Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/z_SwExiz7mXpkKQTLVTSvb5xSNc.roa
File: z_SwExiz7mXpkKQTLVTSvb5xSNc.roa (raw, json)
Hash identifier: AJLda6mUeaXVf09PIq3MALyKlw1ATjUqopSdXuZrhbQ=
Subject key identifier: CF:F4:B0:13:18:B3:EE:65:E9:90:A4:13:2D:54:D2:BD:BE:71:48:D7
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BC2C959808A43BF322E4990E1C64
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/z_SwExiz7mXpkKQTLVTSvb5xSNc.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48891
IP address blocks: 45.133.244.0/24 maxlen: 24
185.105.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bc:2c:95:98:08:a4:3b:f3:22:e4:99:0e:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cff4b01318b3ee65e990a4132d54d2bdbe7148d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:2f:f9:0c:a0:a1:65:90:7b:26:36:6a:27:
d5:77:8b:73:a2:19:29:4c:12:d8:25:73:21:20:0e:
84:4d:85:ca:81:0c:59:14:04:d0:23:b7:16:a6:d4:
e6:41:e3:08:68:ab:1d:dc:3f:1c:f0:15:54:9b:8c:
11:18:e6:35:98:82:9a:84:7b:2c:1c:32:c6:c9:c5:
2c:6b:21:ef:d1:3f:b3:57:ef:6d:2e:da:8a:0e:9d:
72:49:a1:01:c7:0b:aa:4c:d8:e3:1b:07:82:0b:02:
92:ec:05:69:91:74:ab:a5:24:4b:d0:95:21:d4:b7:
da:a3:b6:00:b2:ca:ad:b8:e0:e9:b4:93:24:5b:3a:
cb:2e:80:68:fc:74:b1:95:c5:cb:d4:c8:e6:b1:94:
60:f8:c7:92:2e:7b:46:41:e0:50:32:6d:c4:47:3e:
d1:cd:5e:c5:96:f2:97:e5:e5:dd:f3:ab:14:b3:13:
ad:f3:cf:cd:4c:fd:92:45:c8:d7:a3:93:c4:ea:f1:
bf:e3:ed:bb:58:63:29:01:80:cc:1f:e6:46:b9:d9:
04:2d:1e:e7:05:dc:16:2e:93:87:00:88:92:44:24:
84:ca:90:06:eb:1c:f5:a1:d2:c7:be:1a:c8:9d:a2:
8e:e9:a2:a1:ef:d7:77:0c:bf:f6:61:93:1b:d6:13:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:B0:13:18:B3:EE:65:E9:90:A4:13:2D:54:D2:BD:BE:71:48:D7
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/z_SwExiz7mXpkKQTLVTSvb5xSNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.244.0/24
185.105.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ea:f3:e0:1a:5f:4c:48:45:09:2c:f1:30:29:1b:f1:84:8a:
42:15:75:83:dc:f1:08:5c:ac:7d:cc:b0:9d:2a:a4:6f:6c:72:
79:05:00:0d:e4:d7:d0:8d:46:da:48:b4:81:7e:72:69:ee:8d:
45:a9:a4:7a:7b:9b:2d:c8:5a:0e:ce:85:39:45:0a:c9:e6:82:
40:af:5c:99:e9:cc:6f:09:0f:12:a4:4b:ac:c3:13:d7:c3:b8:
76:a1:44:73:4f:71:f4:95:5e:ad:b8:76:b3:58:c7:90:0e:a4:
b0:da:5e:97:4d:ad:37:ec:78:c9:c2:6a:ca:fb:f7:c1:92:90:
68:d4:c2:2e:11:1f:22:00:ed:32:3c:c9:97:d7:a4:80:34:c9:
80:26:1b:83:f1:94:b0:77:0a:78:80:07:bc:12:bc:3c:e8:b5:
12:b8:6e:7d:18:cd:c0:9a:b7:2f:44:5c:a3:e1:e0:f5:d2:75:
c0:99:d6:7d:55:16:6e:61:e2:96:d3:4c:5c:e1:c4:ae:e8:59:
9f:c3:14:01:22:b0:6b:74:a9:3d:ab:0d:91:0c:dd:31:2a:33:
6a:d0:f8:7f:57:45:9b:f6:31:f8:55:18:61:ff:e1:20:2a:c3:
5b:da:2d:82:75:97:62:3b:c8:3c:e5:e0:ef:fb:d8:f0:f2:b1:
9e:17:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:28 2026 by rpki-client