Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SWPC520JrlF6Auy5E5iJmuphvGo.roa
File: SWPC520JrlF6Auy5E5iJmuphvGo.roa (raw, json)
Hash identifier: 3zrhHjAifr7LTR+OOhoXMbVewqYKEGp/MaRzFzp9xEA=
Subject key identifier: 49:63:C2:E7:6D:09:AE:51:7A:02:EC:B9:13:98:89:9A:EA:61:BC:6A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019A353E407FBCAA3C06D0417F8E18A82EBA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SWPC520JrlF6Auy5E5iJmuphvGo.roa
Signing time: Thu 30 Oct 2025 13:11:03 +0000
ROA not before: Thu 30 Oct 2025 13:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213954
IP address blocks: 157.22.16.0/24 maxlen: 24
157.22.17.0/24 maxlen: 24
157.22.18.0/24 maxlen: 24
157.22.19.0/24 maxlen: 24
157.22.44.0/24 maxlen: 24
157.22.45.0/24 maxlen: 24
157.22.46.0/24 maxlen: 24
157.22.47.0/24 maxlen: 24
157.22.72.0/24 maxlen: 24
157.22.73.0/24 maxlen: 24
157.22.74.0/24 maxlen: 24
157.22.75.0/24 maxlen: 24
157.22.100.0/24 maxlen: 24
157.22.101.0/24 maxlen: 24
157.22.102.0/24 maxlen: 24
157.22.103.0/24 maxlen: 24
157.22.124.0/24 maxlen: 24
157.22.125.0/24 maxlen: 24
157.22.126.0/24 maxlen: 24
157.22.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:3e:40:7f:bc:aa:3c:06:d0:41:7f:8e:18:a8:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 30 13:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4963c2e76d09ae517a02ecb91398899aea61bc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:51:3a:41:77:c1:e8:cd:f4:be:71:56:50:
55:f5:b4:7e:19:08:26:0d:5d:cd:e2:c3:40:88:47:
ee:9c:e7:6b:8c:22:33:20:2b:e1:de:2b:3e:07:53:
92:1f:d9:64:ef:f8:01:08:f5:54:6c:95:b5:e3:2b:
17:3f:b6:1d:61:09:4c:59:d6:c9:84:c4:6d:df:08:
98:dc:44:09:cf:e0:b3:01:da:78:55:9b:0a:78:8a:
0b:3a:a3:92:9a:76:3e:90:dc:08:e2:47:cb:70:4a:
32:e2:6d:69:1d:b5:e6:38:c2:38:c6:8c:52:81:af:
cd:7a:2b:d1:09:75:94:5b:cb:e9:63:d7:80:9b:95:
da:51:f1:52:62:af:36:84:d7:59:06:59:e4:e0:97:
c9:00:7b:cc:33:9b:1b:5a:45:ad:2b:f9:3e:34:31:
19:f7:c0:f9:50:27:52:cd:92:c5:8d:fd:cc:eb:b7:
ba:1b:30:0e:0d:27:b6:ae:f2:51:86:19:e6:5a:81:
69:e8:98:be:0b:b1:5b:8a:3a:68:1f:c1:b4:95:e7:
63:7c:c8:ec:64:e6:0f:b1:f6:6e:24:6c:f3:52:4f:
cb:38:b0:7e:cd:7f:04:6f:dc:31:b3:cc:6f:ea:da:
b3:7b:ea:05:8e:73:ed:ab:05:0f:37:43:a0:20:e3:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:C2:E7:6D:09:AE:51:7A:02:EC:B9:13:98:89:9A:EA:61:BC:6A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SWPC520JrlF6Auy5E5iJmuphvGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.22.16.0/22
157.22.44.0/22
157.22.72.0/22
157.22.100.0/22
157.22.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:96:8f:22:2a:27:e4:a6:bf:4d:e0:61:82:6e:dd:37:d6:eb:
4d:ad:cc:f4:8d:f7:31:27:48:2a:5e:c4:69:54:09:53:a8:21:
c1:ae:f4:3c:99:58:91:8a:5e:14:8a:1c:ff:5c:c4:1b:57:53:
99:f6:89:21:9d:f3:c2:6c:26:f1:e9:c2:bf:e5:ac:41:f1:b0:
db:41:37:87:52:65:70:90:d6:2a:aa:97:01:94:5c:4c:f9:87:
b9:c6:2f:fd:e8:67:3d:9f:5f:72:b1:84:05:30:78:28:96:84:
58:ef:85:2c:6d:d3:77:01:6f:a0:92:7d:95:f9:2e:7a:85:f8:
34:86:2f:eb:f3:e2:8f:a5:63:d9:87:ba:51:4a:60:6f:da:dd:
ab:f4:3f:da:10:84:ba:12:c9:fe:74:8e:b8:95:3f:93:2e:8b:
e6:2c:d8:d0:1f:4f:d5:a7:be:27:84:f2:d7:92:71:e6:15:a6:
82:60:a0:ff:b7:67:d0:fb:d8:d6:c5:43:eb:38:53:c1:c3:bc:
73:5d:8b:e7:f3:23:15:92:55:0c:72:67:eb:ad:5d:c4:61:2a:
9e:e5:3c:79:1c:da:bf:fe:ef:4d:a0:3a:b3:01:7b:5e:e5:cc:
5f:be:43:af:dc:2b:8a:e4:3d:98:85:ac:f6:3f:61:df:38:97:
4c:65:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:46:35 2025 by rpki-client