Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/SwtR7u6ONLfC-owHR7BoEbTjoU0.roa
File: SwtR7u6ONLfC-owHR7BoEbTjoU0.roa (raw, json)
Hash identifier: qs8vMTTXlLCGj7xs7kSQCN3tJdv+9wJ+v1NBFlkzuJM=
Subject key identifier: 4B:0B:51:EE:EE:8E:34:B7:C2:FA:8C:07:47:B0:68:11:B4:E3:A1:4D
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019FAD80E9AB0B398769A33BDD24AA7C1DF1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/SwtR7u6ONLfC-owHR7BoEbTjoU0.roa
Signing time: Wed 29 Jul 2026 10:52:14 +0000
ROA not before: Wed 29 Jul 2026 10:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 85.204.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:80:e9:ab:0b:39:87:69:a3:3b:dd:24:aa:7c:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jul 29 10:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b0b51eeee8e34b7c2fa8c0747b06811b4e3a14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:a9:87:0a:71:c4:11:63:e7:ba:96:73:02:
98:29:16:3e:2d:f0:a0:76:b8:bd:07:cd:ba:18:93:
80:d2:da:d8:25:29:dc:26:30:9a:b2:a4:e6:bf:29:
40:a7:0f:a8:b8:d9:5a:ec:01:3d:41:1a:46:8d:59:
be:f1:fb:48:56:87:10:38:82:6c:41:da:90:bb:8b:
15:80:30:3f:fd:87:55:aa:16:78:93:f9:af:96:d0:
db:e4:67:83:2b:31:21:14:d1:9e:2f:48:d2:9e:ef:
91:69:86:a2:6f:e3:8a:96:69:e8:7b:b3:85:e0:82:
a7:43:97:1c:0b:12:67:ae:df:67:9c:56:c4:02:c7:
4e:dc:47:18:22:a8:32:22:3c:11:d3:57:7a:d7:33:
be:02:1a:8d:76:3f:66:cf:77:34:5b:c2:19:94:0b:
3a:62:34:1a:34:02:b5:78:7d:50:2a:7c:c9:e5:f2:
a5:64:9e:fb:1d:81:44:21:78:45:c1:d3:1e:03:4d:
bb:f9:8e:bf:d7:d5:ab:40:68:fc:83:25:3e:a3:01:
0e:d0:d4:2f:8c:85:d6:dc:c9:e6:cf:f9:e4:ce:b4:
0b:c0:c0:84:8b:b8:47:51:e5:33:13:24:6a:f6:f3:
c3:9b:14:9b:df:62:e7:26:3b:9c:b3:58:0a:83:60:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0B:51:EE:EE:8E:34:B7:C2:FA:8C:07:47:B0:68:11:B4:E3:A1:4D
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/SwtR7u6ONLfC-owHR7BoEbTjoU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.142.0/24
Signature Algorithm: sha256WithRSAEncryption
40:dd:9e:ab:a3:de:9e:e2:03:10:78:f9:c8:4a:b0:3e:a9:bf:
a9:91:22:ff:45:fd:a9:1d:33:26:8e:39:e1:dd:53:d8:5a:52:
3a:1a:c3:26:43:d8:37:25:31:3e:e1:da:f1:a1:d6:59:03:30:
fe:66:73:28:6c:14:e4:26:0d:4b:f7:7f:d4:2a:34:e8:00:5e:
92:62:a2:88:92:43:f4:d4:aa:69:37:80:ff:f4:fa:48:76:66:
c1:61:02:e2:1f:8e:70:af:4a:61:57:d4:09:9f:41:be:dd:7b:
dd:bc:9f:c6:52:ac:c1:b2:33:85:a1:83:56:9f:44:35:5c:b7:
de:40:9f:1e:58:f4:fd:26:5f:13:54:a8:e2:a2:11:de:53:51:
8b:d8:53:b3:d3:0b:28:02:56:31:1a:da:eb:83:d5:79:74:fe:
bf:55:f9:de:c1:77:79:90:7f:0b:43:4e:fd:5d:6a:ad:fd:18:
7f:a7:19:0d:80:9e:e6:73:b3:ef:10:cd:2b:71:8d:d1:29:80:
43:f5:05:b6:33:e4:b3:28:eb:8f:05:da:e0:05:0c:9b:b0:3c:
d1:0d:12:da:77:ee:b3:e4:40:eb:bc:17:ac:bc:b2:1a:7b:a1:
c2:f1:22:d6:44:d8:ff:44:23:7e:17:6c:81:0f:0b:65:66:9f:
15:eb:cd:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+tgOmrCzmHaaM73SSqfB3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjYwNzI5MTA1MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjBiNTFlZWVlOGUzNGI3YzJmYThjMDc0N2IwNjgxMWI0ZTNhMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTiphwpxxBFj57qWcwKYKRY+LfCg
dri9B826GJOA0trYJSncJjCasqTmvylApw+ouNla7AE9QRpGjVm+8ftIVocQOIJs
QdqQu4sVgDA//YdVqhZ4k/mvltDb5GeDKzEhFNGeL0jSnu+RaYaib+OKlmnoe7OF
4IKnQ5ccCxJnrt9nnFbEAsdO3EcYIqgyIjwR01d61zO+AhqNdj9mz3c0W8IZlAs6
YjQaNAK1eH1QKnzJ5fKlZJ77HYFEIXhFwdMeA027+Y6/19WrQGj8gyU+owEO0NQv
jIXW3Mnmz/nkzrQLwMCEi7hHUeUzEyRq9vPDmxSb32LnJjucs1gKg2DsDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsLUe7ujjS3wvqMB0ewaBG046FNMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvU3d0Ujd1Nk9OTGZDLW93SFI3Qm9FYlRqb1UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcyOMA0G
CSqGSIb3DQEBCwUAA4IBAQBA3Z6ro96e4gMQePnISrA+qb+pkSL/Rf2pHTMmjjnh
3VPYWlI6GsMmQ9g3JTE+4drxodZZAzD+ZnMobBTkJg1L93/UKjToAF6SYqKIkkP0
1KppN4D/9PpIdmbBYQLiH45wr0phV9QJn0G+3XvdvJ/GUqzBsjOFoYNWn0Q1XLfe
QJ8eWPT9Jl8TVKjiohHeU1GL2FOz0wsoAlYxGtrrg9V5dP6/VfnewXd5kH8LQ079
XWqt/Rh/pxkNgJ7mc7PvEM0rcY3RKYBD9QW2M+SzKOuPBdrgBQybsDzRDRLad+6z
5EDrvBesvLIae6HC8SLWRNj/RCN+F2yBDwtlZp8V680Z
-----END CERTIFICATE-----
Generated at Wed Sep 9 19:38:38 2026 by rpki-client