Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ISWdRS-yYNAiM_FxWE8_cEj2als.roa
File: ISWdRS-yYNAiM_FxWE8_cEj2als.roa (raw, json)
Hash identifier: lbK4aQtXIztIsK/9+X8CjPcv4JrpQ+wQQQh459WF+R0=
Subject key identifier: 21:25:9D:45:2F:B2:60:D0:22:33:F1:71:58:4F:3F:70:48:F6:6A:5B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D6F5407716C353D5F383AFC7955CBA268
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ISWdRS-yYNAiM_FxWE8_cEj2als.roa
Signing time: Wed 08 Apr 2026 23:01:11 +0000
ROA not before: Wed 08 Apr 2026 23:01:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 194.231.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6f:54:07:71:6c:35:3d:5f:38:3a:fc:79:55:cb:a2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 8 23:01:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21259d452fb260d02233f171584f3f7048f66a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:9a:b3:f8:85:50:2e:1e:32:eb:96:6a:b8:
97:57:d5:de:19:2e:4d:fb:39:ef:09:72:b8:39:e4:
8f:79:71:4b:88:5e:9f:2c:7b:fb:1f:b7:88:d4:d9:
30:b4:31:33:44:6d:67:db:9b:8d:ab:97:fd:0b:59:
16:80:8a:f4:fc:e2:d1:c3:76:39:50:2e:47:4b:86:
0b:85:52:1e:60:79:5a:54:db:08:57:dd:47:06:c5:
2a:a0:36:4d:23:33:fb:4c:e8:d1:24:90:16:06:e3:
4a:f4:f0:78:f4:a1:96:b2:bd:46:17:00:11:a8:30:
98:e8:7c:fc:4f:29:a7:71:2a:9c:86:bf:b3:dd:fb:
ed:7b:36:ac:0a:d8:59:9f:6b:7e:85:87:5b:bc:31:
05:43:97:2f:36:94:2c:7f:fd:d6:c3:0a:af:4c:bd:
26:d1:bc:30:a9:4f:48:16:5f:00:b4:2e:a7:04:e2:
f8:bc:b8:16:ff:b5:1c:ca:89:4e:69:7f:87:2e:fd:
17:cd:c5:a9:4e:11:b5:59:68:7b:45:e1:16:a4:5f:
91:08:86:4e:a3:66:97:9c:2a:25:ff:e3:2a:fa:82:
e9:c2:a5:30:a8:6b:c3:47:55:3c:7c:4b:89:bf:a6:
86:17:3a:b8:65:d9:ac:5f:15:47:99:56:c9:04:0f:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:9D:45:2F:B2:60:D0:22:33:F1:71:58:4F:3F:70:48:F6:6A:5B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ISWdRS-yYNAiM_FxWE8_cEj2als.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.192.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:3e:0e:c8:9b:00:c8:b8:a6:8e:82:fd:39:4c:23:bf:77:30:
c7:71:a9:52:0e:9e:4c:6d:a5:b3:e5:5a:8f:40:d2:d1:4d:24:
d8:95:68:e0:f2:42:b5:16:4b:58:e9:e0:e6:7f:06:4a:d9:9c:
42:87:5f:8c:0d:89:01:f8:b2:dc:3e:7f:46:5f:69:a8:e5:03:
0e:fa:71:92:2b:87:d3:50:49:1e:50:a1:b7:c2:6c:55:52:8c:
e0:27:f6:ec:dd:e9:b3:50:b9:25:4d:fa:96:e3:fc:78:19:f8:
12:ae:05:54:14:0e:f0:f0:04:52:86:37:bd:1e:3e:47:02:72:
56:35:42:62:ff:79:d9:e9:87:5b:76:c6:a8:a4:37:90:65:1f:
83:42:a2:79:d5:f8:48:3a:a9:57:31:dd:96:f2:a8:79:bc:d5:
8f:6e:e5:ee:62:53:76:cd:33:af:0b:3c:c5:c9:94:57:1f:2d:
36:62:9c:c5:ed:e1:92:5d:5f:a3:1d:ad:a4:3e:53:fb:28:c8:
37:53:ff:d8:74:42:b7:87:3b:4c:54:03:00:33:c9:e9:d0:50:
78:16:15:23:82:db:d3:b5:dc:ba:c8:96:84:86:7e:de:c7:b9:
df:b1:9c:d1:74:ee:7f:18:05:78:ae:3b:dc:73:d4:f5:df:e3:
5c:9c:c9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:11 2026 by rpki-client