Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sw2R5nPj-fksz-lHW-2cqNlT4nI.roa
File: sw2R5nPj-fksz-lHW-2cqNlT4nI.roa (raw, json)
Hash identifier: WDc8SyohUCjsQZm6Gjcf6qlBkdjuOQ0cukIe0/irdco=
Subject key identifier: B3:0D:91:E6:73:E3:F9:F9:2C:CF:E9:47:5B:ED:9C:A8:D9:53:E2:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D54A49C048A0641D44B9A6DD7F2A87374
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sw2R5nPj-fksz-lHW-2cqNlT4nI.roa
Signing time: Fri 03 Apr 2026 18:39:27 +0000
ROA not before: Fri 03 Apr 2026 18:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200975
IP address blocks: 31.57.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:54:a4:9c:04:8a:06:41:d4:4b:9a:6d:d7:f2:a8:73:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 18:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b30d91e673e3f9f92ccfe9475bed9ca8d953e272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:fc:fb:18:0f:3f:4d:2a:df:dd:fe:60:fa:
b6:bf:b3:61:90:d6:40:c1:0b:64:4c:03:ca:5a:1f:
1e:75:58:b9:f2:8a:5c:50:c5:2d:6e:40:2f:42:7e:
5c:a8:17:3f:41:cd:bd:5b:98:92:a5:1b:f9:74:7d:
c9:28:d8:1e:13:95:bb:94:7e:a3:13:ad:01:7e:f1:
60:2d:3e:cc:07:f4:ba:16:6e:94:1c:e7:4a:a3:4e:
a1:9c:30:4d:8c:97:f2:94:30:c7:9e:7b:2c:bc:c5:
63:2b:e2:2c:87:0f:0c:ab:f4:05:66:88:e1:86:96:
a1:ae:bf:77:cc:d8:27:52:8c:c9:06:40:f2:27:50:
bc:96:27:de:49:73:5d:5f:0f:ff:73:d5:c5:f6:8d:
17:cc:92:87:7d:53:01:86:d6:a1:8f:20:ad:0a:69:
52:d7:50:cb:b6:36:e7:14:2c:93:b4:ec:ab:2d:d2:
d9:a8:ed:a3:6e:43:ae:80:91:3a:44:9d:0b:c5:36:
68:8b:22:f9:33:56:90:65:11:ff:97:ad:4f:cf:af:
09:49:22:8e:cc:1f:5a:f2:e3:99:ed:96:95:b4:eb:
fa:32:5b:6a:17:8f:56:da:59:94:d6:a5:47:8f:fa:
49:f3:11:da:ed:5b:32:a1:04:2d:66:7c:ee:ed:7d:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:91:E6:73:E3:F9:F9:2C:CF:E9:47:5B:ED:9C:A8:D9:53:E2:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sw2R5nPj-fksz-lHW-2cqNlT4nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.221.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9b:41:6e:78:c7:e0:9e:80:00:8c:11:0a:9d:34:7a:47:89:
e0:66:21:fe:4a:01:61:73:bf:bc:e6:07:a7:0f:ce:9b:04:82:
b6:e3:cd:67:c6:81:75:27:a5:3c:d1:d4:db:38:08:73:08:7a:
f3:08:61:62:57:0f:15:93:94:01:59:d4:b6:03:0f:db:9c:82:
9b:53:16:75:11:54:47:f6:26:ae:af:ff:19:41:06:eb:e9:41:
2f:45:a1:50:56:e6:82:86:ed:f1:70:29:66:96:b4:9a:48:96:
e9:02:3a:de:6f:41:db:8d:9e:23:35:88:ca:fc:ae:d6:6c:f7:
00:ed:80:05:76:dd:16:32:08:8d:8d:7b:07:99:56:7d:10:5a:
98:02:cb:00:f4:5f:db:3e:7e:79:fe:4c:db:28:64:c0:50:04:
f5:c4:81:6e:64:ec:aa:27:d6:ca:e7:60:b9:a0:67:09:49:bf:
b4:51:35:53:83:8e:3f:2f:9a:34:4f:b9:ae:a6:e9:9f:81:92:
2c:0f:a7:8f:fd:84:69:4c:01:b7:0b:1b:4f:e5:b3:02:e9:3e:
b7:05:40:67:fb:f0:0c:c9:17:8e:65:4c:67:b4:35:f7:80:18:
66:80:8c:e6:fc:ef:40:78:69:9b:3f:00:e0:a6:a3:65:db:3e:
8c:3e:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 11:43:46 2026 by rpki-client