Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/rkSwSLStmRRZ1zqveECGSYJACNM.roa
File: rkSwSLStmRRZ1zqveECGSYJACNM.roa (raw, json)
Hash identifier: xsEA56Aid9LXN8BT7K8KzYn7nMFJPCMc7ICYt44LhKw=
Subject key identifier: AE:44:B0:48:B4:AD:99:14:59:D7:3A:AF:78:40:86:49:82:40:08:D3
Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial: 019A0A990996CB2AC526CD0223C071ACA281
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/rkSwSLStmRRZ1zqveECGSYJACNM.roa
Signing time: Wed 22 Oct 2025 06:26:32 +0000
ROA not before: Wed 22 Oct 2025 06:26:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43420
IP address blocks: 77.87.216.0/21 maxlen: 21
85.202.32.0/20 maxlen: 20
87.199.124.0/23 maxlen: 23
109.95.168.0/21 maxlen: 21
109.196.224.0/20 maxlen: 20
185.129.76.0/22 maxlen: 22
193.46.68.0/24 maxlen: 24
2a03:9c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:99:09:96:cb:2a:c5:26:cd:02:23:c0:71:ac:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Validity
Not Before: Oct 22 06:26:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae44b048b4ad991459d73aaf78408649824008d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:71:2c:8b:44:1a:3b:4a:ea:d6:39:4d:4f:
83:23:60:9c:00:ce:50:61:ee:df:05:6f:43:75:38:
50:2b:8c:0f:fd:93:28:28:d5:cb:ed:66:bb:53:f5:
0e:1a:a3:94:3f:d8:6e:d3:ba:aa:d6:53:2f:18:5a:
58:05:7e:66:9f:70:ab:85:a9:ce:8f:7c:4d:4c:42:
b9:ae:f0:d5:4c:7b:c2:fb:ab:ea:37:21:37:fb:7c:
18:5b:e6:bb:44:6b:4f:36:a9:fb:1b:46:4f:7e:6a:
83:0e:3c:46:87:cb:49:79:1c:09:50:f4:a7:e5:b8:
ac:78:a1:d8:62:34:81:24:0b:57:db:cd:c2:84:ac:
35:76:76:aa:a1:09:23:b4:08:14:60:3d:f3:6a:21:
5f:cb:9b:1b:88:c9:62:7a:34:4e:ea:3e:22:24:e7:
2f:ec:c4:49:43:f7:e9:e3:ef:f9:de:04:92:0c:c3:
f2:73:e3:38:7f:9b:f9:22:fd:dd:20:ea:f3:4a:5d:
7a:a3:0c:d3:42:f0:ed:73:35:6c:02:06:4b:a6:0f:
9f:1b:bf:f7:e4:a2:71:51:08:f9:99:4d:db:dd:de:
d1:27:99:99:cd:20:c5:f2:54:70:3b:9f:28:5f:b9:
2d:a9:9a:00:a2:71:11:0b:04:a9:a2:0b:ed:e2:00:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:B0:48:B4:AD:99:14:59:D7:3A:AF:78:40:86:49:82:40:08:D3
X509v3 Authority Key Identifier:
keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/rkSwSLStmRRZ1zqveECGSYJACNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.216.0/21
85.202.32.0/20
87.199.124.0/23
109.95.168.0/21
109.196.224.0/20
185.129.76.0/22
193.46.68.0/24
IPv6:
2a03:9c60::/32
Signature Algorithm: sha256WithRSAEncryption
