Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/sXywAJPQehkX1g8ECCZJdITzLYQ.roa
File: sXywAJPQehkX1g8ECCZJdITzLYQ.roa (raw, json)
Hash identifier: hR+8uJ6ekanBnzUMm4s8hR/ynV+UmDevvGRnAGbC8cc=
Subject key identifier: B1:7C:B0:00:93:D0:7A:19:17:D6:0F:04:08:26:49:74:84:F3:2D:84
Certificate issuer: /CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Certificate serial: 019F2369430AEF6781F433E41B74EC673060
Authority key identifier: 7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/sXywAJPQehkX1g8ECCZJdITzLYQ.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209336
IP address blocks: 193.42.44.0/22 maxlen: 22
2a0d:de40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:0a:ef:67:81:f4:33:e4:1b:74:ec:67:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b17cb00093d07a1917d60f040826497484f32d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:40:bf:26:35:4c:fd:49:bd:f5:e7:86:ad:38:
02:0e:e1:53:29:52:5a:ac:49:7c:dd:b9:9f:09:82:
bc:63:85:ac:26:63:ba:28:6b:9f:3c:ab:e2:b3:39:
74:6a:fa:1c:e8:39:e7:e2:80:89:e4:b8:c1:15:ef:
42:da:cf:93:ae:6d:0c:93:8b:7e:ce:4d:df:af:03:
cb:1c:ab:a6:95:ae:12:c3:60:e6:f7:50:82:29:17:
24:3e:61:d4:dd:bb:99:48:57:b0:2e:56:4b:52:63:
ac:78:3a:ef:25:ea:a4:95:4e:a0:41:77:30:37:c0:
d3:20:63:57:5f:43:85:71:ef:9e:20:9e:2a:4b:d3:
10:60:d8:79:7d:88:57:29:23:cd:73:c5:fc:fd:98:
52:bc:40:a7:29:b8:50:67:5a:12:f2:17:5a:1f:20:
98:e0:f6:84:96:8b:5c:af:a6:ee:4c:c4:c5:ad:c4:
9e:2e:b5:46:ed:3e:f0:2d:fd:13:9b:1c:9d:ff:ac:
93:4b:b1:8d:4c:0a:bf:e4:a7:ad:05:4b:d4:7f:b2:
16:aa:e5:d9:99:4b:75:5c:44:1c:df:0f:b5:e0:67:
43:8f:6a:0f:ee:4b:27:de:40:47:4e:cd:cc:37:e8:
e1:cd:b9:29:20:2c:17:1f:58:c7:80:c8:5d:9d:65:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:B0:00:93:D0:7A:19:17:D6:0F:04:08:26:49:74:84:F3:2D:84
X509v3 Authority Key Identifier:
keyid:7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/sXywAJPQehkX1g8ECCZJdITzLYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.44.0/22
IPv6:
2a0d:de40:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ae:24:4a:ca:b9:fd:a4:79:4d:87:9e:1e:4a:04:47:83:4f:
cb:57:1c:68:57:03:b2:b6:6a:7a:f0:7f:40:a1:89:b8:e9:6e:
4f:bf:4d:8d:d1:63:f7:33:79:ed:ea:f5:e8:46:9f:0e:a0:bd:
40:27:1d:43:83:56:84:05:99:86:01:59:b8:18:6c:45:2c:04:
b1:df:06:6b:07:99:c1:27:55:7d:73:e6:fc:9c:e6:3d:9c:c6:
5b:33:19:5e:0b:d2:1d:b7:99:8c:38:08:28:8c:3d:18:5c:77:
52:65:ec:88:e5:8f:d3:a9:cc:0f:f9:f3:82:d9:a3:50:07:90:
04:be:34:e5:08:2a:8e:c9:fb:9a:9f:db:54:41:da:a4:fb:48:
53:ad:f5:6b:3a:94:e8:8c:2f:e1:ff:a4:85:74:be:dc:2e:cb:
cd:62:b4:f1:af:51:5b:55:31:55:2e:b5:ed:b6:92:1a:fc:bc:
82:77:f4:4b:85:7a:5e:ab:73:e8:59:91:11:27:ea:bf:da:3b:
f1:93:71:35:41:92:3c:7e:04:75:03:49:a6:58:f7:b8:bf:12:
f2:6a:ad:9b:b9:8f:a0:9e:2d:fb:9b:47:06:7b:88:a1:8c:37:
d6:2a:1e:53:51:32:b8:ba:40:31:27:c3:bb:d9:5f:72:3a:70:
11:f0:64:35
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaUMK72eB9DPkG3TsZzBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGNjYmExYzA1ZWY4NjYwYzRkODk4Nzk3NGFhZDAzOGJj
MmI0MzAwHhcNMjYwNzAyMTUxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTdjYjAwMDkzZDA3YTE5MTdkNjBmMDQwODI2NDk3NDg0ZjMyZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UC/JjVM/Um99eeGrTgCDuFTKVJa
rEl83bmfCYK8Y4WsJmO6KGufPKviszl0avoc6Dnn4oCJ5LjBFe9C2s+Trm0Mk4t+
zk3frwPLHKumla4Sw2Dm91CCKRckPmHU3buZSFewLlZLUmOseDrvJeqklU6gQXcw
N8DTIGNXX0OFce+eIJ4qS9MQYNh5fYhXKSPNc8X8/ZhSvECnKbhQZ1oS8hdaHyCY
4PaElotcr6buTMTFrcSeLrVG7T7wLf0Tmxyd/6yTS7GNTAq/5KetBUvUf7IWquXZ
mUt1XEQc3w+14GdDj2oP7ksn3kBHTs3MN+jhzbkpICwXH1jHgMhdnWXRHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLF8sACT0HoZF9YPBAgmSXSE8y2EMB8GA1UdIwQY
MBaAFHxMy6HAXvhmDE2Jh5dKrQOLwrQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzIt
YTUzNzcyYjAxY2IyLzEvc1h5d0FKUFFlaGtYMWc4RUNDWkpkSVR6TFlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzItYTUzNzcyYjAxY2Iy
LzEvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwSosMA8E
AgACMAkDBwAqDd5AAAEwDQYJKoZIhvcNAQELBQADggEBAG+uJErKuf2keU2Hnh5K
BEeDT8tXHGhXA7K2anrwf0Chibjpbk+/TY3RY/czee3q9ehGnw6gvUAnHUODVoQF
mYYBWbgYbEUsBLHfBmsHmcEnVX1z5vyc5j2cxlszGV4L0h23mYw4CCiMPRhcd1Jl
7Ijlj9OpzA/584LZo1AHkAS+NOUIKo7J+5qf21RB2qT7SFOt9Ws6lOiML+H/pIV0
vtwuy81itPGvUVtVMVUute22khr8vIJ39EuFel6rc+hZkREn6r/aO/GTcTVBkjx+
BHUDSaZY97i/EvJqrZu5j6CeLfubRwZ7iKGMN9YqHlNRMri6QDEnw7vZX3I6cBHw
ZDU=
-----END CERTIFICATE-----
Generated at Sun Jul 12 01:32:50 2026 by rpki-client