Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SWTFevIVm81w2OQq6YZBNGb2Gp0.roa
File: SWTFevIVm81w2OQq6YZBNGb2Gp0.roa (raw, json)
Hash identifier: p3VVwOAlJx0S8FEZMWFz7YoIoDDyQAnmuZS/iMTXpvQ=
Subject key identifier: 49:64:C5:7A:F2:15:9B:CD:70:D8:E4:2A:E9:86:41:34:66:F6:1A:9D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019A167E8B5CB14C8C1722CA79996478E88A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SWTFevIVm81w2OQq6YZBNGb2Gp0.roa
Signing time: Fri 24 Oct 2025 13:53:03 +0000
ROA not before: Fri 24 Oct 2025 13:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213282
IP address blocks: 185.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:7e:8b:5c:b1:4c:8c:17:22:ca:79:99:64:78:e8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 24 13:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4964c57af2159bcd70d8e42ae986413466f61a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:e3:69:0e:2b:11:cb:71:0b:5d:30:93:f0:
17:39:8e:b9:b7:52:b9:cc:ca:ec:1c:5d:ac:f2:10:
86:cb:2f:9d:bb:82:e1:ef:0e:23:bf:f1:e8:df:51:
64:07:17:71:d9:e3:33:18:5b:63:fe:ec:30:6c:e2:
84:c5:04:fb:27:70:e7:89:66:b2:8a:ef:bd:32:25:
25:21:6c:7f:13:78:68:71:d6:e3:4d:ce:b7:3c:97:
74:4d:81:55:9b:c2:91:e1:35:b0:1e:06:82:1f:73:
fa:6b:47:c7:8f:c8:34:63:da:34:3b:5e:7d:54:a4:
8d:3b:57:b0:de:93:00:f6:e5:38:dd:13:30:38:da:
ad:99:df:f8:a5:ce:f3:e0:86:37:76:31:f4:05:7a:
98:df:d5:72:50:88:e6:32:81:97:99:75:b3:ce:7e:
c6:96:3c:00:7e:9f:b9:e6:eb:a9:30:2d:bd:23:4d:
06:2f:88:ca:7d:cb:19:1f:97:60:3e:b1:0d:95:04:
33:21:db:2d:58:04:99:72:3b:af:2b:2c:4d:05:19:
a9:51:38:b8:4a:78:f0:ec:5c:21:86:a9:b9:84:70:
ae:8e:ed:33:39:9d:2b:d5:c1:d4:81:76:80:78:2b:
3f:f3:8d:a1:05:bf:7a:2e:f9:e2:05:e1:c4:02:a1:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:C5:7A:F2:15:9B:CD:70:D8:E4:2A:E9:86:41:34:66:F6:1A:9D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SWTFevIVm81w2OQq6YZBNGb2Gp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
27:43:75:db:ea:50:81:a0:d7:13:23:4c:9f:d7:1a:b0:3d:ad:
ce:b9:48:06:ec:90:d2:c9:83:7c:89:58:43:d8:1f:a9:c8:97:
05:46:f2:a1:8f:8f:40:7c:a5:bf:44:05:2b:49:13:ba:92:3d:
0c:75:70:f7:9e:a4:78:24:a5:eb:d8:90:4e:90:0b:6d:6e:2e:
5e:ce:bf:73:d7:15:d6:83:26:fd:79:33:8f:e0:5d:fa:e4:e7:
d1:10:29:f9:f1:ce:e1:be:83:40:d5:b0:3a:dd:cb:cb:af:09:
3c:92:d3:f1:f6:85:64:d9:2b:59:5d:56:22:c0:5e:e0:eb:7d:
2d:fb:8e:84:00:b6:06:8b:fd:75:5b:9b:09:d4:7a:9e:12:94:
b6:37:34:cb:c6:01:dd:c5:6f:78:4f:09:13:91:4a:be:be:7b:
15:1b:29:27:4a:8a:7d:df:1d:be:0e:3c:e3:77:89:e4:a3:26:
f0:7f:42:c7:9b:0f:66:35:99:77:21:f4:f9:e0:95:df:57:80:
95:67:1d:96:a8:16:7a:5d:a7:d0:1c:34:ed:e1:1a:d5:69:ae:
6f:c9:69:38:47:d9:d1:e2:fa:24:7a:a7:df:76:38:d7:f0:1e:
30:10:20:8f:fe:22:17:b2:28:a5:11:a7:f1:90:b3:ba:23:12:
03:d1:72:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoWfotcsUyMFyLKeZlkeOiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUxMDI0MTM1MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTY0YzU3YWYyMTU5YmNkNzBkOGU0MmFlOTg2NDEzNDY2ZjYxYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ7jaQ4rEctxC10wk/AXOY65t1K5
zMrsHF2s8hCGyy+du4Lh7w4jv/Ho31FkBxdx2eMzGFtj/uwwbOKExQT7J3DniWay
iu+9MiUlIWx/E3hocdbjTc63PJd0TYFVm8KR4TWwHgaCH3P6a0fHj8g0Y9o0O159
VKSNO1ew3pMA9uU43RMwONqtmd/4pc7z4IY3djH0BXqY39VyUIjmMoGXmXWzzn7G
ljwAfp+55uupMC29I00GL4jKfcsZH5dgPrENlQQzIdstWASZcjuvKyxNBRmpUTi4
Snjw7Fwhhqm5hHCuju0zOZ0r1cHUgXaAeCs/842hBb96LvniBeHEAqFtvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFElkxXryFZvNcNjkKumGQTRm9hqdMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvU1dURmV2SVZtODF3Mk9RcTZZWkJOR2IyR3AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4fMA0G
CSqGSIb3DQEBCwUAA4IBAQAnQ3Xb6lCBoNcTI0yf1xqwPa3OuUgG7JDSyYN8iVhD
2B+pyJcFRvKhj49AfKW/RAUrSRO6kj0MdXD3nqR4JKXr2JBOkAttbi5ezr9z1xXW
gyb9eTOP4F365OfRECn58c7hvoNA1bA63cvLrwk8ktPx9oVk2StZXVYiwF7g630t
+46EALYGi/11W5sJ1HqeEpS2NzTLxgHdxW94TwkTkUq+vnsVGyknSop93x2+Djzj
d4nkoybwf0LHmw9mNZl3IfT54JXfV4CVZx2WqBZ6XafQHDTt4RrVaa5vyWk4R9nR
4vokeqffdjjX8B4wECCP/iIXsiilEafxkLO6IxID0XKJ
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:05 2025 by rpki-client