Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/Sxw-Mo-rafDV0shPebN3B75uBh0.roa
File: Sxw-Mo-rafDV0shPebN3B75uBh0.roa (raw, json)
Hash identifier: av9Y0PMcBgIjJMb8On2oRvK2d2VAxow0GSsvpmW5Oxk=
Subject key identifier: 4B:1C:3E:32:8F:AB:69:F0:D5:D2:C8:4F:79:B3:77:07:BE:6E:06:1D
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019FD5829AD6D5C4D3DD7FEB3CB6E228BB17
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/Sxw-Mo-rafDV0shPebN3B75uBh0.roa
Signing time: Thu 06 Aug 2026 05:18:54 +0000
ROA not before: Thu 06 Aug 2026 05:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216190
IP address blocks: 195.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:82:9a:d6:d5:c4:d3:dd:7f:eb:3c:b6:e2:28:bb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 6 05:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b1c3e328fab69f0d5d2c84f79b37707be6e061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:77:0b:d4:35:5c:ca:af:79:01:5d:3d:7d:
43:c4:dc:bd:69:cc:c1:a4:93:c2:b5:85:78:40:60:
72:87:e3:c0:27:3a:f5:77:bf:78:ad:02:0a:fb:47:
75:b8:d3:2f:66:f9:aa:29:d8:38:0b:9c:bd:1d:6f:
79:e0:70:65:d1:e4:f2:a2:73:99:30:cd:14:4b:5a:
09:f4:8e:49:8c:8b:f5:47:90:83:92:4b:21:2a:e8:
50:d2:b3:27:d0:81:c8:91:60:57:f4:84:2d:de:64:
98:b7:9d:4c:7a:09:ec:b0:a8:9d:80:f2:67:7d:f9:
ec:e9:ff:b2:2b:50:22:77:09:02:e5:42:23:cb:0e:
eb:29:31:8d:95:b8:6b:23:3e:4f:cc:9f:5f:b6:aa:
f3:8f:d1:8a:9d:59:a3:28:e6:25:f7:18:df:de:8e:
f3:3a:83:7f:00:b2:2c:c9:72:ed:c3:18:e5:41:4a:
94:7c:04:fd:26:30:d8:82:f1:9c:9b:57:0c:95:95:
ba:70:08:dd:87:58:98:02:1f:30:34:12:17:d6:a9:
f1:82:e4:14:6e:42:77:79:51:8c:fc:46:58:3c:85:
75:1b:16:89:cd:82:cd:6c:61:ac:2c:a6:7d:5f:57:
fa:fb:35:1c:13:73:e5:2a:17:99:bd:cb:2b:dc:2a:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:3E:32:8F:AB:69:F0:D5:D2:C8:4F:79:B3:77:07:BE:6E:06:1D
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/Sxw-Mo-rafDV0shPebN3B75uBh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.98.0/24
Signature Algorithm: sha256WithRSAEncryption
55:47:69:85:49:ba:39:7a:d9:98:67:58:2c:bd:9e:fd:47:5c:
5b:09:cb:3d:2d:9c:8d:ae:38:4c:5b:c3:5f:4e:d5:c2:a5:e5:
9d:b6:5b:ca:8e:49:69:d7:d1:a4:05:96:99:d0:44:bc:55:63:
1a:8f:46:3e:9d:c6:a6:91:4d:c7:81:e9:39:5c:66:c2:81:f4:
1f:16:24:70:0f:ba:47:e9:10:c8:12:2d:30:45:2c:d6:85:1d:
3f:43:5d:a1:fe:4a:13:64:a1:17:da:9b:c2:de:19:e2:80:0b:
5f:1d:89:88:3a:42:a4:d0:91:e8:0e:d8:53:cf:4f:b1:18:81:
be:1f:00:8a:03:50:5a:be:84:2a:31:ee:ff:ff:e3:43:dc:bf:
23:e5:b4:ad:d7:43:ba:f5:fb:e0:88:39:0d:d0:a3:fe:3a:a5:
f0:ec:16:d9:4e:49:43:b0:f3:d0:d6:7d:54:a4:fb:85:76:be:
7a:dc:70:32:93:7b:7c:7d:62:4a:b7:1f:dd:50:6e:74:6b:b0:
77:14:79:e0:2a:81:f1:ed:9f:d1:cb:70:25:5a:fc:ce:cf:5f:
2a:81:40:d1:89:04:c6:c8:08:05:7a:f3:7b:e4:bc:85:cc:8f:
70:11:ce:3c:d8:d4:9f:0c:32:36:86:29:a1:97:d7:fd:ee:e3:
21:48:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:32:27 2026 by rpki-client