Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SwEc7-ta-8ZI3ppNVytLKxGialg.roa
File: SwEc7-ta-8ZI3ppNVytLKxGialg.roa (raw, json)
Hash identifier: iS1liT4JFeLKtTl4E+gK/d5QOGWhPX+lVlbqWVh4CfA=
Subject key identifier: 4B:01:1C:EF:EB:5A:FB:C6:48:DE:9A:4D:57:2B:4B:2B:11:A2:6A:58
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A15D886B181CD5584A37C61CD68AEAC337
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SwEc7-ta-8ZI3ppNVytLKxGialg.roa
Signing time: Wed 21 Oct 2026 08:16:23 +0000
ROA not before: Wed 21 Oct 2026 08:16:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44789
IP address blocks: 194.41.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:88:6b:18:1c:d5:58:4a:37:c6:1c:d6:8a:ea:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 21 08:16:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b011cefeb5afbc648de9a4d572b4b2b11a26a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:a3:8f:50:40:f2:ab:82:2f:a8:7c:ad:2b:
20:72:d5:5b:5a:b8:7d:4b:66:4d:00:d3:d7:8a:a1:
25:12:5a:a1:65:a1:d0:2b:2d:c9:3a:e9:85:5e:b1:
d7:ba:f7:a9:e6:37:ac:f2:8b:98:9a:08:fc:5c:b1:
13:58:e4:69:a0:02:2c:36:b6:7b:62:8a:49:07:1a:
50:15:62:f4:4c:9b:31:1e:4a:50:29:3d:4c:c2:cf:
d3:f2:66:91:52:ff:b0:8e:2e:3b:85:4a:a9:90:ab:
fa:78:bd:ec:a0:be:6d:74:7f:e6:fb:c8:af:63:4a:
42:a5:e7:37:45:c8:33:19:8a:0b:cb:b8:6a:15:e6:
76:49:a8:8e:3e:92:eb:20:75:f2:bf:20:3a:a8:d1:
15:32:6a:37:a3:82:45:ef:d2:7e:38:ab:8a:e8:9c:
90:52:48:92:7a:5e:e9:60:c3:a9:fd:cd:2d:d4:f9:
b5:88:77:95:4e:41:c1:09:01:63:01:44:ac:c2:79:
c6:23:90:ce:6f:b9:ba:f0:bc:71:80:a6:0d:66:ca:
50:99:09:c5:a9:06:56:a9:91:25:8c:f5:75:a9:21:
6b:2d:24:c4:95:58:71:bf:ae:83:f5:e5:6e:65:a2:
aa:61:78:15:53:59:97:78:2c:d8:fb:64:09:d4:c2:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:01:1C:EF:EB:5A:FB:C6:48:DE:9A:4D:57:2B:4B:2B:11:A2:6A:58
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SwEc7-ta-8ZI3ppNVytLKxGialg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.44.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:32:5c:18:b1:76:2e:fa:5c:a3:ae:1b:ec:06:8d:c7:61:52:
45:08:00:af:ff:24:77:83:fe:12:49:1a:f4:2d:d1:f8:02:74:
c0:4d:7c:f3:d1:07:21:9a:6f:c0:0b:f0:bf:77:8f:24:e7:4a:
07:a1:18:a2:1c:88:b4:fb:9f:58:60:25:c3:c7:0d:ec:28:24:
68:62:1b:aa:9b:9a:6c:63:32:c0:72:2b:8e:31:b4:02:17:05:
a4:ee:44:3b:d4:ca:e7:c1:88:a5:1c:79:d8:77:f9:b3:91:ad:
fc:25:11:a1:e9:cb:67:3d:49:b6:95:e8:d3:da:79:fa:4a:71:
75:19:61:4c:ab:8f:17:ba:3d:24:a1:4e:dc:28:a9:53:63:27:
d9:6f:5d:d1:c2:00:64:e2:01:2e:2b:f4:49:2f:e5:ce:f0:71:
3d:63:62:4b:70:5c:1e:dd:94:b1:cf:7a:7f:2f:c1:48:b1:27:
f1:0a:a0:10:53:7c:d7:da:8e:f6:fd:71:01:b5:a4:2c:dd:7e:
b0:2c:6d:24:d9:33:55:96:ec:76:80:6b:1e:9a:92:a7:3b:4a:
5e:ca:24:90:d8:f3:6b:83:24:38:60:d2:8c:16:14:35:c9:16:
4c:14:83:7f:49:6d:ca:0e:48:24:14:f9:3f:bb:d5:f2:ad:6f:
66:26:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:33:41 2026 by rpki-client