:f3:56:5d:3d:68:05:8e:03:c9:a5:d2:f1:
64:a2:84:48:28:d6:c6:eb:2e:14:89:77:88:f9:d4:a2:41:ec:
ae:4c:cb:1a:fa:ae:4f:0d:c8:df:57:86:b6:93:c4:10:40:e3:
95:97:78:9b:d0:e1:33:97:59:23:ef:d2:f9:23:2c:a5:31:7d:
8e:70:2f:28:c4:6b:c4:c8:eb:61:53:c2:96:26:5f:01:5b:57:
20:0a:87:f7:d3:1d:ab:9e:92:c0:a9:f7:b3:22:e8:02:94:03:
ea:f4:39:05:65:f3:d2:7e:a6:1b:d3:f3:44:29:76:ec:38:17:
c2:7a:07:3a:cf:64:ec:1a:ce:8e:7b:c1:71:94:cc:d9:e3:42:
70:70:ff:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:16:49 2026 by rpki-client