33:6b:68:73:8d:cc:ee:13:b9:bf:1d:1c:36:80:a2:a0:6c:49:
a2:cc:12:b8:2c:7d:c2:9b:e2:a2:19:bb:38:c3:db:4c:3e:3b:
98:ff:7b:49:2e:21:7a:dd:9b:cc:22:05:b5:40:df:ad:a4:37:
7c:2f:8c:b3:4c:5d:a4:a5:8a:60:7c:ea:3d:cf:4b:52:34:26:
53:4a:68:32:0c:03:8d:b4:52:b1:7f:52:1d:8c:75:80:e6:46:
1c:5c:9e:f3:73:09:1e:2f:69:7e:30:c7:7f:ad:d9:64:62:1a:
4c:bb:c0:3f:1a:ba:08:80:18:f0:ea:8d:75:bd:9c:bb:3a:d5:
49:e8:82:5b:43:94:a1:1d:bd:eb:51:7f:fb:29:a6:a9:e7:51:
86:d0:ee:58:9a:a4:ab:86:2c:14:d8:1e:12:86:24:81:fb:5c:
3c:82:89:93:60:f1:7c:13:45:d8:d9:d9:88:2f:46:67:17:17:
56:95:f7:10:90:7d:86:46:85:d7:de:c4:16:1e:43:a6:a8:58:
1e:c3:d6:85:a8:ed:01:91:b4:95:15:21:e9:08:70:c2:73:a8:
f1:c0:b3:5e:a6:fb:30:a1:d1:6a:ca:63:5a:34:e6:64:2a:b3:
18:ce:85:be:e7:c3:87:0a:1a:65:95:e1:a1:9b:70:b0:9d:5f:
87:68:68:73
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZoKmQmWyyrFJs0CI8BxrKKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmNjOTc2ZWY5MDM4M2FjZTdmMGI0ZTA5ZTRkODE5ZWQw
ZDliNWUwHhcNMjUxMDIyMDYyNjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTQ0YjA0OGI0YWQ5OTE0NTlkNzNhYWY3ODQwODY0OTgyNDAwOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJhxLItEGjtK6tY5TU+DI2CcAM5Q
Ye7fBW9DdThQK4wP/ZMoKNXL7Wa7U/UOGqOUP9hu07qq1lMvGFpYBX5mn3CrhanO
j3xNTEK5rvDVTHvC+6vqNyE3+3wYW+a7RGtPNqn7G0ZPfmqDDjxGh8tJeRwJUPSn
5biseKHYYjSBJAtX283ChKw1dnaqoQkjtAgUYD3zaiFfy5sbiMliejRO6j4iJOcv
7MRJQ/fp4+/53gSSDMPyc+M4f5v5Iv3dIOrzSl16owzTQvDtczVsAgZLpg+fG7/3
5KJxUQj5mU3b3d7RJ5mZzSDF8lRwO58oX7ktqZoAonERCwSpogvt4gChYQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFK5EsEi0rZkUWdc6r3hAhkmCQAjTMB8GA1UdIwQY
MBaAFI78yXbvkDg6zn8LTgnk2BntDZteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEt
ZTI3NTRmNmZiNGM1LzEvcmtTd1NMU3RtUlJaMXpxdmVFQ0dTWUpBQ05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEtZTI3NTRmNmZiNGM1
LzEvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDTVfYAwQE
VcogAwQBV8d8AwQDbV+oAwQEbcTgAwQCuYFMAwQAwS5EMA0EAgACMAcDBQAqA5xg
MA0GCSqGSIb3DQEBCwUAA4IBAQAza2hzjczuE7m/HRw2gKKgbEmizBK4LH3Cm+Ki
Gbs4w9tMPjuY/3tJLiF63ZvMIgW1QN+tpDd8L4yzTF2kpYpgfOo9z0tSNCZTSmgy
DAONtFKxf1IdjHWA5kYcXJ7zcwkeL2l+MMd/rdlkYhpMu8A/GroIgBjw6o11vZy7
OtVJ6IJbQ5ShHb3rUX/7Kaap51GG0O5YmqSrhiwU2B4ShiSB+1w8gomTYPF8E0XY
2dmIL0ZnFxdWlfcQkH2GRoXX3sQWHkOmqFgew9aFqO0BkbSVFSHpCHDCc6jxwLNe
pvswodFqymNaNOZkKrMYzoW+58OHChplleGhm3CwnV+HaGhz
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:18 2025 by rpki-client